VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Pomalý NTB, fyz.pamět běží na 80%

https://forum.viry.cz:443/viewtopic.php?t=142547

Stránka 1 z 1

Pomalý NTB, fyz.pamět běží na 80%

Napsal: 20 led 2015 22:05
od Pokoloko
Zdravím, nevím čím to je, jestli vir nebo jiná havěť. PC je pamalý, fyzická pamět běží na 70-90%. CC cleaner nepomohl. Zkusila jsem sama něco už před tím sama vymazat ale to asi nebylo to pravé;/
Je to jen malý ntb s Windows starter ale používám ho více méně jen na prohlížení internetu a na skype ale je to opravdu neskutečně pomalé než se něco otevře a ten skype to také asi brzdí ale neznám jiný program který by mi to umožnil nebo zatím jsem nepátrala. Budu ráda když mi pomůžete.Díky

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 19-01-2015
Ran by pokiiito (administrator) on POKIIITO-PC on 20-01-2015 21:42:07
Running from C:\Users\pokiiito\Downloads
Loaded Profiles: pokiiito (Available profiles: pokiiito)
Platform: Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Registration\GREGsvc.exe
(Realsil Microelectronics Inc.) C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Research In Motion Limited) C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LMworker.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10025576 2011-02-11] (Realtek Semiconductor)
HKLM\...\Run: [LManager] => C:\Program Files\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1934632 2010-10-08] (Synaptics Incorporated)
HKLM\...\Run: [Power Management] => C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [715368 2011-05-10] (Acer Incorporated)
HKLM\...\Run: [RIMBBLaunchAgent.exe] => C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [90448 2011-11-02] (Research In Motion Limited)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [mcpltui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [517392 2014-04-25] (McAfee, Inc.)
HKU\S-1-5-21-1382858543-217838812-2172837122-1000\...\MountPoints2: F - F:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1382858543-217838812-2172837122-1000\...\MountPoints2: {81dec1cc-ccc0-11e1-94de-e89a8fe856bc} - F:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1382858543-217838812-2172837122-1000\...\MountPoints2: {bc6c134e-c84a-11e1-8a1f-e89a8fe856bc} - E:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1382858543-217838812-2172837122-1000\...\MountPoints2: {c7a563be-5f0d-11e1-99c6-60d8198fa4b2} - D:\AutoRun.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install SafeKey FF RunOnce.lnk
ShortcutTarget: Install SafeKey FF RunOnce.lnk -> C:\Program Files\Common Files\lpuninstall.exe (McAfee)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install SafeKey IE RunOnce.lnk
ShortcutTarget: Install SafeKey IE RunOnce.lnk -> C:\Program Files\Common Files\lpuninstall.exe (McAfee)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1382858543-217838812-2172837122-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://packardbell.msn.com
HKU\S-1-5-21-1382858543-217838812-2172837122-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://packardbell.msn.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKU\S-1-5-21-1382858543-217838812-2172837122-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1382858543-217838812-2172837122-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SafeKey Vault -> {9DB059B3-DD36-4a55-846C-59BE42A1202A} -> C:\Program Files\SafeKey\LPToolbar.dll (McAfee)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - McAfee SafeKey - {61D700C1-7D8D-43c5-9C13-4FF85157CFE6} - C:\Program Files\SafeKey\LPToolbar.dll (McAfee)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
DPF: {2FA46E0C-AFA3-416D-8F20-813C59FA00D3} https://neos.cz.o2.com/prmportal_csy/19 ... Client.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\pokiiito\AppData\Roaming\Mozilla\Firefox\Profiles\m55ufhje.default-1416904558515
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_257.dll ()
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @RIM.com/WebSLLauncher,version=1.0 -> C:\Program Files\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll ()
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files\McAfee\SiteAdvisor [2014-10-09]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF HKLM\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-10-09]
FF HKU\S-1-5-21-1382858543-217838812-2172837122-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - No Path
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files\McAfee\SiteAdvisor\McChPlg.crx [2015-01-13]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeActiveFileMonitor9.0; C:\Program Files\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [169408 2010-09-30] (Adobe Systems Incorporated)
R2 GREGService; C:\Program Files\Packard Bell\Registration\GREGsvc.exe [36456 2011-05-30] (Acer Incorporated)
R2 HomeNetSvc; C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)
R2 IconMan_R; C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe [1755136 2011-03-07] (Realsil Microelectronics Inc.) [File not signed]
R2 Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [244624 2011-04-22] (Acer Incorporated)
R2 McAfee SiteAdvisor Service; c:\Program Files\McAfee\SiteAdvisor\McSACore.exe [131136 2014-12-03] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [145568 2014-04-25] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [472072 2014-09-04] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [655936 2014-08-20] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [169800 2014-06-20] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [179600 2014-06-20] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [62832 2014-06-20] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [147912 2013-09-23] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [135968 2014-06-20] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [238176 2014-06-20] (McAfee, Inc.)
S3 mfebopk; C:\Windows\System32\drivers\mfebopk.sys [67816 2014-06-20] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [369248 2014-06-20] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [576048 2014-06-20] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [350240 2014-08-20] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [81296 2014-08-20] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [217224 2014-06-20] (McAfee, Inc.)
R3 RSPCIESTOR; C:\Windows\System32\DRIVERS\RtsPStor.sys [252520 2011-03-07] (Realtek Semiconductor Corp.)
S3 ewusbmbb; system32\DRIVERS\ewusbwwan.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 Huawei; system32\DRIVERS\ewdcsc.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-20 21:42 - 2015-01-20 21:44 - 00014123 _____ () C:\Users\pokiiito\Downloads\FRST.txt
2015-01-20 21:39 - 2015-01-20 21:39 - 00000000 ____D () C:\Users\pokiiito\Downloads\FRST-OlderVersion
2015-01-20 21:35 - 2015-01-20 21:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2015-01-20 10:14 - 2015-01-20 10:16 - 00026112 _____ () C:\Users\pokiiito\Desktop\odečty_TUV,_SUV,_elektro,_plyn_apartmány(1).xls
2015-01-20 09:48 - 2015-01-20 09:49 - 00025600 _____ () C:\Users\pokiiito\Downloads\odečty_TUV,_SUV,_elektro,_plyn_apartmány(1).xls
2015-01-19 22:36 - 2015-01-19 22:36 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-01-18 11:17 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-01-18 11:17 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-14 10:18 - 2014-12-19 03:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 10:18 - 2014-12-11 18:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 10:18 - 2014-12-06 04:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 10:17 - 2014-12-19 02:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-12 12:47 - 2015-01-12 12:47 - 00025600 _____ () C:\Users\pokiiito\Downloads\odečty_TUV,_SUV,_elektro,_plyn_apartmány.xls
2015-01-08 10:18 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-01-08 09:44 - 2015-01-08 09:44 - 00000000 ____D () C:\Windows\system32\appraiser
2015-01-08 00:37 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-01-08 00:37 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-01-08 00:37 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-01-08 00:37 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-01-08 00:37 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-01-07 23:29 - 2015-01-07 23:29 - 00001081 _____ () C:\Users\pokiiito\Desktop\FRST – zástupce.lnk
2015-01-07 23:23 - 2015-01-20 21:42 - 00000000 ____D () C:\FRST
2015-01-07 23:21 - 2015-01-20 21:39 - 01118208 _____ (Farbar) C:\Users\pokiiito\Downloads\FRST.exe
2015-01-06 16:45 - 2015-01-06 16:45 - 00002521 _____ () C:\Users\Public\Desktop\Skype.lnk
2015-01-06 16:45 - 2015-01-06 16:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-01-06 16:45 - 2015-01-06 16:45 - 00000000 ____D () C:\Program Files\Common Files\Skype
2015-01-06 11:03 - 2014-11-11 02:32 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-01-06 11:03 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-01-06 11:02 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-01-06 11:02 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-01-06 11:02 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-01-06 11:02 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-01-06 11:02 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2015-01-06 11:01 - 2014-12-04 05:38 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-01-06 11:01 - 2014-12-04 05:38 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-01-06 11:01 - 2014-12-04 05:38 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-01-06 11:01 - 2014-12-04 05:38 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-01-06 11:01 - 2014-12-04 05:38 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-01-06 11:01 - 2014-12-04 05:38 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-01-06 11:01 - 2014-12-04 05:34 - 00873984 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-01-06 11:01 - 2014-12-02 00:28 - 01160872 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-01-06 11:01 - 2014-10-10 01:45 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-01-06 11:01 - 2014-10-03 02:44 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-01-06 11:01 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-01-06 11:01 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-01-06 11:01 - 2014-10-03 02:44 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-01-06 11:01 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-01-06 11:01 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-01-06 11:01 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-01-06 11:01 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-01-06 11:01 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-01-06 11:01 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-01-06 11:01 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-01-06 11:01 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-01-06 11:01 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-01-06 11:00 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-01-06 11:00 - 2014-11-22 03:20 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-01-06 11:00 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-01-06 11:00 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-01-06 11:00 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-01-06 11:00 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-01-06 11:00 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-01-06 11:00 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-01-06 11:00 - 2014-11-22 02:55 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-01-06 11:00 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-01-06 11:00 - 2014-11-22 02:48 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-01-06 11:00 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-01-06 11:00 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-01-06 11:00 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-01-06 11:00 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-01-06 11:00 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-01-06 11:00 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-01-06 11:00 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-01-06 10:59 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-01-06 10:59 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-01-06 10:59 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-01-06 10:59 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-01-06 10:59 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-01-06 10:59 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-01-06 10:59 - 2014-11-22 02:23 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-01-06 10:59 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-01-06 10:59 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-01-06 10:59 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-01-06 10:59 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-01-06 10:57 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-01-06 10:56 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-01-06 10:56 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2015-01-06 10:52 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-01-06 10:52 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-01-06 10:52 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-01-06 10:52 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-01-06 10:52 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-20 21:35 - 2014-11-11 09:10 - 00001856 _____ () C:\Users\Public\Desktop\McAfee LiveSafe – Internet Security.lnk
2015-01-20 21:27 - 2014-09-25 20:12 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-01-20 21:26 - 2014-09-25 18:26 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-20 21:26 - 2011-11-15 03:48 - 01270610 _____ () C:\Windows\WindowsUpdate.log
2015-01-20 18:51 - 2012-03-26 12:30 - 00000000 ____D () C:\Users\pokiiito\AppData\Local\CrashDumps
2015-01-19 21:44 - 2010-11-20 22:01 - 01584626 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-19 21:36 - 2012-03-02 22:12 - 00000000 ____D () C:\Users\pokiiito\AppData\Roaming\Skype
2015-01-19 13:23 - 2009-07-14 05:34 - 00016160 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-19 13:23 - 2009-07-14 05:34 - 00016160 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-19 13:16 - 2014-10-09 09:58 - 00000000 ____D () C:\Program Files\McAfee
2015-01-19 13:16 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-17 10:35 - 2013-08-15 08:08 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-17 10:15 - 2012-02-25 00:51 - 110348472 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-17 10:13 - 2014-09-25 18:26 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-01-17 10:13 - 2011-08-04 12:27 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-01-09 21:40 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2015-01-08 10:19 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-01-08 09:47 - 2009-07-14 05:33 - 00440416 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-08 09:44 - 2014-05-11 07:20 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-01-08 09:44 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\AppCompat
2015-01-08 00:43 - 2012-02-27 22:30 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-01-07 23:38 - 2014-11-30 23:43 - 00031232 _____ () C:\Users\pokiiito\Desktop\provize prosinec.xls
2015-01-07 19:28 - 2011-08-04 11:57 - 00000000 ____D () C:\ProgramData\Skype
2015-01-07 19:27 - 2014-11-27 11:42 - 00000000 ___RD () C:\Program Files\Skype
2015-01-06 10:10 - 2012-02-23 15:45 - 00000000 ____D () C:\Users\pokiiito
2015-01-06 09:55 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\wfp
2015-01-06 09:54 - 2014-09-25 20:20 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2015-01-06 09:54 - 2011-08-04 12:27 - 00000000 ____D () C:\Windows\system32\Macromed
2015-01-06 09:54 - 2011-08-04 12:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-01-06 09:54 - 2011-08-04 11:59 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-01-06 09:54 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-01-06 09:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\registration
2015-01-06 09:51 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2015-01-05 23:59 - 2014-09-09 22:43 - 00007600 _____ () C:\Users\pokiiito\AppData\Local\Resmon.ResmonCfg
2015-01-01 14:10 - 2014-12-06 10:39 - 00009745 _____ () C:\Users\pokiiito\Desktop\tabulka prosinec.xlsx

==================== Files in the root of some directories =======
2009-02-04 04:46 - 2009-02-04 04:46 - 6437121 _____ () C:\Program Files\data1.cab
2009-02-04 04:46 - 2009-02-04 04:46 - 0033599 _____ () C:\Program Files\data1.hdr
2009-02-04 04:46 - 2009-02-04 04:46 - 0000512 _____ () C:\Program Files\data2.cab
2007-04-18 17:06 - 2007-04-18 17:06 - 0535552 _____ (Macrovision Corporation) C:\Program Files\ISSetup.dll
2009-02-04 04:46 - 2009-02-04 04:46 - 0000509 _____ () C:\Program Files\layout.bin
2008-05-16 09:43 - 2008-05-16 09:43 - 0176756 _____ () C:\Program Files\setup.bmp
2009-02-04 04:45 - 2009-02-04 04:45 - 0372736 _____ (Macrovision Corporation) C:\Program Files\setup.exe
2009-02-04 04:45 - 2009-02-04 04:45 - 0000827 _____ () C:\Program Files\setup.ini
2009-02-04 04:45 - 2009-02-04 04:45 - 0410940 _____ () C:\Program Files\setup.inx
2007-04-18 18:47 - 2007-04-18 18:47 - 0076009 _____ () C:\Program Files\setup.isn
2008-05-16 09:43 - 2008-05-16 09:43 - 0000286 _____ () C:\Program Files\setup.iss
2007-04-24 15:21 - 2007-04-24 15:21 - 0324552 _____ (Macrovision Corporation) C:\Program Files\_setup.dll
2014-10-09 09:13 - 2014-10-09 10:05 - 32372200 _____ (McAfee) C:\Program Files\Common Files\lpuninstall.exe
2012-03-05 20:27 - 2014-12-03 09:36 - 0001386 _____ () C:\Users\pokiiito\AppData\Roaming\Rim.Desktop.Exception.log
2012-03-06 12:21 - 2012-03-06 12:57 - 0002023 _____ () C:\Users\pokiiito\AppData\Roaming\Rim.Desktop.HttpServerSetup.log
2012-03-06 13:05 - 2014-12-03 09:36 - 0000770 _____ () C:\Users\pokiiito\AppData\Roaming\Rim.DesktopHelper.Exception.log
2013-06-03 10:14 - 2014-10-20 11:57 - 0019456 _____ () C:\Users\pokiiito\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-09-09 22:43 - 2015-01-05 23:59 - 0007600 _____ () C:\Users\pokiiito\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-14 10:40

==================== End Of Log ============================

Re: Pomalý NTB, fyz.pamět běží na 80%

Napsal: 20 led 2015 22:32
od Rudy
Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: Pomalý NTB, fyz.pamět běží na 80%

Napsal: 20 led 2015 22:59
od Pokoloko
# AdwCleaner v4.108 - Report created 20/01/2015 at 22:53:25
# Updated 17/01/2015 by Xplode
# Database : 2015-01-18.1 [Live]
# Operating System : Windows 7 Starter Service Pack 1 (32 bits)
# Username : pokiiito - POKIIITO-PC
# Running from : C:\Users\pokiiito\Downloads\adwcleaner_4.108.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EE171732-BEB4-4576-887D-CB62727F01CA}

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17496


-\\ Mozilla Firefox v35.0 (x86 cs)


*************************

AdwCleaner[R0].txt - [987 octets] - [20/01/2015 22:44:27]
AdwCleaner[S0].txt - [915 octets] - [20/01/2015 22:53:25]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [974 octets] ##########

Re: Pomalý NTB, fyz.pamět běží na 80%

Napsal: 21 led 2015 17:17
od Rudy
Dejte nový log FRST.

Re: Pomalý NTB, fyz.pamět běží na 80%

Napsal: 22 led 2015 20:11
od Pokoloko
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 19-01-2015
Ran by pokiiito (administrator) on POKIIITO-PC on 22-01-2015 19:45:55
Running from C:\Users\pokiiito\Downloads
Loaded Profiles: pokiiito (Available profiles: pokiiito)
Platform: Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Registration\GREGsvc.exe
(Realsil Microelectronics Inc.) C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(McAfee, Inc.) C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Research In Motion Limited) C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LMworker.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10025576 2011-02-11] (Realtek Semiconductor)
HKLM\...\Run: [LManager] => C:\Program Files\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1934632 2010-10-08] (Synaptics Incorporated)
HKLM\...\Run: [Power Management] => C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [715368 2011-05-10] (Acer Incorporated)
HKLM\...\Run: [RIMBBLaunchAgent.exe] => C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [90448 2011-11-02] (Research In Motion Limited)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [mcpltui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [517392 2014-04-25] (McAfee, Inc.)
HKU\S-1-5-21-1382858543-217838812-2172837122-1000\...\MountPoints2: F - F:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1382858543-217838812-2172837122-1000\...\MountPoints2: {81dec1cc-ccc0-11e1-94de-e89a8fe856bc} - F:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1382858543-217838812-2172837122-1000\...\MountPoints2: {bc6c134e-c84a-11e1-8a1f-e89a8fe856bc} - E:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1382858543-217838812-2172837122-1000\...\MountPoints2: {c7a563be-5f0d-11e1-99c6-60d8198fa4b2} - D:\AutoRun.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install SafeKey FF RunOnce.lnk
ShortcutTarget: Install SafeKey FF RunOnce.lnk -> C:\Program Files\Common Files\lpuninstall.exe (McAfee)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Install SafeKey IE RunOnce.lnk
ShortcutTarget: Install SafeKey IE RunOnce.lnk -> C:\Program Files\Common Files\lpuninstall.exe (McAfee)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1382858543-217838812-2172837122-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://packardbell.msn.com
HKU\S-1-5-21-1382858543-217838812-2172837122-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://packardbell.msn.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SafeKey Vault -> {9DB059B3-DD36-4a55-846C-59BE42A1202A} -> C:\Program Files\SafeKey\LPToolbar.dll (McAfee)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - McAfee SafeKey - {61D700C1-7D8D-43c5-9C13-4FF85157CFE6} - C:\Program Files\SafeKey\LPToolbar.dll (McAfee)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
DPF: {2FA46E0C-AFA3-416D-8F20-813C59FA00D3} https://neos.cz.o2.com/prmportal_csy/19 ... Client.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl.dll (McAfee, Inc.)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\pokiiito\AppData\Roaming\Mozilla\Firefox\Profiles\m55ufhje.default-1416904558515
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_257.dll ()
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @RIM.com/WebSLLauncher,version=1.0 -> C:\Program Files\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll ()
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files\McAfee\SiteAdvisor [2014-10-09]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF HKLM\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2014-10-09]
FF HKU\S-1-5-21-1382858543-217838812-2172837122-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - No Path
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files\McAfee\SiteAdvisor\McChPlg.crx [2015-01-13]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeActiveFileMonitor9.0; C:\Program Files\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [169408 2010-09-30] (Adobe Systems Incorporated)
R2 GREGService; C:\Program Files\Packard Bell\Registration\GREGsvc.exe [36456 2011-05-30] (Acer Incorporated)
R2 HomeNetSvc; C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)
R2 IconMan_R; C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe [1755136 2011-03-07] (Realsil Microelectronics Inc.) [File not signed]
R2 Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [244624 2011-04-22] (Acer Incorporated)
R2 McAfee SiteAdvisor Service; c:\Program Files\McAfee\SiteAdvisor\McSACore.exe [131136 2014-12-03] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [145568 2014-04-25] (McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [472072 2014-09-04] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [655936 2014-08-20] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [169800 2014-06-20] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [179600 2014-06-20] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe [281560 2013-07-30] (McAfee, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [62832 2014-06-20] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [147912 2013-09-23] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [135968 2014-06-20] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [238176 2014-06-20] (McAfee, Inc.)
S3 mfebopk; C:\Windows\System32\drivers\mfebopk.sys [67816 2014-06-20] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [369248 2014-06-20] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [576048 2014-06-20] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [350240 2014-08-20] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [81296 2014-08-20] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [217224 2014-06-20] (McAfee, Inc.)
R3 RSPCIESTOR; C:\Windows\System32\DRIVERS\RtsPStor.sys [252520 2011-03-07] (Realtek Semiconductor Corp.)
S3 ewusbmbb; system32\DRIVERS\ewusbwwan.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 Huawei; system32\DRIVERS\ewdcsc.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-22 19:49 - 2015-01-22 19:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2015-01-20 22:57 - 2015-01-22 19:38 - 00000168 _____ () C:\Windows\setupact.log
2015-01-20 22:57 - 2015-01-20 22:57 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-20 22:55 - 2015-01-20 22:55 - 00000512 _____ () C:\Windows\PFRO.log
2015-01-20 22:43 - 2015-01-20 22:53 - 00000000 ____D () C:\AdwCleaner
2015-01-20 22:43 - 2015-01-20 22:43 - 00001193 _____ () C:\Users\pokiiito\Desktop\adwcleaner_4.108 – zástupce.lnk
2015-01-20 22:41 - 2015-01-20 22:41 - 02186752 _____ () C:\Users\pokiiito\Downloads\adwcleaner_4.108.exe
2015-01-20 22:11 - 2015-01-20 22:11 - 00025624 _____ () C:\Users\pokiiito\Desktop\Addition.txt
2015-01-20 22:10 - 2015-01-20 22:10 - 00030603 _____ () C:\Users\pokiiito\Desktop\FRST.txt
2015-01-20 21:46 - 2015-01-20 21:49 - 00025624 _____ () C:\Users\pokiiito\Downloads\Addition.txt
2015-01-20 21:42 - 2015-01-22 19:53 - 00013775 _____ () C:\Users\pokiiito\Downloads\FRST.txt
2015-01-20 21:39 - 2015-01-20 21:39 - 00000000 ____D () C:\Users\pokiiito\Downloads\FRST-OlderVersion
2015-01-20 10:14 - 2015-01-20 10:16 - 00026112 _____ () C:\Users\pokiiito\Desktop\odečty_TUV,_SUV,_elektro,_plyn_apartmány(1).xls
2015-01-20 09:48 - 2015-01-20 09:49 - 00025600 _____ () C:\Users\pokiiito\Downloads\odečty_TUV,_SUV,_elektro,_plyn_apartmány(1).xls
2015-01-19 22:36 - 2015-01-19 22:36 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-01-18 11:17 - 2014-12-12 06:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-01-18 11:17 - 2014-12-12 06:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-14 10:18 - 2014-12-19 03:43 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-14 10:18 - 2014-12-11 18:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-14 10:18 - 2014-12-06 04:50 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-14 10:17 - 2014-12-19 02:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-12 12:47 - 2015-01-12 12:47 - 00025600 _____ () C:\Users\pokiiito\Downloads\odečty_TUV,_SUV,_elektro,_plyn_apartmány.xls
2015-01-08 10:18 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-01-08 09:44 - 2015-01-08 09:44 - 00000000 ____D () C:\Windows\system32\appraiser
2015-01-08 00:37 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-01-08 00:37 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-01-08 00:37 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-01-08 00:37 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-01-08 00:37 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-01-07 23:29 - 2015-01-07 23:29 - 00001081 _____ () C:\Users\pokiiito\Desktop\FRST – zástupce.lnk
2015-01-07 23:23 - 2015-01-22 19:46 - 00000000 ____D () C:\FRST
2015-01-07 23:21 - 2015-01-20 21:39 - 01118208 _____ (Farbar) C:\Users\pokiiito\Downloads\FRST.exe
2015-01-06 16:45 - 2015-01-06 16:45 - 00002521 _____ () C:\Users\Public\Desktop\Skype.lnk
2015-01-06 16:45 - 2015-01-06 16:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-01-06 16:45 - 2015-01-06 16:45 - 00000000 ____D () C:\Program Files\Common Files\Skype
2015-01-06 11:03 - 2014-11-11 02:32 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-01-06 11:03 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-01-06 11:02 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-01-06 11:02 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-01-06 11:02 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-01-06 11:02 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-01-06 11:02 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2015-01-06 11:01 - 2014-12-04 05:38 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-01-06 11:01 - 2014-12-04 05:38 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-01-06 11:01 - 2014-12-04 05:38 - 00337920 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-01-06 11:01 - 2014-12-04 05:38 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-01-06 11:01 - 2014-12-04 05:38 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-01-06 11:01 - 2014-12-04 05:38 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-01-06 11:01 - 2014-12-04 05:34 - 00873984 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-01-06 11:01 - 2014-12-02 00:28 - 01160872 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-01-06 11:01 - 2014-10-10 01:45 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-01-06 11:01 - 2014-10-03 02:44 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-01-06 11:01 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-01-06 11:01 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-01-06 11:01 - 2014-10-03 02:44 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-01-06 11:01 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-01-06 11:01 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-01-06 11:01 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-01-06 11:01 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-01-06 11:01 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-01-06 11:01 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-01-06 11:01 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-01-06 11:01 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-01-06 11:01 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-01-06 11:00 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-01-06 11:00 - 2014-11-22 03:20 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-01-06 11:00 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-01-06 11:00 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-01-06 11:00 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-01-06 11:00 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-01-06 11:00 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-01-06 11:00 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-01-06 11:00 - 2014-11-22 02:55 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-01-06 11:00 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-01-06 11:00 - 2014-11-22 02:48 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-01-06 11:00 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-01-06 11:00 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-01-06 11:00 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-01-06 11:00 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-01-06 11:00 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-01-06 11:00 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-01-06 11:00 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-01-06 10:59 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-01-06 10:59 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-01-06 10:59 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-01-06 10:59 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-01-06 10:59 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-01-06 10:59 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-01-06 10:59 - 2014-11-22 02:23 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-01-06 10:59 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-01-06 10:59 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-01-06 10:59 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-01-06 10:59 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-01-06 10:57 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-01-06 10:56 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-01-06 10:56 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2015-01-06 10:52 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-01-06 10:52 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-01-06 10:52 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-01-06 10:52 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-01-06 10:52 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-22 19:50 - 2009-07-14 05:34 - 00016160 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-22 19:50 - 2009-07-14 05:34 - 00016160 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-22 19:49 - 2014-11-11 09:10 - 00001856 _____ () C:\Users\Public\Desktop\McAfee LiveSafe – Internet Security.lnk
2015-01-22 19:48 - 2011-11-15 03:48 - 01331970 _____ () C:\Windows\WindowsUpdate.log
2015-01-22 19:39 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-21 13:00 - 2014-09-25 18:26 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-01-20 22:55 - 2014-09-25 20:12 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-01-20 18:51 - 2012-03-26 12:30 - 00000000 ____D () C:\Users\pokiiito\AppData\Local\CrashDumps
2015-01-19 21:44 - 2010-11-20 22:01 - 01584626 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-19 21:36 - 2012-03-02 22:12 - 00000000 ____D () C:\Users\pokiiito\AppData\Roaming\Skype
2015-01-19 13:16 - 2014-10-09 09:58 - 00000000 ____D () C:\Program Files\McAfee
2015-01-17 10:35 - 2013-08-15 08:08 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-17 10:15 - 2012-02-25 00:51 - 110348472 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-17 10:13 - 2014-09-25 18:26 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-01-17 10:13 - 2011-08-04 12:27 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-01-09 21:40 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2015-01-08 10:19 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-01-08 09:47 - 2009-07-14 05:33 - 00440416 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-08 09:44 - 2014-05-11 07:20 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-01-08 09:44 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\AppCompat
2015-01-08 00:43 - 2012-02-27 22:30 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-01-07 23:38 - 2014-11-30 23:43 - 00031232 _____ () C:\Users\pokiiito\Desktop\provize prosinec.xls
2015-01-07 19:28 - 2011-08-04 11:57 - 00000000 ____D () C:\ProgramData\Skype
2015-01-07 19:27 - 2014-11-27 11:42 - 00000000 ___RD () C:\Program Files\Skype
2015-01-06 10:10 - 2012-02-23 15:45 - 00000000 ____D () C:\Users\pokiiito
2015-01-06 09:55 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\wfp
2015-01-06 09:54 - 2014-09-25 20:20 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2015-01-06 09:54 - 2011-08-04 12:27 - 00000000 ____D () C:\Windows\system32\Macromed
2015-01-06 09:54 - 2011-08-04 12:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-01-06 09:54 - 2011-08-04 11:59 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-01-06 09:54 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-01-06 09:53 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\registration
2015-01-06 09:51 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2015-01-05 23:59 - 2014-09-09 22:43 - 00007600 _____ () C:\Users\pokiiito\AppData\Local\Resmon.ResmonCfg
2015-01-01 14:10 - 2014-12-06 10:39 - 00009745 _____ () C:\Users\pokiiito\Desktop\tabulka prosinec.xlsx

==================== Files in the root of some directories =======
2009-02-04 04:46 - 2009-02-04 04:46 - 6437121 _____ () C:\Program Files\data1.cab
2009-02-04 04:46 - 2009-02-04 04:46 - 0033599 _____ () C:\Program Files\data1.hdr
2009-02-04 04:46 - 2009-02-04 04:46 - 0000512 _____ () C:\Program Files\data2.cab
2007-04-18 17:06 - 2007-04-18 17:06 - 0535552 _____ (Macrovision Corporation) C:\Program Files\ISSetup.dll
2009-02-04 04:46 - 2009-02-04 04:46 - 0000509 _____ () C:\Program Files\layout.bin
2008-05-16 09:43 - 2008-05-16 09:43 - 0176756 _____ () C:\Program Files\setup.bmp
2009-02-04 04:45 - 2009-02-04 04:45 - 0372736 _____ (Macrovision Corporation) C:\Program Files\setup.exe
2009-02-04 04:45 - 2009-02-04 04:45 - 0000827 _____ () C:\Program Files\setup.ini
2009-02-04 04:45 - 2009-02-04 04:45 - 0410940 _____ () C:\Program Files\setup.inx
2007-04-18 18:47 - 2007-04-18 18:47 - 0076009 _____ () C:\Program Files\setup.isn
2008-05-16 09:43 - 2008-05-16 09:43 - 0000286 _____ () C:\Program Files\setup.iss
2007-04-24 15:21 - 2007-04-24 15:21 - 0324552 _____ (Macrovision Corporation) C:\Program Files\_setup.dll
2014-10-09 09:13 - 2014-10-09 10:05 - 32372200 _____ (McAfee) C:\Program Files\Common Files\lpuninstall.exe
2012-03-05 20:27 - 2014-12-03 09:36 - 0001386 _____ () C:\Users\pokiiito\AppData\Roaming\Rim.Desktop.Exception.log
2012-03-06 12:21 - 2012-03-06 12:57 - 0002023 _____ () C:\Users\pokiiito\AppData\Roaming\Rim.Desktop.HttpServerSetup.log
2012-03-06 13:05 - 2014-12-03 09:36 - 0000770 _____ () C:\Users\pokiiito\AppData\Roaming\Rim.DesktopHelper.Exception.log
2013-06-03 10:14 - 2014-10-20 11:57 - 0019456 _____ () C:\Users\pokiiito\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-09-09 22:43 - 2015-01-05 23:59 - 0007600 _____ () C:\Users\pokiiito\AppData\Local\Resmon.ResmonCfg

Some content of TEMP:
====================
C:\Users\pokiiito\AppData\Local\Temp\Quarantine.exe
C:\Users\pokiiito\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-14 10:40

==================== End Of Log ============================

Re: Pomalý NTB, fyz.pamět běží na 80%

Napsal: 22 led 2015 20:38
od Rudy
Otevřte poznámkový blok a zkopírujte do něj:
Start
HKU\S-1-5-21-1382858543-217838812-2172837122-1000\...\MountPoints2: F - F:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1382858543-217838812-2172837122-1000\...\MountPoints2: {81dec1cc-ccc0-11e1-94de-e89a8fe856bc} - F:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1382858543-217838812-2172837122-1000\...\MountPoints2: {bc6c134e-c84a-11e1-8a1f-e89a8fe856bc} - E:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1382858543-217838812-2172837122-1000\...\MountPoints2: {c7a563be-5f0d-11e1-99c6-60d8198fa4b2} - D:\AutoRun.exe
C:\Program Files\McAfee Security Scan
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
CHR HKLM\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - No Path
C:\Users\pokiiito\AppData\Local\Temp
End
Uložte do C:\Users\pokiiito\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Re: Pomalý NTB, fyz.pamět běží na 80%

Napsal: 22 led 2015 21:46
od Pokoloko
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 19-01-2015
Ran by pokiiito at 2015-01-22 20:49:11 Run:1
Running from C:\Users\pokiiito\Downloads
Loaded Profiles: pokiiito (Available profiles: pokiiito)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
HKU\S-1-5-21-1382858543-217838812-2172837122-1000\...\MountPoints2: F - F:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1382858543-217838812-2172837122-1000\...\MountPoints2: {81dec1cc-ccc0-11e1-94de-e89a8fe856bc} - F:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1382858543-217838812-2172837122-1000\...\MountPoints2: {bc6c134e-c84a-11e1-8a1f-e89a8fe856bc} - E:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1382858543-217838812-2172837122-1000\...\MountPoints2: {c7a563be-5f0d-11e1-99c6-60d8198fa4b2} - D:\AutoRun.exe
C:\Program Files\McAfee Security Scan
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
CHR HKLM\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - No Path
C:\Users\pokiiito\AppData\Local\Temp
End
*****************

"HKU\S-1-5-21-1382858543-217838812-2172837122-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F" => Key deleted successfully.
"HKU\S-1-5-21-1382858543-217838812-2172837122-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{81dec1cc-ccc0-11e1-94de-e89a8fe856bc}" => Key deleted successfully.
HKCR\CLSID\{81dec1cc-ccc0-11e1-94de-e89a8fe856bc} => Key not found.
"HKU\S-1-5-21-1382858543-217838812-2172837122-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{bc6c134e-c84a-11e1-8a1f-e89a8fe856bc}" => Key deleted successfully.
HKCR\CLSID\{bc6c134e-c84a-11e1-8a1f-e89a8fe856bc} => Key not found.
"HKU\S-1-5-21-1382858543-217838812-2172837122-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c7a563be-5f0d-11e1-99c6-60d8198fa4b2}" => Key deleted successfully.
HKCR\CLSID\{c7a563be-5f0d-11e1-99c6-60d8198fa4b2} => Key not found.
C:\Program Files\McAfee Security Scan => Moved successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk => Moved successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk not found.
C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}" => Key deleted successfully.
"HKCR\CLSID\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}" => Key deleted successfully.
"HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh" => Key deleted successfully.

"C:\Users\pokiiito\AppData\Local\Temp" directory move:

Could not move "C:\Users\pokiiito\AppData\Local\Temp\AdobeARM.log" => Scheduled to move on reboot.
C:\Users\pokiiito\AppData\Local\Temp\AdobeARM_NotLocked.log => Moved successfully.
C:\Users\pokiiito\AppData\Local\Temp\adwcleaner.db => Moved successfully.
C:\Users\pokiiito\AppData\Local\Temp\AdwCleaner.jpg => Moved successfully.
Could not move "C:\Users\pokiiito\AppData\Local\Temp\aipflib.log" => Scheduled to move on reboot.
C:\Users\pokiiito\AppData\Local\Temp\ArmUI.ini => Moved successfully.
C:\Users\pokiiito\AppData\Local\Temp\Cleaning.ico => Moved successfully.
C:\Users\pokiiito\AppData\Local\Temp\EULA.txt => Moved successfully.
Could not move "C:\Users\pokiiito\AppData\Local\Temp\FXSAPIDebugLogFile.txt" => Scheduled to move on reboot.
Could not move "C:\Users\pokiiito\AppData\Local\Temp\LManager.log" => Scheduled to move on reboot.
Could not move "C:\Users\pokiiito\AppData\Local\Temp\LMworker.log" => Scheduled to move on reboot.
C:\Users\pokiiito\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\pokiiito\AppData\Local\Temp\Report.ico => Moved successfully.
C:\Users\pokiiito\AppData\Local\Temp\Scan.ico => Moved successfully.
C:\Users\pokiiito\AppData\Local\Temp\sqlite3.dll => Moved successfully.
C:\Users\pokiiito\AppData\Local\Temp\Uninstall.ico => Moved successfully.
C:\Users\pokiiito\AppData\Local\Temp\Skype\DbTemp\temp-d0eKdzCfdLXkgQf70dJ8d2yg => Moved successfully.
C:\Users\pokiiito\AppData\Local\Temp\Skype\DbTemp\temp-GHaDgCKCEStdgDbYkyLeNaMg => Moved successfully.
Could not move "C:\Users\pokiiito\AppData\Local\Temp" directory. => Scheduled to move on reboot.


=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-01-22 21:43:33)<=

C:\Users\pokiiito\AppData\Local\Temp\AdobeARM.log => Is moved successfully.
C:\Users\pokiiito\AppData\Local\Temp\aipflib.log => Is moved successfully.
C:\Users\pokiiito\AppData\Local\Temp\FXSAPIDebugLogFile.txt => Is moved successfully.
C:\Users\pokiiito\AppData\Local\Temp\LManager.log => Is moved successfully.
C:\Users\pokiiito\AppData\Local\Temp\LMworker.log => Is moved successfully.
C:\Users\pokiiito\AppData\Local\Temp => Moved successfully.

==== End of Fixlog 21:43:34 ====

Re: Pomalý NTB, fyz.pamět běží na 80%

Napsal: 22 led 2015 21:57
od Rudy
Smazáno. Nastala nějaká změna?

Re: Pomalý NTB, fyz.pamět běží na 80%

Napsal: 22 led 2015 22:23
od Pokoloko
Zdá se, že vše běží mnohem rychleji. Chová se to tak. Ale při otevření mozilly se objeví hláška, že Mozilla pracuje pomalu, tak nevím jestli je to jen prohlížečem, jestli ho mám změnit. Ale ve správci úlooh to ukazuje stále fyz.pamět 85%. Tak nevím ale zatím se to tváří dobře ;)

Re: Pomalý NTB, fyz.pamět běží na 80%

Napsal: 22 led 2015 22:36
od Rudy
FF zazálohujte pomocí MozBackup: http://www.stahuj.centrum.cz/utility_a_ ... mozbackup/ . Pak FF odinstalujte vč. jeho profilu. Znovu nainstalujte a zpět ze zálohy nakopírujte pouze záložky, příp. hesla.

Re: Pomalý NTB, fyz.pamět běží na 80%

Napsal: 24 led 2015 21:53
od Pokoloko
provedeno, a vypadá to, že to běží zase normálně. Děkuju za pomoc, snad to chvíli vydrží ;)

Re: Pomalý NTB, fyz.pamět běží na 80%

Napsal: 24 led 2015 22:26
od Rudy
OK, to jsem rád! Rádo se stalo! :)
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz