VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

matkin spomalený PC

https://forum.viry.cz:443/viewtopic.php?t=145687

Stránka 2 z 2

Re: matkin spomalený PC

Napsal: 20 srp 2015 17:15
od mamin
Logfile of random's system information tool 1.10 (written by random/random)
Run by ACER at 2015-08-20 18:13:26
Microsoft Windows 7 Starter Service Pack 1
System drive C: has 169 GB (76%) free of 221 GB
Total RAM: 1013 MB (17% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:13:48, on 20. 8. 2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17937)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\EgisTec IPS\PmmUpdate.exe
C:\Program Files\EgisTec MyWinLocker\x86\mwlDaemon.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Bluetooth Suite\BtvStack.exe
C:\Program Files\Bluetooth Suite\AthBtTray.exe
C:\Program Files\Acer\Android Manager\iSync.exe
C:\Program Files\Acer\Updater\iUpdate.exe
C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\EgisTec IPS\EgisUpdate.exe
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\system32\GWX\GWX.exe
C:\Program Files\Acer\Acer VCM\AcerVCM.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\igfxext.exe
C:\Program Files\Launch Manager\LMworker.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\ACER\Desktop\RSIT.exe
C:\Program Files\trend micro\ACER.exe
C:\Windows\system32\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5w47n2v217
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://mail.google.com/mail/u/0/?pli=1#inbox
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: Pomocník pri prihlasovaní v sieti Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files\EgisTec IPS\EgisUpdate.exe" -d
O4 - HKLM\..\Run: [EgisTecPMMUpdate] "C:\Program Files\EgisTec IPS\PmmUpdate.exe"
O4 - HKLM\..\Run: [mwlDaemon] C:\Program Files\EgisTec MyWinLocker\x86\mwlDaemon.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AtherosBtStack] "C:\Program Files\Bluetooth Suite\BtvStack.exe"
O4 - HKLM\..\Run: [AthBtTray] "C:\Program Files\Bluetooth Suite\AthBtTray.exe"
O4 - HKLM\..\Run: [iSyncData] C:\Program Files\Acer\Android Manager\iSync.exe
O4 - HKLM\..\Run: [AndroidManager] C:\Program Files\Acer\Android Manager\AML.exe
O4 - HKLM\..\Run: [iPatchData] C:\Program Files\Acer\Updater\iUpdate.exe
O4 - HKLM\..\Run: [Acer ePower Management] C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Acer VCM.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_70C5B381380DB17F.dll/cmsidewiki.html
O9 - Extra button: Pridať do blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Pridať do blogu v programe Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files\Bluetooth Suite\adminservice.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files\Launch Manager\dsiwmis.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files\Acer\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files\EgisTec MyWinLocker\x86\MWLService.exe
O23 - Service: Raw Socket Service (RS_Service) - Acer Incorporated - C:\Program Files\Acer\Acer VCM\RS_Service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe

--
End of file - 8521 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineCore1d08f4d82e30158.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08 77424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-08-16 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v sieti Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-16 172640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"LManager"=C:\Program Files\Launch Manager\LManager.exe [2010-08-10 975952]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2010-06-08 284696]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-08-03 9398888]
"SuiteTray"=C:\Program Files\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2010-05-27 337264]
"EgisUpdate"=C:\Program Files\EgisTec IPS\EgisUpdate.exe [2010-03-11 201584]
"EgisTecPMMUpdate"=C:\Program Files\EgisTec IPS\PmmUpdate.exe [2010-03-11 407920]
"mwlDaemon"=C:\Program Files\EgisTec MyWinLocker\x86\mwlDaemon.exe [2010-05-27 349552]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2013-05-08 41056]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-06-16 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-06-16 173592]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-06-16 150552]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-02-05 1692968]
"AtherosBtStack"=C:\Program Files\Bluetooth Suite\BtvStack.exe [2010-05-26 470176]
"AthBtTray"=C:\Program Files\Bluetooth Suite\AthBtTray.exe [2010-05-26 289952]
"iSyncData"=C:\Program Files\Acer\Android Manager\iSync.exe [2010-01-08 407416]
"AndroidManager"=C:\Program Files\Acer\Android Manager\AML.exe [2010-01-08 508280]
"iPatchData"=C:\Program Files\Acer\Updater\iUpdate.exe [2010-07-21 492096]
"Acer ePower Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2010-06-11 715296]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2014-02-24 5075104]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
""= []
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2015-06-08 334896]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Acer VCM.lnk - C:\Program Files\Acer\Acer VCM\AcerVCM.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-04-19 218112]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"midi1"=wdmaud.drv
"msacm.siren"=sirenacm.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux3"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-08-20 10:33:16 ----D---- C:\FRST
2015-08-19 08:58:28 ----A---- C:\Windows\system32\mshtml.dll
2015-08-17 22:01:57 ----D---- C:\ProgramData\Malwarebytes
2015-08-17 09:47:37 ----A---- C:\AdwCleaner[C3].txt
2015-08-17 09:32:58 ----A---- C:\AdwCleaner[S3].txt
2015-08-17 03:57:24 ----D---- C:\Program Files\trend micro
2015-08-17 03:57:23 ----D---- C:\rsit
2015-08-17 00:01:27 ----D---- C:\Program Files\Microsoft Works
2015-08-17 00:00:50 ----D---- C:\Program Files\Microsoft Visual Studio
2015-08-16 23:54:59 ----D---- C:\Windows\SHELLNEW
2015-08-16 23:09:29 ----A---- C:\Windows\system32\npdeployJava1.dll
2015-08-16 23:09:29 ----A---- C:\Windows\system32\deployJava1.dll
2015-08-16 23:07:42 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2015-08-16 23:06:37 ----D---- C:\Program Files\Common Files\Java
2015-08-16 21:56:06 ----D---- C:\Program Files\pidgin-otr
2015-08-16 21:48:40 ----D---- C:\Users\ACER\AppData\Roaming\.purple
2015-08-16 21:39:29 ----D---- C:\Program Files\Pidgin
2015-08-12 22:12:22 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-12 21:56:39 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-08-12 21:56:39 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-08-12 21:56:38 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-08-12 21:56:35 ----A---- C:\Windows\system32\ie4uinit.exe
2015-08-12 21:56:34 ----A---- C:\Windows\system32\iernonce.dll
2015-08-12 21:56:32 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-08-12 21:56:31 ----A---- C:\Windows\system32\iedkcs32.dll
2015-08-12 21:56:30 ----A---- C:\Windows\system32\urlmon.dll
2015-08-12 21:56:27 ----A---- C:\Windows\system32\vbscript.dll
2015-08-12 21:56:27 ----A---- C:\Windows\system32\jsproxy.dll
2015-08-12 21:56:25 ----A---- C:\Windows\system32\jscript9diag.dll
2015-08-12 21:56:25 ----A---- C:\Windows\system32\ieUnatt.exe
2015-08-12 21:56:24 ----A---- C:\Windows\system32\ieapfltr.dll
2015-08-12 21:56:24 ----A---- C:\Windows\system32\dxtmsft.dll
2015-08-12 21:56:23 ----A---- C:\Windows\system32\msfeeds.dll
2015-08-12 21:56:15 ----A---- C:\Windows\system32\msrating.dll
2015-08-12 21:56:13 ----A---- C:\Windows\system32\iesetup.dll
2015-08-12 21:56:07 ----A---- C:\Windows\system32\jscript.dll
2015-08-12 21:56:07 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-08-12 21:56:05 ----A---- C:\Windows\system32\wininet.dll
2015-08-12 21:55:59 ----A---- C:\Windows\system32\dxtrans.dll
2015-08-12 21:55:57 ----A---- C:\Windows\system32\ieui.dll
2015-08-12 21:55:56 ----A---- C:\Windows\system32\ieframe.dll
2015-08-12 21:55:49 ----A---- C:\Windows\system32\mshtmled.dll
2015-08-12 21:55:43 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-08-12 21:55:41 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-08-12 21:55:39 ----A---- C:\Windows\system32\jscript9.dll
2015-08-12 21:55:34 ----A---- C:\Windows\system32\iertutil.dll
2015-08-12 21:52:34 ----A---- C:\Windows\system32\generaltel.dll
2015-08-12 21:52:33 ----A---- C:\Windows\system32\devinv.dll
2015-08-12 21:52:33 ----A---- C:\Windows\system32\appraiser.dll
2015-08-12 21:52:33 ----A---- C:\Windows\system32\acmigration.dll
2015-08-12 21:52:32 ----A---- C:\Windows\system32\invagent.dll
2015-08-12 21:52:32 ----A---- C:\Windows\system32\aeinv.dll
2015-08-12 21:52:29 ----A---- C:\Windows\system32\CompatTelRunner.exe
2015-08-12 21:52:29 ----A---- C:\Windows\system32\aepdu.dll
2015-08-12 21:52:13 ----A---- C:\Windows\system32\mstscax.dll
2015-08-12 21:52:11 ----A---- C:\Windows\system32\tsgqec.dll
2015-08-12 21:52:11 ----A---- C:\Windows\system32\aaclient.dll
2015-08-12 21:51:41 ----A---- C:\Windows\system32\wuwebv.dll
2015-08-12 21:51:41 ----A---- C:\Windows\system32\wups2.dll
2015-08-12 21:51:41 ----A---- C:\Windows\system32\wudriver.dll
2015-08-12 21:51:41 ----A---- C:\Windows\system32\wucltux.dll
2015-08-12 21:51:41 ----A---- C:\Windows\system32\wuaueng.dll
2015-08-12 21:51:41 ----A---- C:\Windows\system32\wuauclt.exe
2015-08-12 21:51:41 ----A---- C:\Windows\system32\wuapp.exe
2015-08-12 21:51:41 ----A---- C:\Windows\system32\wuapi.dll
2015-08-12 21:51:41 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-08-12 21:51:40 ----A---- C:\Windows\system32\wups.dll
2015-08-12 21:51:40 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-08-12 21:51:09 ----A---- C:\Windows\system32\WebClnt.dll
2015-08-12 21:51:09 ----A---- C:\Windows\system32\davclnt.dll
2015-08-12 21:51:06 ----A---- C:\Windows\system32\notepad.exe
2015-08-12 21:51:06 ----A---- C:\Windows\notepad.exe
2015-08-12 21:50:28 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-08-12 21:50:25 ----A---- C:\Windows\system32\ntkrnlpa.exe
2015-08-12 21:50:25 ----A---- C:\Windows\system32\ntdll.dll
2015-08-12 21:50:24 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-08-12 21:50:23 ----A---- C:\Windows\system32\sysmain.dll
2015-08-12 21:50:23 ----A---- C:\Windows\system32\lsasrv.dll
2015-08-12 21:50:22 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-08-12 21:50:21 ----A---- C:\Windows\system32\srcore.dll
2015-08-12 21:50:21 ----A---- C:\Windows\system32\kerberos.dll
2015-08-12 21:50:20 ----A---- C:\Windows\system32\rstrui.exe
2015-08-12 21:50:20 ----A---- C:\Windows\system32\rpcrt4.dll
2015-08-12 21:50:19 ----A---- C:\Windows\system32\msv1_0.dll
2015-08-12 21:50:19 ----A---- C:\Windows\system32\csrsrv.dll
2015-08-12 21:50:18 ----A---- C:\Windows\system32\wdigest.dll
2015-08-12 21:50:18 ----A---- C:\Windows\system32\smss.exe
2015-08-12 21:50:18 ----A---- C:\Windows\system32\schannel.dll
2015-08-12 21:50:18 ----A---- C:\Windows\system32\ncrypt.dll
2015-08-12 21:50:18 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-08-12 21:50:17 ----A---- C:\Windows\system32\TSpkg.dll
2015-08-12 21:50:17 ----A---- C:\Windows\system32\sspicli.dll
2015-08-12 21:50:17 ----A---- C:\Windows\system32\lsass.exe
2015-08-12 21:50:17 ----A---- C:\Windows\system32\auditpol.exe
2015-08-12 21:50:16 ----A---- C:\Windows\system32\srclient.dll
2015-08-12 21:50:16 ----A---- C:\Windows\system32\secur32.dll
2015-08-12 21:50:16 ----A---- C:\Windows\system32\msmmsp.dll
2015-08-12 21:50:16 ----A---- C:\Windows\system32\cryptbase.dll
2015-08-12 21:50:15 ----A---- C:\Windows\system32\sspisrv.dll
2015-08-12 21:50:15 ----A---- C:\Windows\system32\credssp.dll
2015-08-12 21:50:14 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-08-12 21:50:14 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-08-12 21:50:13 ----A---- C:\Windows\system32\msaudite.dll
2015-08-12 21:50:13 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-08-12 21:50:13 ----A---- C:\Windows\system32\apisetschema.dll
2015-08-12 21:50:12 ----A---- C:\Windows\system32\adtschema.dll
2015-08-12 21:50:11 ----A---- C:\Windows\system32\msobjs.dll
2015-08-12 21:48:32 ----A---- C:\Windows\system32\DWrite.dll
2015-08-12 21:48:32 ----A---- C:\Windows\system32\atmfd.dll
2015-08-12 21:48:31 ----A---- C:\Windows\system32\FntCache.dll
2015-08-12 21:48:29 ----A---- C:\Windows\system32\win32k.sys
2015-08-12 21:48:27 ----A---- C:\Windows\system32\lpk.dll
2015-08-12 21:48:27 ----A---- C:\Windows\system32\fontsub.dll
2015-08-12 21:48:27 ----A---- C:\Windows\system32\dciman32.dll
2015-08-12 21:48:27 ----A---- C:\Windows\system32\d3d10warp.dll
2015-08-12 21:48:27 ----A---- C:\Windows\system32\atmlib.dll
2015-08-12 21:48:15 ----A---- C:\Windows\system32\shell32.dll
2015-08-12 21:48:10 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2015-08-12 21:43:57 ----A---- C:\Windows\system32\basesrv.dll
2015-08-12 21:42:31 ----A---- C:\Windows\system32\msxml6.dll
2015-08-12 21:42:31 ----A---- C:\Windows\system32\msxml3.dll
2015-08-12 21:42:30 ----A---- C:\Windows\system32\msxml6r.dll
2015-08-12 21:42:30 ----A---- C:\Windows\system32\msxml3r.dll

======List of files/folders modified in the last 1 month======

2015-08-20 18:13:34 ----D---- C:\Windows\Prefetch
2015-08-20 18:00:45 ----D---- C:\Windows\Temp
2015-08-20 17:49:55 ----D---- C:\Windows\system32\config
2015-08-20 10:33:28 ----D---- C:\Windows
2015-08-20 08:42:21 ----RD---- C:\Program Files
2015-08-20 08:42:20 ----D---- C:\Windows\system32\drivers
2015-08-19 17:49:47 ----D---- C:\Windows\Logs
2015-08-19 08:59:47 ----D---- C:\Windows\System32
2015-08-19 08:58:47 ----D---- C:\Windows\winsxs
2015-08-19 08:58:14 ----SHD---- C:\System Volume Information
2015-08-18 10:32:31 ----D---- C:\Windows\Sun
2015-08-17 23:33:35 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-08-17 23:33:34 ----D---- C:\Windows\inf
2015-08-17 22:01:57 ----HD---- C:\ProgramData
2015-08-17 20:26:12 ----SHD---- C:\Windows\Installer
2015-08-17 20:26:11 ----D---- C:\ProgramData\Microsoft Help
2015-08-17 20:07:28 ----A---- C:\Windows\win.ini
2015-08-17 20:07:26 ----D---- C:\Program Files\Common Files\System
2015-08-17 17:59:17 ----D---- C:\Windows\rescache
2015-08-17 12:59:27 ----D---- C:\Users\ACER\AppData\Roaming\Skype
2015-08-17 11:02:16 ----D---- C:\Windows\Panther
2015-08-17 10:35:47 ----HD---- C:\$Windows.~BT
2015-08-17 05:59:11 ----D---- C:\Program Files\Google
2015-08-17 05:40:23 ----D---- C:\Program Files\Opera
2015-08-17 05:30:03 ----D---- C:\Users\ACER\AppData\Roaming\Opera
2015-08-17 05:16:23 ----D---- C:\ProgramData\Google
2015-08-17 05:05:17 ----RD---- C:\Program Files\Skype
2015-08-17 03:23:30 ----RSD---- C:\Windows\assembly
2015-08-17 03:21:46 ----RSD---- C:\Windows\Fonts
2015-08-17 03:20:04 ----D---- C:\Program Files\Common Files\microsoft shared
2015-08-17 03:08:59 ----SD---- C:\Users\ACER\AppData\Roaming\Microsoft
2015-08-17 00:00:57 ----D---- C:\Program Files\Microsoft Office
2015-08-16 23:59:04 ----D---- C:\Program Files\Microsoft.NET
2015-08-16 23:22:16 ----D---- C:\ProgramData\Skype
2015-08-16 23:13:01 ----D---- C:\ProgramData\Oracle
2015-08-16 23:10:19 ----D---- C:\Program Files\Java
2015-08-16 23:06:37 ----D---- C:\Program Files\Common Files
2015-08-13 20:36:42 ----D---- C:\Windows\Microsoft.NET
2015-08-13 19:14:04 ----SD---- C:\Windows\system32\CompatTel
2015-08-13 19:14:03 ----D---- C:\Windows\system32\appraiser
2015-08-13 19:14:03 ----D---- C:\Windows\AppPatch
2015-08-13 19:14:02 ----D---- C:\Windows\system32\sk-SK
2015-08-13 19:13:59 ----D---- C:\Windows\system32\en-US
2015-08-13 19:13:59 ----D---- C:\Windows\system32\drivers\en-US
2015-08-13 19:13:55 ----D---- C:\Program Files\Internet Explorer
2015-08-12 22:43:56 ----D---- C:\Program Files\Microsoft Silverlight
2015-08-12 22:39:09 ----D---- C:\Windows\system32\MRT
2015-08-12 22:20:08 ----A---- C:\Windows\system32\MRT.exe
2015-08-12 21:45:49 ----D---- C:\Windows\system32\catroot2
2015-08-11 20:57:23 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2015-07-28 10:08:06 ----D---- C:\Windows\SoftwareDistribution
2015-07-25 13:37:46 ----SD---- C:\Windows\system32\GWX

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2010-06-08 435736]
R0 PCTCore;PCTools KDS; C:\Windows\system32\drivers\PCTCore.sys [2012-10-22 368616]
R0 pctDS;PC Tools Data Store; C:\Windows\system32\drivers\pctDS.sys [2012-02-28 342168]
R0 pctEFA;PC Tools Extended File Attributes; C:\Windows\system32\drivers\pctEFA.sys [2012-02-28 909728]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 A2DDA;A2 Direct Disk Access Support Driver; \??\C:\EEK\RUN\a2ddax86.sys [2014-01-26 22056]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-09-17 188808]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-09-17 134248]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 18992]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 16432]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60976]
R1 PCTSD;PC Tools Spyware Doctor Driver; C:\Windows\System32\Drivers\PCTSD.sys [2012-11-01 202280]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2013-09-17 122376]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2010-04-07 1792512]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2010-05-20 28200]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2010-04-19 4806144]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2010-08-03 3158120]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x86.sys [2010-08-24 68208]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 583848]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 197800]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 24232]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 20136]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-02-05 242992]
S2 Parvdm;Parvdm; C:\Windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2010-05-20 37224]
S3 ATHDFU;Atheros Valkyrie USB BootROM; C:\Windows\System32\Drivers\AthDfu.sys [2010-05-20 47144]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2010-05-20 256360]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2010-05-20 177704]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2010-05-20 46952]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2010-05-20 143080]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2010-05-26 230760]
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 cleanhlp;cleanhlp; \??\C:\EEK\Run\cleanhlp32.sys [2014-01-26 50200]
S3 EUCR;EUCR; C:\Windows\system32\DRIVERS\EUCR6SK.SYS [2010-06-17 82768]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AtherosSvc;AtherosSvc; C:\Program Files\Bluetooth Suite\adminservice.exe [2010-05-26 38560]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2015-03-18 822496]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files\Launch Manager\dsiwmis.exe [2010-08-10 321104]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2014-02-24 1343408]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 735776]
R2 GREGService;GREGService; C:\Program Files\Acer\Registration\GREGsvc.exe [2010-01-08 23584]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-06-08 13336]
R2 RS_Service;Raw Socket Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [2010-01-30 260640]
R2 sftlist;Application Virtualization Client; C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2010-01-29 243232]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-26 107912]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2015-06-25 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-11 269000]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-26 107912]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-07-16 102912]
S3 MWLService;MyWinLocker Service; C:\Program Files\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2014-04-12 45744]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

Re: matkin spomalený PC

Napsal: 20 srp 2015 18:29
od Márty84
:arrow: Otevrete si poznamkovy blok a zkopirujte do nej tento skript

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)

Toolbar: HKU\S-1-5-21-2194068013-2093320325-918056907-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File

S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-26 107912]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2015-06-25 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-11 269000]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-26 107912]
S3 cleanhlp; C:\EEK\Run\cleanhlp32.sys [50200 2014-01-26] (Emsisoft GmbH)

2015-08-17 22:01 - 2015-08-17 22:01 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-17 21:58 - 2015-08-17 21:58 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\ACER\Downloads\mbam-setup-2.1.8.1057.exe

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d08f4d82e30158.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

AlternateDataStreams: C:\ProgramData\TEMP:0B9176C0
AlternateDataStreams: C:\ProgramData\TEMP:5D7E5A8F
AlternateDataStreams: C:\ProgramData\TEMP:798A3728
AlternateDataStreams: C:\ProgramData\TEMP:93EB7685
AlternateDataStreams: C:\ProgramData\TEMP:E1F04E8D
AlternateDataStreams: C:\ProgramData\TEMP:E36F5B57

Hosts:
EmptyTemp:
Reboot:
End
Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev fixlist a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Spustte FRST jako spravce, kliknete na napis Fix a program vykona prikazy.
Po restartu pc by se mel objevit novy log - s nazvem fixlog, ten mi sem zase zkopirujte.

Re: matkin spomalený PC

Napsal: 20 srp 2015 20:16
od mamin
Fix result of Farbar Recovery Scan Tool (x86) Version:20-08-2015
Ran by ACER (2015-08-20 21:05:23) Run:1
Running from C:\Users\ACER\Desktop
Loaded Profiles: ACER (Available Profiles: ACER)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)

Toolbar: HKU\S-1-5-21-2194068013-2093320325-918056907-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File

S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-26 107912]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2015-06-25 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-11 269000]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-26 107912]
S3 cleanhlp; C:\EEK\Run\cleanhlp32.sys [50200 2014-01-26] (Emsisoft GmbH)

2015-08-17 22:01 - 2015-08-17 22:01 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-17 21:58 - 2015-08-17 21:58 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\ACER\Downloads\mbam-setup-2.1.8.1057.exe

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d08f4d82e30158.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

AlternateDataStreams: C:\ProgramData\TEMP:0B9176C0
AlternateDataStreams: C:\ProgramData\TEMP:5D7E5A8F
AlternateDataStreams: C:\ProgramData\TEMP:798A3728
AlternateDataStreams: C:\ProgramData\TEMP:93EB7685
AlternateDataStreams: C:\ProgramData\TEMP:E1F04E8D
AlternateDataStreams: C:\ProgramData\TEMP:E36F5B57

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher => value removed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value removed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\HP Software Update => value removed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully.
HKU\S-1-5-21-2194068013-2093320325-918056907-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => value removed successfully.
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => key not found.
gupdate => service removed successfully.
SkypeUpdate => service removed successfully.
AdobeFlashPlayerUpdateSvc => service removed successfully.
gupdatem => service removed successfully.
cleanhlp => service removed successfully.
C:\ProgramData\Malwarebytes => moved successfully
C:\Users\ACER\Downloads\mbam-setup-2.1.8.1057.exe => moved successfully
C:\Windows\Tasks\Adobe Flash Player Updater.job => moved successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d08f4d82e30158.job => moved successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\ProgramData\TEMP => ":0B9176C0" ADS removed successfully..
C:\ProgramData\TEMP => ":5D7E5A8F" ADS removed successfully..
C:\ProgramData\TEMP => ":798A3728" ADS removed successfully..
C:\ProgramData\TEMP => ":93EB7685" ADS removed successfully..
C:\ProgramData\TEMP => ":E1F04E8D" ADS removed successfully..
C:\ProgramData\TEMP => ":E36F5B57" ADS removed successfully..
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
EmptyTemp: => 2.9 GB temporary data Removed.


The system needed a reboot.

==== End of Fixlog 21:10:42 ====

Re: matkin spomalený PC

Napsal: 20 srp 2015 21:43
od Márty84
:arrow: Napiste mi velikost adresare plochy (C:\Users\ACER\Plocha)


:arrow: Kliknete na START -> Spustit -> napiste msconfig -> OK
V okne najdete zalozku Po spuštění a povypinejte vse, co nepotrebujete aby se spoustelo hned pri startu pc. Tedy to, co si muzete spustit rucne az v pripade potreby.




:!: Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

:arrow:
vyosek píše: :arrow: DelFix https://toolslib.net/downloads/finish/2/
  • Stahnete a spustte
  • Ponechte zatrzitkou pouze u volby Remove disinfection tools
  • Kliknete na Run
:arrow: Stahnete Ccleaner http://www.filehippo.com/download_ccleaner a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!
(Pokud je v pc vice uzivatelskych uctu, pouzijte program i v nich)

:arrow: Defragmentujte disk(y) (SSD Disky ne!)
Stahnete program Defraggler https://www.piriform.com/defraggler/download/standard
Pri instalaci opet pozor na toolbar a dalsi nesmysly.
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.




:arrow: Pak napiste, jak to s pc vypada. Nastala nejaka zmena?

Re: matkin spomalený PC

Napsal: 21 srp 2015 21:20
od mamin
velkost ma 16,6 MB... dalej sa chcem opýtat, vid priloha, vedeli by ste mi povedat ktoré procesy mam zrusit z tých troch a dvoch /skoro/ rovnakých Intel... EgisTec... alebo ich mam odškrtnúť všetky, ani neviem k čomu vlastne su... co sa týka vasej poslednej otazky, zjavna zmena k lepšiemu nastala uz po počiatočných testoch a čistení :happy: ... Prave prebieha defragmentovanie je to na 12% a píše zostávajúci čas >1 den.. preto vam pišem teraz aby ste mi nedali :closed:

Re: matkin spomalený PC

Napsal: 22 srp 2015 04:00
od Márty84
Temata bez odezvy se zamykaji nejdrive po 14 dnech, takze v klidu :-D

Intel bych nevypinal. Ten Egis zalezi na vas. Uvidite, jak pc pobezi a pripadne to vypnete. Kdykoliv to zas muzete zapnout, kdybyste to potreboval :)

Po defragmentaci tedy pc poradne odzkousejte a bud tema uzavrem, nebo se podivame jeste hloubeji ;-)



13.9. :lock: http://forum.viry.cz/viewtopic.php?f=12&t=123975
Všechny časy jsou v UTC+01:00
Stránka 2 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz