Stránka 3 z 4

Re: Zatížení ntb, prosím o kontrolu logu

Napsal: 05 dub 2015 18:45
od Rudy
Který proces PC nejvíce zatěžuje?

Re: Zatížení ntb, prosím o kontrolu logu

Napsal: 05 dub 2015 18:54
od KatieLe
Nejvíc je zatížený disk, který se vždy pohybuje kolem 90% a paměť kolem 80%, procesor je spíš kolem 40%

Re: Zatížení ntb, prosím o kontrolu logu

Napsal: 05 dub 2015 19:42
od Rudy
To vím. Musí to způsobovat nějaký proces. Podívejte se do Správce úloh.

Re: Zatížení ntb, prosím o kontrolu logu

Napsal: 05 dub 2015 20:45
od KatieLe
Je to vždycky hlavně systém nebo Hostitel místní služby

Re: Zatížení ntb, prosím o kontrolu logu

Napsal: 05 dub 2015 20:58
od Rudy
Na zkoušku vypnět aut. aktualizace, příp. přeinstalujte antivir.

Re: Zatížení ntb, prosím o kontrolu logu

Napsal: 05 dub 2015 21:08
od KatieLe
Automatické aktualizace mám vyplé a antivirus (Avast) by měl být aktualizovaný, protože jsem ho stahovala a instalovala nedávno.

Re: Zatížení ntb, prosím o kontrolu logu

Napsal: 05 dub 2015 21:37
od Rudy
Problém jste měla již před instalací Avastu?

Re: Zatížení ntb, prosím o kontrolu logu

Napsal: 05 dub 2015 21:41
od KatieLe
Ano

Re: Zatížení ntb, prosím o kontrolu logu

Napsal: 06 dub 2015 10:07
od Rudy
Ještě bychom mohli zkusit ComboFix:
Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

Re: Zatížení ntb, prosím o kontrolu logu

Napsal: 07 dub 2015 18:49
od KatieLe
Log z combofixu:

ComboFix 15-04-01.01 - Kateřina . 04. 2015 19:26:40.2.2 - x64
Microsoft Windows 8 6.2.9200.0.1250.420.1029.18.1893.504 [GMT 2:00]
Spuštěný z: c:\users\Kateřina\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-03-07 do 2015-04-07 )))))))))))))))))))))))))))))))
.
.
2015-04-07 17:40 . 2015-04-07 17:40 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-04-04 08:48 . 2012-11-26 02:15 16114176 ----a-w- c:\program files\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
2015-04-04 08:48 . 2012-11-26 02:14 15541248 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
2015-04-04 08:22 . 2012-09-20 06:31 17408 ----a-w- c:\windows\system32\eventcls.dll
2015-04-04 08:22 . 2012-09-20 05:53 15360 ----a-w- c:\windows\SysWow64\eventcls.dll
2015-04-04 08:22 . 2014-10-09 04:00 1484288 ----a-w- c:\windows\system32\VSSVC.exe
2015-04-04 08:22 . 2014-10-09 04:00 69632 ----a-w- c:\windows\system32\vsstrace.dll
2015-04-04 08:22 . 2014-10-09 04:00 1519104 ----a-w- c:\windows\system32\vssapi.dll
2015-04-04 08:22 . 2014-10-09 03:59 52224 ----a-w- c:\windows\SysWow64\vsstrace.dll
2015-04-04 08:22 . 2014-10-09 03:59 1195520 ----a-w- c:\windows\SysWow64\vssapi.dll
2015-04-04 08:03 . 2015-01-09 06:43 951808 ----a-w- c:\windows\system32\Windows.Globalization.dll
2015-04-04 08:03 . 2015-01-09 05:03 601088 ----a-w- c:\windows\SysWow64\Windows.Globalization.dll
2015-04-04 08:00 . 2014-07-15 22:51 71168 ----a-w- c:\windows\system32\drivers\hdaudbus.sys
2015-04-03 18:36 . 2014-07-12 06:46 3262976 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\tipskins.dll
2015-04-02 15:17 . 2015-04-02 15:15 136752 ----a-w- c:\windows\system32\drivers\aswStm.sys
2015-04-02 15:17 . 2015-04-02 15:15 271200 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2015-04-02 15:17 . 2015-04-02 15:15 442264 ----a-w- c:\windows\system32\drivers\aswSP.sys
2015-04-02 15:17 . 2015-04-02 15:14 65736 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2015-04-02 15:17 . 2015-04-02 15:14 88408 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2015-04-02 15:17 . 2015-04-02 15:14 29168 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2015-04-02 15:17 . 2015-04-02 15:14 93528 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2015-04-02 15:17 . 2015-04-02 15:13 1047320 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2015-04-02 15:15 . 2015-04-02 15:14 364472 ----a-w- c:\windows\system32\aswBoot.exe
2015-04-02 15:14 . 2015-04-02 15:14 43112 ----a-w- c:\windows\avastSS.scr
2015-04-02 15:11 . 2015-04-02 15:11 -------- d-----w- c:\program files\AVAST Software
2015-04-02 15:09 . 2015-04-02 15:10 -------- d-----w- c:\programdata\AVAST Software
2015-04-02 10:12 . 2014-01-27 03:39 1939288 ----a-w- c:\windows\system32\drivers\ntfs.sys
2015-04-02 10:12 . 2014-02-03 23:56 332632 ----a-w- c:\windows\system32\drivers\storport.sys
2015-04-02 10:12 . 2014-02-03 23:56 278872 ----a-w- c:\windows\system32\drivers\msiscsi.sys
2015-04-02 10:12 . 2014-01-02 23:35 365568 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2015-04-02 10:12 . 2014-01-02 23:32 523264 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2015-04-02 10:12 . 2014-01-31 00:48 485888 ----a-w- c:\windows\SysWow64\WSDApi.dll
2015-04-02 10:12 . 2014-01-31 00:06 599040 ----a-w- c:\windows\system32\WSDApi.dll
2015-04-02 10:12 . 2014-01-15 23:42 118784 ----a-w- c:\windows\system32\drivers\dfsc.sys
2015-04-02 09:56 . 2014-03-24 23:42 305152 ----a-w- c:\windows\SysWow64\wusa.exe
2015-04-02 09:56 . 2014-03-24 22:56 309760 ----a-w- c:\windows\system32\wusa.exe
2015-04-02 09:55 . 2012-09-27 07:17 76288 ----a-w- c:\windows\system32\newdev.exe
2015-04-02 09:55 . 2012-09-27 07:15 301568 ----a-w- c:\windows\system32\newdev.dll
2015-04-02 09:55 . 2012-09-27 06:34 275968 ----a-w- c:\windows\SysWow64\newdev.dll
2015-04-02 09:55 . 2012-09-27 07:17 75264 ----a-w- c:\windows\system32\ndadmin.exe
2015-04-02 09:55 . 2012-09-27 06:35 74240 ----a-w- c:\windows\SysWow64\newdev.exe
2015-04-02 09:55 . 2012-09-27 06:35 73728 ----a-w- c:\windows\SysWow64\ndadmin.exe
2015-04-02 09:48 . 2012-09-20 07:55 3265256 ----a-w- c:\windows\system32\drivers\evbda.sys
2015-04-02 09:48 . 2012-09-20 06:33 2397184 ----a-w- c:\windows\system32\WpcMon.exe
2015-04-02 09:48 . 2012-09-20 06:33 3964416 ----a-w- c:\windows\system32\WinSAT.exe
2015-04-02 09:48 . 2012-09-20 07:55 533224 ----a-w- c:\windows\system32\drivers\bxvbda.sys
2015-04-02 09:46 . 2012-09-20 06:32 112128 ----a-w- c:\windows\system32\PackageStateRoaming.dll
2015-04-01 22:59 . 2013-08-30 05:18 374784 ----a-w- c:\windows\system32\clusapi.dll
2015-04-01 22:59 . 2013-08-30 05:19 626688 ----a-w- c:\windows\system32\resutils.dll
2015-04-01 22:59 . 2013-10-05 06:10 285016 ----a-w- c:\windows\system32\drivers\spaceport.sys
2015-04-01 22:59 . 2013-08-29 23:48 488960 ----a-w- c:\windows\SysWow64\resutils.dll
2015-04-01 22:59 . 2013-08-29 23:47 302080 ----a-w- c:\windows\SysWow64\clusapi.dll
2015-04-01 22:55 . 2013-07-24 23:07 13661696 ----a-w- c:\windows\system32\Windows.UI.Xaml.dll
2015-04-01 22:55 . 2013-07-24 23:10 10799104 ----a-w- c:\windows\SysWow64\Windows.UI.Xaml.dll
2015-04-01 22:55 . 2013-08-30 05:20 1173504 ----a-w- c:\windows\system32\UIAutomationCore.dll
2015-04-01 22:55 . 2013-08-29 23:48 914432 ----a-w- c:\windows\SysWow64\UIAutomationCore.dll
2015-04-01 22:55 . 2013-08-21 06:39 465240 ----a-w- c:\windows\system32\drivers\fvevol.sys
2015-04-01 22:55 . 2013-08-10 06:30 151896 ----a-w- c:\windows\system32\drivers\tpm.sys
2015-04-01 22:55 . 2013-08-30 05:43 61784 ----a-w- c:\windows\system32\drivers\crashdmp.sys
2015-04-01 22:55 . 2012-09-20 06:48 62488 ----a-w- c:\windows\system32\drivers\dumpfve.sys
2015-04-01 22:37 . 2013-07-03 00:22 2839552 ----a-w- c:\windows\system32\msftedit.dll
2015-04-01 22:20 . 2012-10-12 06:13 109568 ----a-w- c:\windows\system32\dskquota.dll
2015-04-01 22:20 . 2012-10-12 05:39 82944 ----a-w- c:\windows\SysWow64\dskquota.dll
2015-04-01 22:20 . 2012-10-24 04:54 396008 ----a-w- c:\windows\system32\hal.dll
2015-04-01 22:20 . 2012-10-17 04:32 1172992 ----a-w- c:\windows\system32\mfnetsrc.dll
2015-04-01 22:20 . 2012-10-17 04:32 677888 ----a-w- c:\windows\system32\mfnetcore.dll
2015-04-01 22:20 . 2012-10-17 03:57 929792 ----a-w- c:\windows\SysWow64\mfnetsrc.dll
2015-04-01 22:20 . 2012-10-17 03:57 568832 ----a-w- c:\windows\SysWow64\mfnetcore.dll
2015-04-01 22:03 . 2015-04-07 17:17 136408 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-04-01 22:03 . 2015-03-17 04:15 64216 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-04-01 22:03 . 2015-03-17 04:15 107736 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-04-01 22:03 . 2015-04-01 22:03 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2015-04-01 22:03 . 2015-04-01 22:03 -------- d-----w- c:\programdata\Malwarebytes
2015-04-01 22:03 . 2015-03-17 04:15 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-04-01 22:02 . 2014-04-23 23:38 693760 ----a-w- c:\windows\system32\WSShared.dll
2015-04-01 22:02 . 2014-04-29 22:32 126464 ----a-w- c:\windows\system32\Robocopy.exe
2015-04-01 22:02 . 2014-04-29 22:32 106496 ----a-w- c:\windows\SysWow64\Robocopy.exe
2015-04-01 22:02 . 2014-04-23 23:51 566784 ----a-w- c:\windows\SysWow64\WSShared.dll
2015-04-01 22:02 . 2014-04-23 23:51 124928 ----a-w- c:\windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-04-01 22:02 . 2014-04-23 23:38 163840 ----a-w- c:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-04-01 22:02 . 2014-01-31 00:48 143872 ----a-w- c:\windows\SysWow64\Windows.ApplicationModel.Store.dll
2015-04-01 22:02 . 2013-08-16 05:21 198656 ----a-w- c:\windows\system32\Windows.ApplicationModel.Store.dll
2015-04-01 22:01 . 2013-10-31 05:56 915968 ----a-w- c:\windows\system32\MPSSVC.dll
2015-04-01 22:01 . 2013-10-31 05:56 758784 ----a-w- c:\windows\system32\FirewallAPI.dll
2015-04-01 22:01 . 2013-10-31 04:01 550400 ----a-w- c:\windows\SysWow64\FirewallAPI.dll
2015-04-01 22:01 . 2013-10-31 03:42 74752 ----a-w- c:\windows\system32\drivers\mpsdrv.sys
2015-04-01 22:01 . 2013-10-13 20:49 100696 ----a-w- c:\windows\system32\drivers\disk.sys
2015-04-01 22:01 . 2013-08-27 05:21 227840 ----a-w- c:\windows\system32\WebClnt.dll
2015-04-01 22:01 . 2013-08-27 05:19 104448 ----a-w- c:\windows\system32\davclnt.dll
2015-04-01 22:01 . 2013-08-26 22:29 199168 ----a-w- c:\windows\SysWow64\WebClnt.dll
2015-04-01 22:01 . 2013-08-26 22:28 86016 ----a-w- c:\windows\SysWow64\davclnt.dll
2015-04-01 22:01 . 2012-10-11 05:44 105984 ----a-w- c:\windows\system32\icfupgd.dll
2015-04-01 22:01 . 2012-10-11 05:46 24576 ----a-w- c:\windows\system32\wfapigp.dll
2015-04-01 22:01 . 2012-10-11 05:07 19968 ----a-w- c:\windows\SysWow64\wfapigp.dll
2015-03-31 21:29 . 2012-11-20 05:24 1164800 ----a-w- c:\windows\SysWow64\Display.dll
2015-03-31 21:29 . 2012-11-20 05:17 1184256 ----a-w- c:\windows\system32\Display.dll
2015-03-31 21:29 . 2012-11-20 05:02 6656 ----a-w- c:\windows\SysWow64\KBDKURD.DLL
2015-03-31 21:29 . 2012-11-20 04:59 7168 ----a-w- c:\windows\system32\KBDKURD.DLL
2015-03-31 21:27 . 2012-11-06 04:18 11459584 ----a-w- c:\windows\system32\glcndFilter.dll
2015-03-31 21:26 . 2014-07-17 01:45 61440 ----a-w- c:\windows\system32\drivers\en-US\srv2.sys.mui
2015-03-31 21:25 . 2014-03-01 09:47 1258496 ----a-w- c:\windows\system32\kernel32.dll
2015-03-31 21:25 . 2014-03-01 09:47 1120768 ----a-w- c:\windows\system32\gpedit.dll
2015-03-31 21:25 . 2014-03-01 08:07 1075200 ----a-w- c:\windows\SysWow64\gpedit.dll
2015-03-31 21:25 . 2014-02-15 04:15 78336 ----a-w- c:\windows\system32\drivers\IPMIDrv.sys
2015-03-31 21:25 . 2013-11-25 23:17 83968 ----a-w- c:\windows\system32\drivers\hidclass.sys
2015-03-31 21:25 . 2014-05-29 04:04 94552 ----a-w- c:\windows\system32\drivers\mountmgr.sys
2015-03-31 20:30 . 2015-03-04 21:24 791496 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-03-31 20:30 . 2015-03-04 21:24 177608 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-03-31 20:18 . 2015-03-31 20:22 -------- d-----w- c:\windows\system32\MRT
2015-03-31 19:55 . 2014-06-10 22:44 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe
2015-03-31 19:55 . 2014-06-10 22:43 35480 ----a-w- c:\windows\SysWow64\TsWpfWrp.exe
2015-03-31 19:12 . 2015-03-31 19:12 -------- d-----w- C:\_OTM
2015-03-31 17:32 . 2015-03-31 17:32 -------- d-----w- c:\program files (x86)\VideoLAN
2015-03-30 20:41 . 2012-08-31 00:52 17888 ----a-w- c:\windows\system32\msvcr100_clr0400.dll
2015-03-30 20:41 . 2012-08-31 00:53 17888 ----a-w- c:\windows\SysWow64\msvcr100_clr0400.dll
2015-03-30 20:04 . 2013-03-02 02:43 1933312 ----a-w- c:\windows\system32\wbem\cimwin32.dll
2015-03-30 20:02 . 2013-05-04 06:57 1131520 ----a-w- c:\windows\system32\AppXDeploymentServer.dll
2015-03-30 20:01 . 2013-05-15 02:25 888320 ----a-w- c:\windows\system32\autochk.exe
2015-03-30 20:01 . 2013-05-15 02:25 542208 ----a-w- c:\windows\system32\untfs.dll
2015-03-30 20:01 . 2013-05-15 02:24 793088 ----a-w- c:\windows\SysWow64\autochk.exe
2015-03-30 20:01 . 2013-05-15 02:24 482816 ----a-w- c:\windows\SysWow64\untfs.dll
2015-03-30 20:00 . 2013-04-09 04:51 3552768 ----a-w- c:\windows\system32\tquery.dll
2015-03-30 20:00 . 2013-04-09 04:51 14267904 ----a-w- c:\windows\system32\wmp.dll
2015-03-30 20:00 . 2013-04-09 04:50 2107904 ----a-w- c:\windows\system32\mssrch.dll
2015-03-30 20:00 . 2013-04-08 21:51 2767360 ----a-w- c:\windows\SysWow64\tquery.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-03-26 21:34 . 2012-07-26 08:13 23256 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"UpdateP2GShortCut"="c:\program files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" [2012-04-19 217088]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-04-02 5512912]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]
@=""
.
R2 0207641427835676mcinstcleanup;McAfee Application Installer Cleanup (0207641427835676);c:\users\KATEIN~1\AppData\Local\Temp\020764~1.EXE;c:\users\KATEIN~1\AppData\Local\Temp\020764~1.EXE [x]
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R3 SPUVCbv;SPUVCb Driver Service;c:\windows\System32\Drivers\SPUVCbv_x64.sys;c:\windows\SYSNATIVE\Drivers\SPUVCbv_x64.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\System32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 vmicheartbeat;Služba prezenčního signálu technologie Hyper-V;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
R3 WSDScan;Podpora skenování WSD;c:\windows\System32\drivers\WSDScan.sys;c:\windows\SYSNATIVE\drivers\WSDScan.sys [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys;c:\windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 iaStorA;iaStorA;c:\windows\System32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x]
S0 LHDmgr;LHDmgr;c:\windows\System32\DRIVERS\LhdX64.sys;c:\windows\SYSNATIVE\DRIVERS\LhdX64.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 Apple Mobile Device Service;Apple Mobile Device Service;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\System32\drivers\AcpiVpc.sys;c:\windows\SYSNATIVE\drivers\AcpiVpc.sys [x]
S3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS;c:\windows\SYSNATIVE\drivers\AmUStor.SYS [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C63x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C63x64.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-04-03 18:21 1061704 ----a-w- c:\program files (x86)\Google\Chrome\Application\41.0.2272.118\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2015-04-02 15:14 722400 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncBackedUp]
@="{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472}"
[HKEY_CLASSES_ROOT\CLSID\{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472}]
2012-05-14 17:39 463952 ----a-w- c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncPending]
@="{62CCD8E3-9C21-41E1-B55E-1E26DFC68511}"
[HKEY_CLASSES_ROOT\CLSID\{62CCD8E3-9C21-41E1-B55E-1E26DFC68511}]
2012-05-14 17:39 463952 ----a-w- c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncRoot]
@="{A759AFF6-5851-457D-A540-F4ECED148351}"
[HKEY_CLASSES_ROOT\CLSID\{A759AFF6-5851-457D-A540-F4ECED148351}]
2012-05-14 17:39 463952 ----a-w- c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncShared]
@="{1574C9EF-7D58-488F-B358-8B78C1538F51}"
[HKEY_CLASSES_ROOT\CLSID\{1574C9EF-7D58-488F-B358-8B78C1538F51}]
2012-05-14 17:39 463952 ----a-w- c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-08-24 170304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-08-24 398656]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-08-24 441152]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-07-02 12921488]
"RtHDVBg_Dolby"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2012-06-13 1212560]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2012-06-26 366720]
"Energy Management"="c:\program files (x86)\Lenovo\Energy Management\Energy Management.exe" [2012-10-17 17079376]
"EnergyUtility"="c:\program files (x86)\Lenovo\Energy Management\Utility.exe" [2012-10-17 191568]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2015-02-13 169768]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 10.0.0.138
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)
.
Celkový čas: 2015-04-07 19:46:08
ComboFix-quarantined-files.txt 2015-04-07 17:46
ComboFix2.txt 2015-04-02 20:59
.
Před spuštěním: 228 429 017 088 bytes free
Po spuštění: 228 359 843 840 bytes free
.
- - End Of File - - D27B75BB6B6C7C425CF0E753C60304A9

Re: Zatížení ntb, prosím o kontrolu logu

Napsal: 07 dub 2015 19:16
od Rudy
Log je v pořádku, nejedná se o problém malware. Zatěžovat to může teoreticky každá aplikace, mající přístup na net.

Re: Zatížení ntb, prosím o kontrolu logu

Napsal: 07 dub 2015 19:25
od KatieLe
Má tedy smysl ntb dávat do nějakého specializovaného servisu? Protože tohle mi nikdy nedělal...

Re: Zatížení ntb, prosím o kontrolu logu

Napsal: 07 dub 2015 20:06
od Rudy
Zkuste vypínat jednotlivé úlohy, až přijdete na tu, která to způsobuje.

Re: Zatížení ntb, prosím o kontrolu logu

Napsal: 07 dub 2015 20:29
od KatieLe
hlavně je to vždy systém, tak nechci ukončit úlohu aby se něco nestalo

Re: Zatížení ntb, prosím o kontrolu logu

Napsal: 07 dub 2015 21:31
od Rudy
PC maximálně spadne a po novém startu se vše obnoví. Zkuste nainstalovat processexplorer: http://www.stahuj.centrum.cz/utility_a_ ... [oz]=16.05 . Možná se dovíte nějakou podrobnost. PE je sofistikovanější obdoba správce úloh.