VIRY.CZ

Dobrý den,
mám problém s přetíženým diskem, procesorem a samovolném přechodu do režimu spánku a selhání systému.

Můj notebook má disk na 100% a procesor na 90-100% vytíženy procesy: Hostitel služby: místní systém (omezená síť) (7); Hostitel služby: místní systém (14) a další procesy Hostitel služby. Tyto procesy se výrazně podílejí i na vytížení paměti, avšak nedosahuje průměrem nad 50%

notebook není ani teplý natož přehřátý a dochází zhruba po půl hodině po zapnutí k samovolnému přechodu do režimu spánku a následnému probuzení. Toto se občas opakuje i vícekrát po sobě bez jakéhokoliv zásahu během pár minut. Zpravidla po pár minutách od posledního probuzení z režimu spánku systém spadne, a vypne se. Po chvilce se sám zapne a začne s automatickou opravou. Ta se nezdaří a vyhodí chybu protokolu C:WINDOWS\System32\Logfiles\Srt\SrtTrail.txt
Během psaní této žádosti se celý tento proces zoopakoval 3x, jelikož jsem nenechal notebook "odpočinout" z důvodu oné prvotní půlhodiny času před prvním přechodem do spánku.

Již jsem zkusil obnovení systému pomocí bitové kopie systému z disku a poté i úplné obnovení do továrního nastavení s původním operačním systémem (Z aktualizovaného win10 na původní win8).
Předem děkuji za vaši pomoc. Vojtěch Rozínek (Vojtaroza)

Zdravím!
Dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:15-09-2015
Ran by Vojtěch (administrator) on VOJTA-PC (20-09-2015 18:17:34)
Running from C:\Users\Vojtěch\Desktop
Loaded Profiles: Vojtěch (Available Profiles: Vojtěch)
Platform: Windows 8 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 10 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.2.9200.16613_none_6273bd8950d6cae2\TiWorker.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tposd.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\extapsup.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corp.) C:\Windows\System32\Defrag.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentask.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngentask.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\ngen.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [373760 2012-07-19] (Alcor Micro Corp.)
HKLM\...\Run: [LenovoOptMouseUpdate] => C:\Program Files\Lenovo\HOTKEY\extapsup.exe [255480 2013-06-19] (Lenovo Group Limited)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2012-08-30] (Vimicro)
HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [738032 2013-11-16] (Lenovo)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-09-18] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-09-18] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-09-18] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-09-18] (SugarSync, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2013-11-16]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 81.30.224.2 81.30.225.2
Tcpip\..\Interfaces\{D826BDB8-0D67-494E-B346-56283B5EC497}: [DhcpNameServer] 81.30.224.2 81.30.225.2
Tcpip\..\Interfaces\{EBCCA47B-43E5-463C-97B4-935D23B558FF}: [DhcpNameServer] 192.168.3.1 62.129.50.20 85.135.32.100

Internet Explorer:
==================
HKU\S-1-5-21-2661270535-865548079-1860419498-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\S-1-5-21-2661270535-865548079-1860419498-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13-comm.msn.com/?pc=LNJB
HKU\S-1-5-21-2661270535-865548079-1860419498-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
SearchScopes: HKU\S-1-5-21-2661270535-865548079-1860419498-1001 -> DefaultScope {E9AAFA2C-472E-476C-8181-0EAE8AB3850F} URL =
SearchScopes: HKU\S-1-5-21-2661270535-865548079-1860419498-1001 -> {E9AAFA2C-472E-476C-8181-0EAE8AB3850F} URL =

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin HKU\S-1-5-21-2661270535-865548079-1860419498-1001: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll [2012-12-14] (Intel)
FF Plugin HKU\S-1-5-21-2661270535-865548079-1860419498-1001: intel.com/AppUpx64 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll [2012-12-14] (Intel)
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252088 2012-08-24] (Broadcom Corporation.)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [957304 2012-09-25] (Broadcom Corporation.)
R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [140016 2013-11-16] (Lenovo)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-17] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-11-16] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [165688 2012-08-24] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [6824520 2013-11-16] (Broadcom Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-25] (Microsoft Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3265256 2012-09-20] (Broadcom Corporation)
R0 Fastboot; C:\Windows\System32\DRIVERS\fastboot.sys [66288 2013-11-16] (Windows (R) Win 7 DDK provider)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-15] (Synaptics Incorporated)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [981112 2012-09-04] (Vimicro Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [35232 2013-11-16] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [230904 2013-11-16] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-20 18:17 - 2015-09-20 18:20 - 00010444 _____ C:\Users\Vojtěch\Desktop\FRST.txt
2015-09-20 18:16 - 2015-09-20 18:17 - 00000000 ____D C:\FRST
2015-09-20 18:15 - 2015-09-20 18:15 - 00029696 _____ C:\Users\Vojtěch\AppData\Local\MSGBOX.EXE
2015-09-20 18:15 - 2015-09-20 18:15 - 00015327 _____ C:\Users\Vojtěch\AppData\Local\LM.bat
2015-09-20 18:14 - 2015-09-20 18:14 - 00000717 _____ C:\Users\Vojtěch\Desktop\OSType.txt
2015-09-20 18:13 - 2015-09-20 18:13 - 02191360 _____ (Farbar) C:\Users\Vojtěch\Desktop\FRST64.exe
2015-09-20 18:13 - 2015-09-20 18:13 - 00112640 _____ (forum.viry.cz) C:\Users\Vojtěch\Desktop\FRSTLauncher.exe
2015-09-17 23:52 - 2015-09-17 23:52 - 00000000 _____ C:\Recovery.txt
2015-09-17 23:19 - 2014-05-19 19:33 - 00059416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-09-17 23:19 - 2014-05-19 16:45 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-09-17 23:19 - 2014-05-19 16:45 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-09-17 23:19 - 2014-05-19 16:24 - 03286528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-09-17 23:19 - 2014-05-19 16:24 - 01623040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-09-17 23:19 - 2014-05-19 16:24 - 00773632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-09-17 23:19 - 2014-05-19 16:24 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-09-17 23:19 - 2014-05-19 16:24 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-09-17 23:19 - 2014-05-19 16:24 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-09-17 23:19 - 2014-05-14 15:43 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-09-17 23:19 - 2014-05-14 15:43 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-09-17 23:19 - 2014-05-14 15:42 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-09-17 23:19 - 2014-05-14 15:42 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-09-17 23:19 - 2013-08-15 22:21 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-09-17 23:19 - 2013-08-15 22:21 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-09-17 23:19 - 2013-08-15 15:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-09-17 23:09 - 2015-09-17 23:17 - 00000000 ____D C:\ldiag
2015-09-17 23:08 - 2015-09-17 23:30 - 00000193 _____ C:\Users\Vojtěch\AppData\Local\RegisteredPackageInformation.xml
2015-09-17 23:08 - 2015-09-17 23:08 - 00000000 ____D C:\Users\Vojtěch\Documents\Bluetooth Exchange Folder
2015-09-17 23:08 - 2015-09-17 23:08 - 00000000 ____D C:\Users\Vojtěch\AppData\Local\Broadcom
2015-09-17 23:07 - 2015-09-17 23:07 - 00001421 _____ C:\Users\Vojtěch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-09-17 23:07 - 2015-09-17 23:07 - 00000000 ____D C:\Users\Vojtěch\AppData\Roaming\Lenovo
2015-09-17 23:07 - 2015-09-17 23:07 - 00000000 ____D C:\Users\Vojtěch\AppData\Local\LSC
2015-09-17 23:07 - 2015-09-17 23:07 - 00000000 ____D C:\Users\Vojtěch\AppData\Local\Adobe
2015-09-17 23:06 - 2015-09-17 23:06 - 00000000 ____D C:\Users\Vojtěch\AppData\Roaming\Synaptics
2015-09-17 23:06 - 2015-09-17 23:06 - 00000000 ____D C:\Users\Vojtěch\AppData\Roaming\LSC
2015-09-17 23:06 - 2015-09-17 23:06 - 00000000 ____D C:\Users\Vojtěch\AppData\Roaming\Adobe
2015-09-17 23:06 - 2015-09-17 23:06 - 00000000 ____D C:\Users\Vojtěch\AppData\Local\Absolute_Software
2015-09-17 23:06 - 2015-09-17 13:28 - 00006106 _____ C:\Users\Vojtěch\AppData\Roaming\AbsoluteReminder.xml
2015-09-17 23:05 - 2015-09-17 23:07 - 00000000 ____D C:\Users\Vojtěch\AppData\Local\Packages
2015-09-17 23:05 - 2015-09-17 23:05 - 00000000 ____D C:\Users\Vojtěch\AppData\Local\VirtualStore
2015-09-17 23:03 - 2015-09-17 23:07 - 00000000 ____D C:\Users\Vojtěch
2015-09-17 23:03 - 2015-09-17 23:03 - 00000020 ___SH C:\Users\Vojtěch\ntuser.ini
2015-09-17 23:03 - 2015-09-17 23:03 - 00000000 _SHDL C:\Users\Vojtěch\Šablony
2015-09-17 23:03 - 2015-09-17 23:03 - 00000000 _SHDL C:\Users\Vojtěch\Soubory cookie
2015-09-17 23:03 - 2015-09-17 23:03 - 00000000 _SHDL C:\Users\Vojtěch\Poslední
2015-09-17 23:03 - 2015-09-17 23:03 - 00000000 _SHDL C:\Users\Vojtěch\Okolní tiskárny
2015-09-17 23:03 - 2015-09-17 23:03 - 00000000 _SHDL C:\Users\Vojtěch\Okolní síť
2015-09-17 23:03 - 2015-09-17 23:03 - 00000000 _SHDL C:\Users\Vojtěch\Nabídka Start
2015-09-17 23:03 - 2015-09-17 23:03 - 00000000 _SHDL C:\Users\Vojtěch\Dokumenty
2015-09-17 23:03 - 2015-09-17 23:03 - 00000000 _SHDL C:\Users\Vojtěch\Documents\Obrázky
2015-09-17 23:03 - 2015-09-17 23:03 - 00000000 _SHDL C:\Users\Vojtěch\Documents\Hudba
2015-09-17 23:03 - 2015-09-17 23:03 - 00000000 _SHDL C:\Users\Vojtěch\Documents\Filmy
2015-09-17 23:03 - 2015-09-17 23:03 - 00000000 _SHDL C:\Users\Vojtěch\Data aplikací
2015-09-17 23:03 - 2015-09-17 23:03 - 00000000 _SHDL C:\Users\Vojtěch\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-09-17 23:03 - 2015-09-17 23:03 - 00000000 _SHDL C:\Users\Vojtěch\AppData\Local\Data aplikací
2015-09-17 23:03 - 2013-11-16 03:55 - 00000000 ___RD C:\Users\Vojtěch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-09-17 23:03 - 2013-11-16 03:52 - 00000000 ___RD C:\Users\Vojtěch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-09-17 23:03 - 2013-11-16 03:30 - 00000000 ____D C:\Users\Vojtěch\AppData\Roaming\Macromedia
2015-09-17 23:03 - 2013-01-14 11:58 - 00001599 _____ C:\Users\Vojtěch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LenovoToast.lnk
2015-09-17 23:03 - 2012-07-26 01:13 - 00000000 ___RD C:\Users\Vojtěch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-09-17 23:03 - 2012-07-26 01:13 - 00000000 ____D C:\Users\Vojtěch\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-09-17 12:42 - 2015-09-17 12:49 - 00000741 _____ C:\Users\Vojtěch\Desktop\Viry.cz.txt
2015-09-17 09:53 - 2015-09-17 09:53 - 00001161 _____ C:\Users\Vojtěch\Documents\fixlist.txt
2015-09-17 09:45 - 2015-09-17 13:17 - 00003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2661270535-865548079-1860419498-1001

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-20 18:15 - 2012-07-26 00:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-09-20 18:11 - 2013-11-16 03:49 - 00727488 _____ C:\WINDOWS\system32\perfh005.dat
2015-09-20 18:11 - 2013-11-16 03:49 - 00148006 _____ C:\WINDOWS\system32\perfc005.dat
2015-09-20 18:11 - 2012-07-26 01:12 - 00000000 ____D C:\WINDOWS\system32\sru
2015-09-20 18:11 - 2012-07-26 00:28 - 01714430 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-09-17 23:52 - 2013-03-25 15:01 - 00000000 ____D C:\WINDOWS\Panther
2015-09-17 23:52 - 2012-07-26 01:13 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template
2015-09-17 23:52 - 2012-07-26 01:12 - 00000000 ____D C:\WINDOWS\system32\Recovery
2015-09-17 23:27 - 2012-07-25 22:26 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-09-17 23:26 - 2012-07-26 01:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2015-09-17 23:09 - 2012-07-25 22:26 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2015-09-17 23:07 - 2013-11-16 03:40 - 00083375 _____ C:\WINDOWS\modules.log
2015-09-17 23:05 - 2012-07-26 01:12 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-09-17 23:05 - 2012-07-26 01:12 - 00000000 ____D C:\WINDOWS\WinStore
2015-09-17 23:04 - 2013-11-16 02:57 - 00281632 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-09-17 13:19 - 2013-11-16 03:02 - 01461823 _____ C:\WINDOWS\WindowsUpdate.log
2015-09-17 13:13 - 2013-11-16 03:31 - 629145600 ___SH C:\WINDOWS\lenovo_fastboot.img
2015-09-17 13:10 - 2012-07-26 00:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-09-17 09:39 - 2013-11-16 03:15 - 00000000 ____D C:\Program Files\Lenovo
2015-09-17 09:39 - 2013-11-16 03:14 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-09-17 09:39 - 2013-03-25 14:02 - 00107752 _____ C:\WINDOWS\PFRO.log
2015-09-17 09:00 - 2013-11-16 03:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools
2015-09-17 08:59 - 2013-11-16 03:44 - 00000000 ____D C:\ProgramData\Lenovo
2015-09-17 08:59 - 2013-11-16 03:31 - 00000000 ____D C:\WINDOWS\System32\Tasks\TVT
2015-09-17 08:59 - 2013-11-16 03:15 - 00000000 ____D C:\Program Files (x86)\Lenovo
2015-09-17 08:51 - 2013-11-16 03:35 - 00000000 ____D C:\ProgramData\McAfee
2015-09-17 08:47 - 2013-11-16 03:30 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2015-09-17 08:41 - 2012-07-26 01:12 - 00000000 ___HD C:\WINDOWS\ELAMBKUP

==================== Files in the root of some directories =======

2015-09-17 23:06 - 2015-09-17 13:28 - 0006106 _____ () C:\Users\Vojtěch\AppData\Roaming\AbsoluteReminder.xml
2015-09-20 18:15 - 2015-09-20 18:15 - 0015327 _____ () C:\Users\Vojtěch\AppData\Local\LM.bat
2015-09-20 18:15 - 2015-09-20 18:15 - 0029696 _____ () C:\Users\Vojtěch\AppData\Local\MSGBOX.EXE
2015-09-17 23:08 - 2015-09-17 23:30 - 0000193 _____ () C:\Users\Vojtěch\AppData\Local\RegisteredPackageInformation.xml

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-09-17 13:35

==================== End of FRST.txt ============================

Teď spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Při funkci cleaning bylo zapotřebí restartu a opět při zapínání "vyskočila" chyba. Soubor protokolu opět C:WINDOWS\System32\Logfiles\Srt\SrtTrail.txt


# AdwCleaner v5.008 - Logfile created 20/09/2015 at 18:43:17
# Updated 18/09/2015 by Xplode
# Database : 2015-09-20.1 [Server]
# Operating system : Windows 8 (x64)
# Username : Vojtěch - VOJTA-PC
# Running from : C:\Users\Vojtěch\Desktop\adwcleaner_5.008.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****


*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [604 bytes] ##########

Toto je OK. Otevřte poznámkový blok a zkopírujte do něj:

Start
SearchScopes: HKU\S-1-5-21-2661270535-865548079-1860419498-1001 -> DefaultScope {E9AAFA2C-472E-476C-8181-0EAE8AB3850F} URL =
SearchScopes: HKU\S-1-5-21-2661270535-865548079-1860419498-1001 -> {E9AAFA2C-472E-476C-8181-0EAE8AB3850F} URL =
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Dále proveďte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a rovněž dejte log. Předem nic nemažte.

Fix result of Farbar Recovery Scan Tool (x64) Version:15-09-2015
Ran by Vojtěch (2015-09-21 19:26:40) Run:1
Running from C:\Users\Vojtěch\Desktop
Loaded Profiles: Vojtěch (Available Profiles: Vojtěch)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
SearchScopes: HKU\S-1-5-21-2661270535-865548079-1860419498-1001 -> DefaultScope {E9AAFA2C-472E-476C-8181-0EAE8AB3850F} URL =
SearchScopes: HKU\S-1-5-21-2661270535-865548079-1860419498-1001 -> {E9AAFA2C-472E-476C-8181-0EAE8AB3850F} URL =
End
*****************

HKU\S-1-5-21-2661270535-865548079-1860419498-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
"HKU\S-1-5-21-2661270535-865548079-1860419498-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E9AAFA2C-472E-476C-8181-0EAE8AB3850F}" => key removed successfully
HKCR\CLSID\{E9AAFA2C-472E-476C-8181-0EAE8AB3850F} => key not found.

==== End of Fixlog 19:26:40 ====

Smazáno. Teď bych ještě rád viděl ten MBAM.

MBAM projeto, nic nenašel.

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 21. 9. 2015
Čas skenování: 19:33
Protokol: MBAM.txt
Správce: Ano

Verze: 2.1.8.1057
Databáze malwaru: v2015.09.21.05
Databáze rootkitů: v2015.09.18.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 8
CPU: x64
Souborový systém: NTFS
Uživatel: Vojtěch

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 349268
Uplynulý čas: 28 min, 40 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Jj. Zlepšilo se něco?

Hodnoty výkonu CPU a disku se vrátily do normálu. Uspávání a selhání systému probíhají mnohem méně.

Děkuji moc za vaši pomoc a zasílám podporu vašemu serveru. Jakožto stále chudý student ne moc, ale snad vám to alespoň trochu pomůže k vaší prospěšné činnosti

Rádo se stalo a za každou podporu jsme vděčni!