VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

zaplněný disk, procesor jede naplno

https://forum.viry.cz:443/viewtopic.php?t=146722

Stránka 1 z 1

zaplněný disk, procesor jede naplno

Napsal: 04 lis 2015 06:59
od Hop
Dobrý den,
prosím o pomoc s notebookem. Po instalaci Win7, Avastu a Google Chromu jede procesor naplno, a zaplnil se mi 80 GB disk během začátku instalace 196 aktualizací.
Děkuji Vám!
Posílám log:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Eva at 2015-11-04 06:52:02
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 316 MB (0%) free of 76 GB
Total RAM: 2038 MB (28% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:54:13, on 4.11.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\46.0.2490.80\Installer\chrmstp.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Eva\Downloads\RSIT.exe
C:\Program Files\trend micro\Eva.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

--
End of file - 2772 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-02 559624]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-11-02 6134544]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-11-04 06:52:04 ----D---- C:\Program Files\trend micro
2015-11-04 06:52:02 ----D---- C:\rsit
2015-11-03 21:51:15 ----A---- C:\Windows\system32\kerberos.dll
2015-11-03 21:51:14 ----A---- C:\Windows\system32\lsasrv.dll
2015-11-03 21:51:13 ----A---- C:\Windows\system32\schannel.dll
2015-11-03 21:51:13 ----A---- C:\Windows\system32\msv1_0.dll
2015-11-03 21:51:13 ----A---- C:\Windows\system32\drivers\cng.sys
2015-11-03 21:51:12 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-11-03 21:51:09 ----A---- C:\Windows\system32\adtschema.dll
2015-11-03 21:51:08 ----A---- C:\Windows\system32\wdigest.dll
2015-11-03 21:51:08 ----A---- C:\Windows\system32\TSpkg.dll
2015-11-03 21:51:08 ----A---- C:\Windows\system32\termsrv.dll
2015-11-03 21:51:08 ----A---- C:\Windows\system32\sspicli.dll
2015-11-03 21:51:08 ----A---- C:\Windows\system32\secur32.dll
2015-11-03 21:51:08 ----A---- C:\Windows\system32\ncrypt.dll
2015-11-03 21:51:08 ----A---- C:\Windows\system32\lsass.exe
2015-11-03 21:51:08 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-11-03 21:51:07 ----A---- C:\Windows\system32\sspisrv.dll
2015-11-03 21:51:07 ----A---- C:\Windows\system32\msaudite.dll
2015-11-03 21:51:07 ----A---- C:\Windows\system32\credssp.dll
2015-11-03 21:49:47 ----A---- C:\Windows\system32\shell32.dll
2015-11-03 21:49:45 ----A---- C:\Windows\system32\consent.exe
2015-11-03 21:49:45 ----A---- C:\Windows\system32\authui.dll
2015-11-03 21:49:44 ----A---- C:\Windows\system32\shdocvw.dll
2015-11-03 21:49:44 ----A---- C:\Windows\system32\appinfo.dll
2015-11-03 21:49:02 ----A---- C:\Windows\system32\WsmSvc.dll
2015-11-03 21:49:01 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2015-11-03 21:49:00 ----A---- C:\Windows\system32\WsmWmiPl.dll
2015-11-03 21:49:00 ----A---- C:\Windows\system32\WsmAuto.dll
2015-11-03 21:49:00 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2015-11-03 13:37:32 ----A---- C:\Windows\system32\rdpcore.dll
2015-11-03 13:37:31 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2015-11-03 13:37:31 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2015-11-02 23:48:33 ----D---- C:\Users\Eva\AppData\Roaming\AVAST Software
2015-11-02 23:48:03 ----D---- C:\Windows\system32\vbox
2015-11-02 23:26:42 ----SHD---- C:\Windows\Installer
2015-11-02 23:21:03 ----D---- C:\Program Files\Google
2015-11-02 23:20:15 ----A---- C:\Windows\system32\drivers\aswStm.sys
2015-11-02 23:20:13 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2015-11-02 23:20:11 ----A---- C:\Windows\system32\drivers\aswSP.sys
2015-11-02 23:20:08 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2015-11-02 23:20:05 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2015-11-02 23:20:04 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2015-11-02 23:20:03 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2015-11-02 23:19:57 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2015-11-02 23:19:55 ----A---- C:\Windows\system32\drivers\ngvss.sys
2015-11-02 23:19:50 ----A---- C:\Windows\system32\aswBoot.exe
2015-11-02 23:19:24 ----A---- C:\Windows\avastSS.scr
2015-11-02 23:13:26 ----D---- C:\Program Files\AVAST Software
2015-11-02 23:12:05 ----D---- C:\ProgramData\AVAST Software
2015-11-02 23:07:25 ----A---- C:\Windows\system32\wups2.dll
2015-11-02 23:07:25 ----A---- C:\Windows\system32\wuauclt.exe
2015-11-02 23:07:24 ----A---- C:\Windows\system32\wucltux.dll
2015-11-02 23:07:24 ----A---- C:\Windows\system32\wuaueng.dll
2015-11-02 23:07:04 ----A---- C:\Windows\system32\wups.dll
2015-11-02 23:07:04 ----A---- C:\Windows\system32\wudriver.dll
2015-11-02 23:07:04 ----A---- C:\Windows\system32\wuapi.dll
2015-11-02 23:06:23 ----A---- C:\Windows\system32\wuwebv.dll
2015-11-02 23:06:23 ----A---- C:\Windows\system32\wuapp.exe
2015-11-02 23:05:42 ----D---- C:\Users\Eva\AppData\Roaming\Identities
2015-11-02 23:04:58 ----SD---- C:\Users\Eva\AppData\Roaming\Microsoft
2015-11-02 23:04:58 ----D---- C:\Users\Eva\AppData\Roaming\Media Center Programs
2015-11-02 23:04:41 ----SHD---- C:\Recovery
2015-11-02 23:04:40 ----SHD---- C:\ProgramData\Šablony
2015-11-02 23:04:40 ----SHD---- C:\ProgramData\Plocha
2015-11-02 23:04:40 ----SHD---- C:\ProgramData\Oblíbené položky
2015-11-02 23:04:40 ----SHD---- C:\ProgramData\Nabídka Start
2015-11-02 23:04:40 ----SHD---- C:\ProgramData\Dokumenty
2015-11-02 23:04:40 ----SHD---- C:\ProgramData\Data aplikací
2015-11-02 21:44:08 ----D---- C:\Windows\SoftwareDistribution
2015-11-02 21:41:08 ----D---- C:\Windows\Prefetch
2015-11-02 21:40:10 ----ASH---- C:\hiberfil.sys
2015-11-02 21:39:13 ----D---- C:\Windows\Panther
2015-11-02 21:38:57 ----H---- C:\Boot.BAK
2015-11-02 21:27:41 ----D---- C:\Windows.old
2015-11-02 21:25:24 ----RASH---- C:\BOOTSECT.BAK
2015-11-02 21:25:16 ----SHD---- C:\Boot

======List of files/folders modified in the last 1 month======

2015-11-04 06:52:28 ----D---- C:\Windows\Temp
2015-11-04 06:52:04 ----RD---- C:\Program Files
2015-11-04 06:40:12 ----D---- C:\Windows\system32\catroot
2015-11-04 06:40:11 ----D---- C:\Windows\system32\catroot2
2015-11-04 06:33:57 ----D---- C:\Windows\Logs
2015-11-04 06:32:01 ----D---- C:\Windows
2015-11-04 06:30:40 ----D---- C:\Windows\winsxs
2015-11-04 06:22:53 ----SHD---- C:\System Volume Information
2015-11-04 04:14:33 ----D---- C:\Windows\Microsoft.NET
2015-11-04 04:10:01 ----RSD---- C:\Windows\assembly
2015-11-04 02:28:20 ----D---- C:\Windows\System32
2015-11-04 02:28:20 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-11-04 02:28:19 ----D---- C:\Windows\inf
2015-11-04 02:19:30 ----D---- C:\Windows\system32\config
2015-11-04 00:48:07 ----D---- C:\Windows\system32\drivers
2015-11-04 00:48:06 ----D---- C:\Windows\system32\cs-CZ
2015-11-03 21:35:49 ----SD---- C:\ProgramData\Microsoft
2015-11-03 21:27:56 ----D---- C:\Windows\system32\wdi
2015-11-02 23:44:07 ----D---- C:\Windows\system32\Tasks
2015-11-02 23:40:55 ----D---- C:\Windows\Tasks
2015-11-02 23:12:05 ----HD---- C:\ProgramData
2015-11-02 23:05:33 ----SHD---- C:\$Recycle.Bin
2015-11-02 23:05:20 ----D---- C:\Windows\system32\restore
2015-11-02 23:04:54 ----RD---- C:\Users
2015-11-02 23:04:41 ----D---- C:\Windows\system32\Recovery
2015-11-02 23:04:40 ----D---- C:\Program Files\Windows NT
2015-11-02 23:00:53 ----D---- C:\Windows\rescache
2015-11-02 23:00:26 ----D---- C:\Windows\debug
2015-11-02 21:49:47 ----D---- C:\Windows\system32\CodeIntegrity
2015-11-02 21:45:10 ----D---- C:\Windows\system32\sysprep
2015-11-02 21:38:57 ----RASH---- C:\Boot.ini.saved

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-11-02 49776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-11-02 208664]
R0 ngvss;ngvss; C:\Windows\system32\drivers\ngvss.sys [2015-11-02 107984]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-11-02 81728]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-11-02 789296]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-11-02 434184]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-11-02 24016]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-11-02 76000]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-11-02 115640]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-11-02 220752]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
R3 BCM43XX;Broadcom 802.11 – ovladač síťového adaptéru; C:\Windows\system32\DRIVERS\bcmwl6.sys [2009-07-13 1131008]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-06-10 4756480]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-20 84992]
R3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
R3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
R3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
S2 Parvdm;Parvdm; C:\Windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-11-02 146600]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-11-02 3219136]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-11-02 144200]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-11-02 144200]

-----------------EOF-----------------

Re: zaplněný disk, procesor jede naplno

Napsal: 04 lis 2015 09:09
od JaRon
ahoj
Pouzi TFCleaner/
http://oldtimer.geekstogo.com/TFC.exe
bolo vhodne dat do NTB vacsi disk este pred instalaciou OS

Re: zaplněný disk, procesor jede naplno

Napsal: 04 lis 2015 13:54
od Hop
Děkuji za radu, ale příliš to nepomohlo. Na disku je místo 0,3 GB 1,1 GB volných, ale procesor běží stále na 100 %.
Můžu požádat o další pomoc?
Děkuji.

Re: zaplněný disk, procesor jede naplno

Napsal: 04 lis 2015 13:57
od JaRon
to bol len prvy krok, aby si mohol akotak fungovat :)
skus vypnut automaticke aktualizacie Win a vloz log FRST
+
kolega ma upozornil:
C:\Windows.old
aky je velky a je potrebny :???:

Re: zaplněný disk, procesor jede naplno

Napsal: 04 lis 2015 14:01
od Hop
posílám náhled spuštěných procesů. Když ten nejaktivnější vypnu, klesne vytížení procesoru na 20-30%, ale po chvíli se tento proces zase spustí

Re: zaplněný disk, procesor jede naplno

Napsal: 04 lis 2015 14:07
od JaRon
Hop píše:posílám náhled spuštěných procesů. í
zatial nedosli :)

Re: zaplněný disk, procesor jede naplno

Napsal: 04 lis 2015 14:56
od Hop
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:31-10-2015
Ran by Eva (administrator) on NTB-EVA (04-11-2015 14:24:52)
Running from C:\Users\Eva\Desktop
Loaded Profiles: Eva (Available Profiles: Eva)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-11-02] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-11-02] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.10.1
Tcpip\..\Interfaces\{48EA6FD2-10D0-47ED-8BAA-B6063EF2BFFC}: [DhcpNameServer] 192.168.10.1
Tcpip\..\Interfaces\{967BB45C-E6E9-4DDD-8906-6453B436CC04}: [DhcpNameServer] 192.168.10.1

Internet Explorer:
==================
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-02] (AVAST Software)

FireFox:
========
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-02] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-02] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-11-02] [not signed]

Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-04]
CHR Extension: (Dokumenty Google) - C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-04]
CHR Extension: (Disk Google) - C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-04]
CHR Extension: (YouTube) - C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-04]
CHR Extension: (Vyhledávání Google) - C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-04]
CHR Extension: (Tabulky Google) - C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-04]
CHR Extension: (Dokumenty Google offline) - C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-04]
CHR Extension: (Avast Online Security) - C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-04]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-04]
CHR Extension: (Gmail) - C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-04]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-11-02]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-11-02] (AVAST Software)
S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3219136 2015-11-02] (Avast Software)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24016 2015-11-02] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [76000 2015-11-02] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-11-02] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49776 2015-11-02] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [789296 2015-11-02] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [434184 2015-11-02] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [115640 2015-11-02] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [208664 2015-11-02] (AVAST Software)
R0 ngvss; C:\Windows\system32\Drivers\ngvss.sys [107984 2015-11-02] (AVAST Software)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220752 2015-11-02] (Avast Software)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-04 14:24 - 2015-11-04 14:28 - 00006542 _____ C:\Users\Eva\Desktop\FRST.txt
2015-11-04 14:24 - 2015-11-04 14:25 - 00000000 ____D C:\FRST
2015-11-04 14:21 - 2015-11-04 14:22 - 01701888 _____ (Farbar) C:\Users\Eva\Desktop\FRST.exe
2015-11-04 13:16 - 2015-11-04 13:16 - 00448512 _____ (OldTimer Tools) C:\Users\Eva\Desktop\TFC.exe
2015-11-04 06:52 - 2015-11-04 06:54 - 00000000 ____D C:\rsit
2015-11-04 06:52 - 2015-11-04 06:54 - 00000000 ____D C:\Program Files\trend micro
2015-11-04 06:51 - 2015-11-04 06:51 - 01107968 _____ C:\Users\Eva\Desktop\RSIT.exe
2015-11-04 06:40 - 2015-11-04 06:40 - 00000134 _____ C:\Users\Eva\Desktop\Internet Explorer Troubleshooting.url
2015-11-04 06:32 - 2015-11-04 06:41 - 00009248 _____ C:\Windows\IE11_main.log
2015-11-04 06:17 - 2015-02-03 04:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-11-04 06:17 - 2015-02-03 04:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-11-04 06:17 - 2015-02-03 04:16 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-11-04 06:17 - 2015-02-03 04:16 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-11-04 06:17 - 2015-02-03 04:16 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-11-04 06:17 - 2015-02-03 04:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 02135040 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-11-04 06:17 - 2015-02-03 04:12 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-11-04 06:17 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-11-04 06:17 - 2015-02-03 04:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-11-04 06:17 - 2015-02-03 04:11 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-11-04 06:17 - 2015-02-03 04:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-11-04 06:17 - 2015-02-03 04:11 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-11-04 06:17 - 2015-02-03 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-11-04 06:17 - 2015-02-03 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-11-04 06:17 - 2015-02-03 04:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-11-04 06:17 - 2015-02-03 04:11 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-11-04 06:17 - 2015-02-03 04:11 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-11-04 06:17 - 2015-02-03 04:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-11-04 06:17 - 2015-02-03 04:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-11-04 06:17 - 2015-02-03 04:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-11-04 06:17 - 2015-02-03 04:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-11-04 06:17 - 2015-02-03 04:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-11-04 06:17 - 2015-02-03 04:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-11-04 06:17 - 2015-02-03 04:08 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-11-04 06:17 - 2015-02-03 04:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-11-04 06:17 - 2015-02-03 04:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-11-04 06:17 - 2015-02-03 03:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-11-04 06:17 - 2015-01-31 00:56 - 00370488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-11-04 06:17 - 2014-10-31 23:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-11-04 06:17 - 2014-06-28 01:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-11-04 06:17 - 2014-06-28 01:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-11-04 06:15 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2015-11-04 06:15 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2015-11-04 06:15 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2015-11-04 06:15 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2015-11-04 06:15 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2015-11-04 06:15 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2015-11-04 06:15 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2015-11-04 06:15 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2015-11-04 06:15 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2015-11-04 05:38 - 2015-02-04 03:54 - 00318464 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-11-04 05:36 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2015-11-04 05:36 - 2012-11-28 23:57 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2015-11-04 05:36 - 2012-11-28 23:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2015-11-04 05:36 - 2012-11-28 23:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2015-11-04 05:21 - 2015-07-15 03:55 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-11-04 05:21 - 2015-07-15 03:55 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-11-04 05:21 - 2015-07-15 03:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-11-04 05:21 - 2015-07-15 03:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-11-04 05:19 - 2014-12-19 02:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-11-04 05:11 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-11-04 05:11 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2015-11-04 05:11 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2015-11-04 05:11 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2015-11-04 05:11 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2015-11-04 05:11 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2015-11-04 03:02 - 2014-04-25 03:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-11-04 02:27 - 2015-07-15 03:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-11-04 02:25 - 2015-04-24 18:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-11-04 02:25 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-11-03 21:51 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2015-11-03 21:49 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-11-03 21:49 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-11-03 21:49 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-11-03 21:49 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-11-03 21:49 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-11-03 21:49 - 2013-02-27 06:05 - 00101720 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-11-03 21:49 - 2013-02-27 05:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-11-03 21:49 - 2013-02-27 05:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2015-11-03 21:49 - 2013-02-27 05:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-11-03 21:49 - 2013-02-27 05:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-11-03 21:48 - 2015-11-04 14:14 - 00007634 _____ C:\Users\Eva\AppData\Local\Resmon.ResmonCfg
2015-11-03 13:37 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2015-11-03 13:37 - 2012-02-17 05:14 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2015-11-03 13:37 - 2012-02-17 05:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2015-11-02 23:48 - 2015-11-02 23:48 - 00000000 ____D C:\Windows\system32\vbox
2015-11-02 23:48 - 2015-11-02 23:48 - 00000000 ____D C:\Users\Eva\AppData\Roaming\AVAST Software
2015-11-02 23:45 - 2015-11-02 23:45 - 00002079 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-11-02 23:45 - 2015-11-02 23:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-11-02 23:24 - 2015-11-02 23:24 - 00002205 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-11-02 23:24 - 2015-11-02 23:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-11-02 23:21 - 2015-11-04 13:50 - 00000936 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-11-02 23:21 - 2015-11-04 13:46 - 00000940 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-02 23:21 - 2015-11-04 10:07 - 00000000 ____D C:\Users\Eva\AppData\Local\Google
2015-11-02 23:21 - 2015-11-02 23:23 - 00000000 ____D C:\Program Files\Google
2015-11-02 23:20 - 2015-11-02 23:19 - 00434184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2015-11-02 23:20 - 2015-11-02 23:19 - 00208664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2015-11-02 23:20 - 2015-11-02 23:19 - 00115640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-11-02 23:20 - 2015-11-02 23:19 - 00081728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-11-02 23:20 - 2015-11-02 23:19 - 00076000 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-11-02 23:20 - 2015-11-02 23:19 - 00049776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2015-11-02 23:20 - 2015-11-02 23:19 - 00024016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2015-11-02 23:19 - 2015-11-02 23:19 - 00789296 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2015-11-02 23:19 - 2015-11-02 23:19 - 00313472 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-11-02 23:19 - 2015-11-02 23:19 - 00107984 _____ (AVAST Software) C:\Windows\system32\Drivers\ngvss.sys
2015-11-02 23:19 - 2015-11-02 23:19 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-11-02 23:13 - 2015-11-02 23:13 - 00000000 ____D C:\Program Files\AVAST Software
2015-11-02 23:12 - 2015-11-02 23:12 - 00000000 ____D C:\ProgramData\AVAST Software
2015-11-02 23:11 - 2015-11-02 23:11 - 00057560 _____ C:\Users\Eva\AppData\Local\GDIPFONTCACHEV1.DAT
2015-11-02 23:07 - 2014-05-14 17:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-11-02 23:07 - 2014-05-14 17:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-11-02 23:07 - 2014-05-14 17:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-11-02 23:07 - 2014-05-14 17:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-11-02 23:07 - 2014-05-14 17:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-11-02 23:07 - 2014-05-14 17:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-11-02 23:07 - 2014-05-14 17:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-11-02 23:06 - 2015-11-02 23:06 - 00001417 _____ C:\Users\Eva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-11-02 23:06 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-11-02 23:06 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-11-02 23:05 - 2015-11-02 23:05 - 00000000 ____D C:\Users\Eva\AppData\Local\VirtualStore
2015-11-02 23:04 - 2015-11-02 23:06 - 00000000 ____D C:\Users\Eva
2015-11-02 23:04 - 2015-11-02 23:04 - 00000020 ___SH C:\Users\Eva\ntuser.ini
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Public\Documents\Obrázky
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Public\Documents\Hudba
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Public\Documents\Filmy
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Šablony
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Soubory cookie
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Poslední
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Okolní tiskárny
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Okolní síť
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Nabídka Start
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Dokumenty
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Documents\Obrázky
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Documents\Hudba
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Documents\Filmy
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Data aplikací
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\AppData\Local\Data aplikací
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Šablony
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Soubory cookie
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Poslední
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Okolní tiskárny
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Okolní síť
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Nabídka Start
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Dokumenty
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Documents\Obrázky
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Documents\Hudba
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Documents\Filmy
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Data aplikací
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default User\Documents\Obrázky
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default User\Documents\Hudba
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default User\Documents\Filmy
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\ProgramData\Šablony
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\ProgramData\Plocha
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\ProgramData\Oblíbené položky
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\ProgramData\Nabídka Start
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\ProgramData\Dokumenty
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\ProgramData\Data aplikací
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 __SHD C:\Recovery
2015-11-02 23:04 - 2009-07-14 05:42 - 00000000 ___RD C:\Users\Eva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-11-02 23:04 - 2009-07-14 05:37 - 00000000 ___RD C:\Users\Eva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-11-02 21:45 - 2015-11-02 21:45 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2015-11-02 21:45 - 2015-11-02 21:45 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2015-11-02 21:44 - 2015-11-04 14:18 - 01204432 _____ C:\Windows\WindowsUpdate.log
2015-11-02 21:41 - 2015-11-02 21:45 - 00001355 _____ C:\Windows\TSSysprep.log
2015-11-02 21:39 - 2015-11-02 23:04 - 00000000 ____D C:\Windows\Panther
2015-11-02 21:38 - 2007-11-27 22:07 - 00000211 ____H C:\Boot.BAK
2015-11-02 21:25 - 2015-11-02 21:39 - 00008192 __RSH C:\BOOTSECT.BAK
2015-11-02 21:25 - 2014-06-28 01:21 - 00391640 __RSH C:\bootmgr

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-04 14:04 - 2010-11-20 22:01 - 01445734 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-04 13:50 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-04 13:49 - 2009-07-14 05:53 - 00003960 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-11-04 13:46 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2015-11-04 13:27 - 2009-07-14 05:39 - 00027183 _____ C:\Windows\setupact.log
2015-11-04 13:25 - 2009-07-14 05:34 - 00019264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-04 13:25 - 2009-07-14 05:34 - 00019264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-11-04 13:22 - 2010-11-20 22:48 - 00006300 _____ C:\Windows\PFRO.log
2015-11-02 23:05 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\restore
2015-11-02 23:04 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Default
2015-11-02 23:04 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\Recovery
2015-11-02 23:04 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Windows NT
2015-11-02 21:45 - 2009-07-14 05:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-11-02 21:45 - 2009-07-14 03:37 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-11-02 21:41 - 2009-07-14 05:34 - 00002790 _____ C:\Windows\DtcInstall.log
2015-11-02 21:41 - 2009-07-14 05:33 - 00265880 _____ C:\Windows\system32\FNTCACHE.DAT
2015-11-02 21:38 - 2009-07-14 05:57 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2015-11-02 21:38 - 2009-07-14 05:52 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2015-11-02 21:38 - 2007-11-27 23:00 - 00000355 __RSH C:\Boot.ini.saved

==================== Files in the root of some directories =======

2015-11-03 21:48 - 2015-11-04 14:14 - 0007634 _____ () C:\Users\Eva\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-11-04 10:55

==================== End of FRST.txt ============================

Re: zaplněný disk, procesor jede naplno

Napsal: 04 lis 2015 14:56
od Hop
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:31-10-2015
Ran by Eva (administrator) on NTB-EVA (04-11-2015 14:24:52)
Running from C:\Users\Eva\Desktop
Loaded Profiles: Eva (Available Profiles: Eva)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6134544 2015-11-02] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-11-02] (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.10.1
Tcpip\..\Interfaces\{48EA6FD2-10D0-47ED-8BAA-B6063EF2BFFC}: [DhcpNameServer] 192.168.10.1
Tcpip\..\Interfaces\{967BB45C-E6E9-4DDD-8906-6453B436CC04}: [DhcpNameServer] 192.168.10.1

Internet Explorer:
==================
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-02] (AVAST Software)

FireFox:
========
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-02] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-02] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-11-02] [not signed]

Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-04]
CHR Extension: (Dokumenty Google) - C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-04]
CHR Extension: (Disk Google) - C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-04]
CHR Extension: (YouTube) - C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-04]
CHR Extension: (Vyhledávání Google) - C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-04]
CHR Extension: (Tabulky Google) - C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-04]
CHR Extension: (Dokumenty Google offline) - C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-04]
CHR Extension: (Avast Online Security) - C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-04]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-04]
CHR Extension: (Gmail) - C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-04]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-11-02]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-11-02] (AVAST Software)
S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3219136 2015-11-02] (Avast Software)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24016 2015-11-02] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [76000 2015-11-02] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-11-02] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49776 2015-11-02] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [789296 2015-11-02] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [434184 2015-11-02] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [115640 2015-11-02] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [208664 2015-11-02] (AVAST Software)
R0 ngvss; C:\Windows\system32\Drivers\ngvss.sys [107984 2015-11-02] (AVAST Software)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220752 2015-11-02] (Avast Software)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-04 14:24 - 2015-11-04 14:28 - 00006542 _____ C:\Users\Eva\Desktop\FRST.txt
2015-11-04 14:24 - 2015-11-04 14:25 - 00000000 ____D C:\FRST
2015-11-04 14:21 - 2015-11-04 14:22 - 01701888 _____ (Farbar) C:\Users\Eva\Desktop\FRST.exe
2015-11-04 13:16 - 2015-11-04 13:16 - 00448512 _____ (OldTimer Tools) C:\Users\Eva\Desktop\TFC.exe
2015-11-04 06:52 - 2015-11-04 06:54 - 00000000 ____D C:\rsit
2015-11-04 06:52 - 2015-11-04 06:54 - 00000000 ____D C:\Program Files\trend micro
2015-11-04 06:51 - 2015-11-04 06:51 - 01107968 _____ C:\Users\Eva\Desktop\RSIT.exe
2015-11-04 06:40 - 2015-11-04 06:40 - 00000134 _____ C:\Users\Eva\Desktop\Internet Explorer Troubleshooting.url
2015-11-04 06:32 - 2015-11-04 06:41 - 00009248 _____ C:\Windows\IE11_main.log
2015-11-04 06:17 - 2015-02-03 04:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-11-04 06:17 - 2015-02-03 04:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-11-04 06:17 - 2015-02-03 04:16 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-11-04 06:17 - 2015-02-03 04:16 - 00078784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-11-04 06:17 - 2015-02-03 04:16 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-11-04 06:17 - 2015-02-03 04:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 02135040 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-11-04 06:17 - 2015-02-03 04:12 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-11-04 06:17 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-11-04 06:17 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-11-04 06:17 - 2015-02-03 04:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-11-04 06:17 - 2015-02-03 04:11 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-11-04 06:17 - 2015-02-03 04:11 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-11-04 06:17 - 2015-02-03 04:11 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-11-04 06:17 - 2015-02-03 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-11-04 06:17 - 2015-02-03 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-11-04 06:17 - 2015-02-03 04:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-11-04 06:17 - 2015-02-03 04:11 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-11-04 06:17 - 2015-02-03 04:11 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-11-04 06:17 - 2015-02-03 04:11 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-11-04 06:17 - 2015-02-03 04:11 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-11-04 06:17 - 2015-02-03 04:10 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-11-04 06:17 - 2015-02-03 04:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-11-04 06:17 - 2015-02-03 04:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-11-04 06:17 - 2015-02-03 04:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-11-04 06:17 - 2015-02-03 04:08 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-11-04 06:17 - 2015-02-03 04:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-11-04 06:17 - 2015-02-03 04:00 - 00593920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-11-04 06:17 - 2015-02-03 03:26 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-11-04 06:17 - 2015-01-31 00:56 - 00370488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-11-04 06:17 - 2014-10-31 23:22 - 00521384 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-11-04 06:17 - 2014-06-28 01:21 - 00455752 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2015-11-04 06:17 - 2014-06-28 01:21 - 00409272 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2015-11-04 06:15 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2015-11-04 06:15 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2015-11-04 06:15 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2015-11-04 06:15 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2015-11-04 06:15 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2015-11-04 06:15 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2015-11-04 06:15 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2015-11-04 06:15 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2015-11-04 06:15 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2015-11-04 05:38 - 2015-02-04 03:54 - 00318464 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-11-04 05:36 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2015-11-04 05:36 - 2012-11-28 23:57 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2015-11-04 05:36 - 2012-11-28 23:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2015-11-04 05:36 - 2012-11-28 23:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2015-11-04 05:21 - 2015-07-15 03:55 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-11-04 05:21 - 2015-07-15 03:55 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-11-04 05:21 - 2015-07-15 03:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-11-04 05:21 - 2015-07-15 03:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-11-04 05:19 - 2014-12-19 02:34 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-11-04 05:11 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-11-04 05:11 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2015-11-04 05:11 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2015-11-04 05:11 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2015-11-04 05:11 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2015-11-04 05:11 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2015-11-04 03:02 - 2014-04-25 03:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-11-04 02:27 - 2015-07-15 03:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-11-04 02:25 - 2015-04-24 18:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-11-04 02:25 - 2014-12-08 03:46 - 00308224 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2015-11-03 21:51 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2015-11-03 21:49 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-11-03 21:49 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-11-03 21:49 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-11-03 21:49 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-11-03 21:49 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-11-03 21:49 - 2013-02-27 06:05 - 00101720 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-11-03 21:49 - 2013-02-27 05:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-11-03 21:49 - 2013-02-27 05:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2015-11-03 21:49 - 2013-02-27 05:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-11-03 21:49 - 2013-02-27 05:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-11-03 21:48 - 2015-11-04 14:14 - 00007634 _____ C:\Users\Eva\AppData\Local\Resmon.ResmonCfg
2015-11-03 13:37 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2015-11-03 13:37 - 2012-02-17 05:14 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2015-11-03 13:37 - 2012-02-17 05:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2015-11-02 23:48 - 2015-11-02 23:48 - 00000000 ____D C:\Windows\system32\vbox
2015-11-02 23:48 - 2015-11-02 23:48 - 00000000 ____D C:\Users\Eva\AppData\Roaming\AVAST Software
2015-11-02 23:45 - 2015-11-02 23:45 - 00002079 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-11-02 23:45 - 2015-11-02 23:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-11-02 23:24 - 2015-11-02 23:24 - 00002205 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-11-02 23:24 - 2015-11-02 23:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-11-02 23:21 - 2015-11-04 13:50 - 00000936 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-11-02 23:21 - 2015-11-04 13:46 - 00000940 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-02 23:21 - 2015-11-04 10:07 - 00000000 ____D C:\Users\Eva\AppData\Local\Google
2015-11-02 23:21 - 2015-11-02 23:23 - 00000000 ____D C:\Program Files\Google
2015-11-02 23:20 - 2015-11-02 23:19 - 00434184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2015-11-02 23:20 - 2015-11-02 23:19 - 00208664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2015-11-02 23:20 - 2015-11-02 23:19 - 00115640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-11-02 23:20 - 2015-11-02 23:19 - 00081728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-11-02 23:20 - 2015-11-02 23:19 - 00076000 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-11-02 23:20 - 2015-11-02 23:19 - 00049776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2015-11-02 23:20 - 2015-11-02 23:19 - 00024016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2015-11-02 23:19 - 2015-11-02 23:19 - 00789296 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2015-11-02 23:19 - 2015-11-02 23:19 - 00313472 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-11-02 23:19 - 2015-11-02 23:19 - 00107984 _____ (AVAST Software) C:\Windows\system32\Drivers\ngvss.sys
2015-11-02 23:19 - 2015-11-02 23:19 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-11-02 23:13 - 2015-11-02 23:13 - 00000000 ____D C:\Program Files\AVAST Software
2015-11-02 23:12 - 2015-11-02 23:12 - 00000000 ____D C:\ProgramData\AVAST Software
2015-11-02 23:11 - 2015-11-02 23:11 - 00057560 _____ C:\Users\Eva\AppData\Local\GDIPFONTCACHEV1.DAT
2015-11-02 23:07 - 2014-05-14 17:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-11-02 23:07 - 2014-05-14 17:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-11-02 23:07 - 2014-05-14 17:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-11-02 23:07 - 2014-05-14 17:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-11-02 23:07 - 2014-05-14 17:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-11-02 23:07 - 2014-05-14 17:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-11-02 23:07 - 2014-05-14 17:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-11-02 23:06 - 2015-11-02 23:06 - 00001417 _____ C:\Users\Eva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-11-02 23:06 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-11-02 23:06 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-11-02 23:05 - 2015-11-02 23:05 - 00000000 ____D C:\Users\Eva\AppData\Local\VirtualStore
2015-11-02 23:04 - 2015-11-02 23:06 - 00000000 ____D C:\Users\Eva
2015-11-02 23:04 - 2015-11-02 23:04 - 00000020 ___SH C:\Users\Eva\ntuser.ini
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Public\Documents\Obrázky
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Public\Documents\Hudba
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Public\Documents\Filmy
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Šablony
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Soubory cookie
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Poslední
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Okolní tiskárny
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Okolní síť
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Nabídka Start
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Dokumenty
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Documents\Obrázky
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Documents\Hudba
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Documents\Filmy
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\Data aplikací
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Eva\AppData\Local\Data aplikací
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Šablony
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Soubory cookie
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Poslední
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Okolní tiskárny
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Okolní síť
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Nabídka Start
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Dokumenty
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Documents\Obrázky
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Documents\Hudba
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Documents\Filmy
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\Data aplikací
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default\AppData\Local\Data aplikací
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default User\Documents\Obrázky
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default User\Documents\Hudba
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default User\Documents\Filmy
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Data aplikací
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\ProgramData\Šablony
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\ProgramData\Plocha
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\ProgramData\Oblíbené položky
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\ProgramData\Nabídka Start
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programy
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\ProgramData\Dokumenty
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 _SHDL C:\ProgramData\Data aplikací
2015-11-02 23:04 - 2015-11-02 23:04 - 00000000 __SHD C:\Recovery
2015-11-02 23:04 - 2009-07-14 05:42 - 00000000 ___RD C:\Users\Eva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-11-02 23:04 - 2009-07-14 05:37 - 00000000 ___RD C:\Users\Eva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-11-02 21:45 - 2015-11-02 21:45 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2015-11-02 21:45 - 2015-11-02 21:45 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2015-11-02 21:44 - 2015-11-04 14:18 - 01204432 _____ C:\Windows\WindowsUpdate.log
2015-11-02 21:41 - 2015-11-02 21:45 - 00001355 _____ C:\Windows\TSSysprep.log
2015-11-02 21:39 - 2015-11-02 23:04 - 00000000 ____D C:\Windows\Panther
2015-11-02 21:38 - 2007-11-27 22:07 - 00000211 ____H C:\Boot.BAK
2015-11-02 21:25 - 2015-11-02 21:39 - 00008192 __RSH C:\BOOTSECT.BAK
2015-11-02 21:25 - 2014-06-28 01:21 - 00391640 __RSH C:\bootmgr

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-04 14:04 - 2010-11-20 22:01 - 01445734 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-04 13:50 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-04 13:49 - 2009-07-14 05:53 - 00003960 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-11-04 13:46 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2015-11-04 13:27 - 2009-07-14 05:39 - 00027183 _____ C:\Windows\setupact.log
2015-11-04 13:25 - 2009-07-14 05:34 - 00019264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-04 13:25 - 2009-07-14 05:34 - 00019264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-11-04 13:22 - 2010-11-20 22:48 - 00006300 _____ C:\Windows\PFRO.log
2015-11-02 23:05 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\restore
2015-11-02 23:04 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Default
2015-11-02 23:04 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\Recovery
2015-11-02 23:04 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Windows NT
2015-11-02 21:45 - 2009-07-14 05:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-11-02 21:45 - 2009-07-14 03:37 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-11-02 21:41 - 2009-07-14 05:34 - 00002790 _____ C:\Windows\DtcInstall.log
2015-11-02 21:41 - 2009-07-14 05:33 - 00265880 _____ C:\Windows\system32\FNTCACHE.DAT
2015-11-02 21:38 - 2009-07-14 05:57 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2015-11-02 21:38 - 2009-07-14 05:52 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2015-11-02 21:38 - 2007-11-27 23:00 - 00000355 __RSH C:\Boot.ini.saved

==================== Files in the root of some directories =======

2015-11-03 21:48 - 2015-11-04 14:14 - 0007634 _____ () C:\Users\Eva\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-11-04 10:55

==================== End of FRST.txt ============================

Re: zaplněný disk, procesor jede naplno

Napsal: 04 lis 2015 15:07
od JaRon
skus vypnut obnovu systemu - restart a pozri kolko mesta sa uvolnilo
ja nadnes koncim :)

Re: zaplněný disk, procesor jede naplno

Napsal: 04 lis 2015 21:16
od Hop
Děkuji za pomoc!

Re: zaplněný disk, procesor jede naplno

Napsal: 05 lis 2015 07:06
od JaRon
nezabudni zapnut obnovu systemu, nastav vsak posuvatkom nejaku rozumnu velkost pre obnovu
nemas zac :)
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz