VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

pomalý NT, svchost.exe na 60%

https://forum.viry.cz:443/viewtopic.php?t=147592

Stránka 1 z 2

pomalý NT, svchost.exe na 60%

Napsal: 15 led 2016 10:25
od milvin
Dobrý deň,
potreboval by som skontrolovať ešte tento druhý(manželkin) NT(prvý aktuálne riešim s Rudym v téme blacklists), je strašne pomalý a výkon procesora ide takmer na 60% a to nemám nič spustené, pozeral som v správcovi a svchost.exe je najviac vyťažený.
Ďakujem.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:10-01-2015 01
Ran by Monika (administrator) on MONIKA-VAIO (15-01-2016 10:13:47)
Running from C:\Users\Monika\Desktop
Loaded Profiles: Monika (Available Profiles: Monika)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
() C:\Users\Monika\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe
() C:\ProgramData\DatacardService\HWDeviceService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Sony Corporation) C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(DEVGURU Co., LTD.) C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgrSub.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgrSub.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Sony Corporation) C:\Program Files\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Google Inc.) C:\Users\Monika\AppData\Local\Google\Update\GoogleUpdate.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(PC Utilities Pro) C:\Program Files\Optimizer Pro\OptProSmartScan.exe
() C:\ProgramData\Boxtools\Toolbox.exe
(PC Utilities Pro) C:\Program Files\Optimizer Pro\OptProReminder.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrv.exe
(Google Inc.) C:\Users\Monika\AppData\Local\Google\Update\GoogleUpdate.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Google Inc.) C:\Users\Monika\AppData\Local\Google\Update\GoogleUpdate.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
() C:\Users\Monika\AppData\Local\Google\Update\Install\{9335F2C0-D83A-491B-A427-4390239209DD}\47.0.2526.111_47.0.2526.106_chrome_updater_3stage.exe
(Google Inc.) C:\Users\Monika\AppData\Local\temp\CR_0EC00.tmp\setup.exe
(ArcSoft, Inc.) C:\Program Files\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(forum.viry.cz) C:\Users\Monika\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9398888 2010-11-01] (Realtek Semiconductor)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-24] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1873192 2010-11-01] (Synaptics Incorporated)
HKLM\...\Run: [ISBMgr.exe] => C:\Program Files\Sony\ISB Utility\ISBMgr.exe [2757312 2011-02-15] (Sony Corporation)
HKLM\...\Run: [PMBVolumeWatcher] => C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe [648032 2010-11-27] (Sony Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6133520 2015-11-13] (AVAST Software)
HKLM\...\RunOnce: [20150107] => C:\Program Files\AVAST Software\Avast\setup\emupdate\a77c5bb4-f521-4ea9-bcc6-ef6d08b70f99.exe [168336 2016-01-15] (AVAST Software)
HKU\S-1-5-21-2387537690-525447489-1842085765-1001\...\Run: [Google Update] => C:\Users\Monika\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-01] (Google Inc.)
HKU\S-1-5-21-2387537690-525447489-1842085765-1001\...\Run: [Optimizer Pro] => C:\Program Files\Optimizer Pro\OptProLauncher.exe [81952 2012-10-30] (PC Utilities Pro)
HKU\S-1-5-21-2387537690-525447489-1842085765-1001\...\Run: [Boxoft Tools] => C:\ProgramData\Boxtools\Boxofttoolbox.exe [514048 2010-12-15] ()
HKU\S-1-5-18\...\Run: [Mobile Partner] => C:\Program Files\MobileWiFi\MobileWiFi
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-10-07] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2011-10-21]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
CHR HKU\S-1-5-21-2387537690-525447489-1842085765-1001\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{360F469F-7407-4903-984F-C06FBB9063ED}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{3B22F01C-9684-45BE-8171-1CD3BD37A9B1}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{F9C688F4-C6B4-46B5-BC71-630CFD879340}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2387537690-525447489-1842085765-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2387537690-525447489-1842085765-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2387537690-525447489-1842085765-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mysearchresults.com/?c=2402&t=15
HKU\S-1-5-21-2387537690-525447489-1842085765-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://sony.msn.com
SearchScopes: HKLM -> DefaultScope value is missing
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-2387537690-525447489-1842085765-1001 -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-21-2387537690-525447489-1842085765-1001 -> {829AF7B2-A1B2-43D0-A6C6-5C7CAFFEB237} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices
SearchScopes: HKU\S-1-5-21-2387537690-525447489-1842085765-1001 -> {A4A3B8F5-E977-412F-90E0-98D82DE27AE8} URL = hxxp://www.mysearchresults.com/search?c=2402&t ... earchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-11-15] (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-02-09] (Oracle Corporation)
BHO: DefaultTab Browser Helper -> {7F6AFBF1-E065-4627-A2FD-810366367D01} -> C:\Users\Monika\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll [2014-11-05] (Search Results LLC.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-10-07] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Staging -> {C35B7206-62EB-F808-5475-18A6FDE7DD94} -> c:\Users\All Users\dl159\159.dll [2014-11-20] ()
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-02-09] (Oracle Corporation)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\27iyp5xm.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-10] ()
FF Plugin: @java.com/DTPlugin,version=10.13.2 -> C:\Windows\system32\npDeployJava1.dll [2013-02-09] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.13.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-02-09] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin: @SonyCreativeSoftware.com/Media Go,version=1.0 -> C:\Program Files\Sony\Media Go\npmediago.dll [2012-02-03] (Sony Network Entertainment International LLC)
FF Plugin HKU\S-1-5-21-2387537690-525447489-1842085765-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Monika\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.)
FF Plugin HKU\S-1-5-21-2387537690-525447489-1842085765-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Monika\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-06] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-10]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.search.ask.com/?p2=%5EB3L%5EYYYYYY% ... 07-01&psv=
CHR StartupUrls: Default -> "hxxp://www.google.sk/"
CHR NewTab: Default -> "chrome-extension://pfkanglmmnniiolknlhaajllgmlgcdkj/stubby.html"
CHR DefaultSearchURL: Default -> hxxp://search.tb.ask.com/search/GGmain.jhtml?searchfor={searchTerms}&st=kwd&ptb=A88EAFE4-3981-49D8-8F17-3264D51B2AC4&n=780b60d5&ind=2014011605&p2=^AYY^xdm095^YYA^sk&si=pconverter
CHR DefaultSearchKeyword: Default -> askws
CHR DefaultSuggestURL: Default -> hxxp://ssmsp.ask.com/query?q={searchTerms}&li=ff&sstype=prefix
CHR Profile: C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Angry Birds) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2014-12-18]
CHR Extension: (YouTube) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-11-11]
CHR Extension: (Hľadať v Google) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-11-11]
CHR Extension: (Avast Online Security) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-23]
CHR Extension: (avast! WebRep) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda [2011-12-18]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-25]
CHR Extension: (Check All) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnbihdpkeohjdfncchjhidbbonnihaob [2015-10-07]
CHR Extension: (Allin1Convert) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkanglmmnniiolknlhaajllgmlgcdkj [2015-02-18]
CHR Extension: (Gmail) - C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-11-11]
CHR HKLM\...\Chrome\Extension: [fafflihlobapaehhjjldghidkamjjdmk] - C:\ProgramData\wxDownload\fafflihlobapaehhjjldghidkamjjdmk.crx <not found>
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-10-07]
CHR HKLM\...\Chrome\Extension: [ieejibjnkkgaadmlclfghagaiegjpokp] - C:\ProgramData\continuetosave\ieejibjnkkgaadmlclfghagaiegjpokp.crx <not found>
StartMenuInternet: Google Chrome - C:\Users\Monika\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [294400 2011-05-24] (Advanced Micro Devices, Inc.) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-07] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3219136 2015-10-07] (Avast Software)
R2 DefaultTabUpdate; C:\Users\Monika\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe [107520 2013-05-17] () [File not signed]
R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [271712 2011-03-14] ()
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [189048 2011-01-29] (Sony Corporation)
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155320 2012-01-18] (Avanquest Software) [File not signed]
R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [741640 2014-06-16] (DEVGURU Co., LTD.)
R2 uCamMonitor; C:\Program Files\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.)
R2 VAIO Event Service; C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [64704 2011-03-05] (Sony Corporation)
S3 VcmIAlzMgr; C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [549616 2011-05-19] (Sony Corporation)
S3 VcmINSMgr; C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [385336 2011-02-18] (Sony Corporation)
R2 VSNService; C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [772800 2011-02-28] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [957056 2012-10-26] (Sony Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amd_sata; C:\Windows\System32\drivers\amd_sata.sys [64128 2011-02-17] (Advanced Micro Devices)
R0 amd_xata; C:\Windows\System32\drivers\amd_xata.sys [32384 2011-02-17] (Advanced Micro Devices)
R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [17408 2009-05-26] (ArcSoft, Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24016 2015-10-07] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [76000 2015-10-07] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-10-07] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49776 2015-10-07] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [794952 2015-11-13] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [435464 2015-11-13] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [115640 2015-10-07] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [208664 2015-10-07] (AVAST Software)
R3 btwampfl; C:\Windows\System32\drivers\btwampfl.sys [297000 2010-11-01] (Broadcom Corporation.)
S3 huawei_cdcacm; C:\Windows\System32\DRIVERS\ew_jucdcacm.sys [90368 2011-02-25] (Huawei Technologies Co., Ltd.)
S3 huawei_cdcecm; C:\Windows\System32\DRIVERS\ew_jucdcecm.sys [64384 2011-01-30] (Huawei Technologies Co., Ltd.)
S3 huawei_ext_ctrl; C:\Windows\System32\DRIVERS\ew_juextctrl.sys [26624 2011-01-30] (Huawei Technologies Co., Ltd.)
R0 ngvss; C:\Windows\system32\Drivers\ngvss.sys [107984 2015-10-07] (AVAST Software)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220752 2015-10-07] (Avast Software)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-15 10:13 - 2016-01-15 10:14 - 00020601 _____ C:\Users\Monika\Desktop\FRST.txt
2016-01-15 10:13 - 2016-01-15 10:13 - 00000000 ____D C:\FRST
2016-01-15 10:12 - 2016-01-15 10:12 - 01721856 _____ (Farbar) C:\Users\Monika\Desktop\FRST.exe
2016-01-15 10:09 - 2016-01-15 10:10 - 00112640 _____ (forum.viry.cz) C:\Users\Monika\Desktop\FRSTLauncher.exe
2016-01-15 09:53 - 2016-01-15 09:53 - 00069688 _____ C:\Users\Monika\AppData\Local\GDIPFONTCACHEV1.DAT
2016-01-15 09:50 - 2016-01-15 09:51 - 00308640 _____ C:\Windows\system32\FNTCACHE.DAT
2016-01-15 09:28 - 2016-01-15 09:28 - 06808384 _____ (Piriform Ltd) C:\Users\Monika\Downloads\37F8.tmp
2016-01-15 09:19 - 2016-01-15 09:19 - 00000679 _____ C:\Users\Monika\Desktop\Monika - odkaz.lnk
2016-01-15 09:11 - 2016-01-15 09:19 - 00000000 ____D C:\Monika
2015-12-24 20:23 - 2015-12-24 20:24 - 00000000 ____D C:\60ba0f1e398dd3facf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-01-15 10:13 - 2009-07-14 03:37 - 00000000 ____D C:\Windows
2016-01-15 10:08 - 2009-07-14 05:34 - 00028256 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-01-15 10:08 - 2009-07-14 05:34 - 00028256 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-01-15 09:57 - 2010-11-20 22:01 - 00783360 _____ C:\Windows\system32\PerfStringBackup.INI
2016-01-15 09:57 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2016-01-15 09:51 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-01-15 09:40 - 2014-10-21 12:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre
2016-01-15 09:38 - 2013-02-09 09:19 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-01-15 09:21 - 2014-12-03 15:30 - 00000000 __SHD C:\Users\Monika\AppData\Local\EmieBrowserModeList
2016-01-15 09:21 - 2014-09-10 14:36 - 00000000 __SHD C:\Users\Monika\AppData\Local\EmieUserList
2016-01-15 09:21 - 2014-09-10 14:36 - 00000000 __SHD C:\Users\Monika\AppData\Local\EmieSiteList
2016-01-15 08:39 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2015-12-25 19:51 - 2011-12-14 23:51 - 00000000 ____D C:\Users\Monika\AppData\Roaming\Skype
2015-12-25 19:46 - 2015-01-05 17:59 - 00000000 ____D C:\ProgramData\Boxtools
2015-12-25 19:41 - 2011-12-18 18:09 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2387537690-525447489-1842085765-1001Core.job
2015-12-24 20:23 - 2015-04-18 10:23 - 00000000 ___SD C:\Windows\system32\GWX
2015-12-24 20:22 - 2011-12-14 20:40 - 00000000 ____D C:\Users\Monika\AppData\Roaming\SoftGrid Client
2015-12-24 20:03 - 2011-10-21 22:04 - 00000000 ____D C:\ProgramData\Skype

==================== Files in the root of some directories =======

2015-01-05 17:59 - 2015-01-06 09:31 - 0000040 _____ () C:\Users\Monika\AppData\Roaming\cdr.ini
2011-12-17 15:47 - 2013-02-12 19:43 - 0007660 _____ () C:\Users\Monika\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2387537690-525447489-1842085765-1001Core.job => C:\Users\Monika\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2387537690-525447489-1842085765-1001UA.job => C:\Users\Monika\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: avast! Antivirus (Enabled - Out of date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Out of date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Monika\Desktop" je 8618 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher
"C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Re: pomalý NT, svchost.exe na 60%

Napsal: 15 led 2016 10:37
od JaRon
ahoj,
1. Velikost slozky "C:\Users\Monika\Desktop" je 8618 MB. nema byt viac ako 300MB
2. vycisti PC s ADWCleanerom

Re: pomalý NT, svchost.exe na 60%

Napsal: 15 led 2016 10:59
od milvin
Na ploche boli mp3, už som ich presunul. Tu je log s ADW:

# AdwCleaner v5.029 - Logfile created 15/01/2016 at 10:48:50
# Updated 11/01/2016 by Xplode
# Database : 2016-01-14.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x86)
# Username : Monika - MONIKA-VAIO
# Running from : C:\Users\Monika\Desktop\adwcleaner_5.029.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : DefaultTabUpdate

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files\defaulttab
[-] Folder Deleted : C:\Program Files\OApps
[-] Folder Deleted : C:\Program Files\WxDownload
[!] Folder Not Deleted : C:\Program Files\wxDownload
[-] Folder Deleted : C:\Program Files\Optimizer Pro
[-] Folder Deleted : C:\ProgramData\apn
[-] Folder Deleted : C:\ProgramData\SoftSafe
[-] Folder Deleted : C:\ProgramData\dtdata
[-] Folder Deleted : C:\ProgramData\WxDownload
[!] Folder Not Deleted : C:\ProgramData\wxDownload
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WxDownload
[!] Folder Not Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\wxDownload
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro
[-] Folder Deleted : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfkanglmmnniiolknlhaajllgmlgcdkj
[-] Folder Deleted : C:\Users\Monika\AppData\LocalLow\continuetosave
[-] Folder Deleted : C:\Users\Monika\AppData\LocalLow\WxDownload
[!] Folder Not Deleted : C:\Users\Monika\AppData\LocalLow\wxDownload
[-] Folder Deleted : C:\Users\Monika\AppData\Roaming\defaulttab
[-] Folder Deleted : C:\Users\Monika\AppData\Roaming\Optimizer Pro

***** [ Files ] *****

[-] File Deleted : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pfkanglmmnniiolknlhaajllgmlgcdkj_0.localstorage
[-] File Deleted : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pfkanglmmnniiolknlhaajllgmlgcdkj_0.localstorage-journal
[-] File Deleted : C:\Users\Monika\Desktop\Optimizer Pro.lnk

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : Default2Check
[-] Task Deleted : DefaultReg

***** [ Registry ] *****

[-] Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Optimizer Pro]
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\DefaultTabBHO.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser
[-] Key Deleted : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX
[-] Key Deleted : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX.1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_1d79ba3d
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{38495740-0035-4471-851E-F5BBB86AB085}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7F6AFBF1-E065-4627-A2FD-810366367D01}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D879A501-50A7-BEFC-A4C5-32DC6E0CB208}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FEB62B15-CC00-4736-AAEC-BA046C9DFF73}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7825CFB6-490A-436B-9F26-4A7B5CFC01A9}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7825CFB6-490A-436B-9F26-4A7B5CFC01A9}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7825CFB6-490A-436B-9F26-4A7B5CFC01A9}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2D33ED6-EBBD-467C-BF6F-F175D9B51363}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BAD84EE2-624D-4E7C-A8BB-41EFD720FD77}
[-] Key Deleted : HKCU\Software\APN PIP
[-] Key Deleted : HKCU\Software\Default Tab
[-] Key Deleted : HKCU\Software\InstallCore
[-] Key Deleted : HKCU\Software\Optimizer Pro
[-] Key Deleted : HKCU\Software\UpdateStar
[-] Key Deleted : HKCU\Software\AppDataLow\Software\DefaultTab
[-] Key Deleted : HKLM\SOFTWARE\Default Tab
[-] Key Deleted : HKLM\SOFTWARE\DefaultTab
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab Chrome
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\sl-dlc
[-] Key Deleted : HKU\.DEFAULT\Software\DefaultTab
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\DefaultTab
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A4A3B8F5-E977-412F-90E0-98D82DE27AE8}

***** [ Web browsers ] *****

[-] [C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : websearch
[-] [C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : ask search
[-] [C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : search.tb.ask.com
[-] [C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : askws
[-] [C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider_Data] Deleted : hxxp://search.tb.ask.com/search/GGmain.jhtml?searchfor={searchTerms}&st=kwd&ptb=A88EAFE4-3981-49D8-8F17-3264D51B2AC4&n=780b60d5&ind=2014011605&p2=^AYY^xdm095^YYA^sk&si=pconverter
[-] [C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : dhkplhfnhceodhffomolpfigojocbpcb
[-] [C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : pfkanglmmnniiolknlhaajllgmlgcdkj
[-] [C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Deleted : hxxp://www.search.ask.com/?p2=%5EB3L%5EYYYYYY% ... 07-01&psv=

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [7464 bytes] ##########

Re: pomalý NT, svchost.exe na 60%

Napsal: 15 led 2016 11:03
od JaRon
docisti s CCleanerom a malo by to byt O K

Re: pomalý NT, svchost.exe na 60%

Napsal: 15 led 2016 11:11
od milvin
CC som vyčistil, ale stále procesor ide na cca 80%.

Re: pomalý NT, svchost.exe na 60%

Napsal: 15 led 2016 11:14
od JaRon
skus vypnut automaticke aktualizacie systemu

Re: pomalý NT, svchost.exe na 60%

Napsal: 15 led 2016 11:28
od milvin
Vypnuté, žiadna zmena.

Re: pomalý NT, svchost.exe na 60%

Napsal: 15 led 2016 11:58
od JaRon
pouzi CF http://forum.viry.cz/viewtopic.php?f=13 ... x#p1432416

Re: pomalý NT, svchost.exe na 60%

Napsal: 15 led 2016 13:39
od milvin
ComboFix 16-01-07.01 - Monika . 01. 2016 13:16:10.3.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.3579.2229 [GMT 1:00]
Running from: c:\users\Monika\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\Thumbs.db
.
.
((((((((((((((((((((((((( Files Created from 2015-12-15 to 2016-01-15 )))))))))))))))))))))))))))))))
.
.
2016-01-15 09:45 . 2016-01-15 09:48 -------- d-----w- C:\AdwCleaner
2016-01-15 09:30 . 2015-11-25 10:43 9014120 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{6F65A4FB-077D-49F9-9B1E-67761F56DE59}\mpengine.dll
2016-01-15 09:13 . 2016-01-15 09:13 -------- d-----w- C:\FRST
2016-01-15 08:11 . 2016-01-15 09:40 -------- d-----w- C:\Monika
2015-12-24 19:23 . 2015-12-24 19:24 -------- d-----w- C:\60ba0f1e398dd3facf
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-12-10 10:38 . 2013-02-09 08:19 796864 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2015-12-10 10:38 . 2012-05-18 12:47 142528 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2015-12-02 12:25 . 2011-12-18 19:30 247976 ------w- c:\windows\system32\MpSigStub.exe
2015-11-20 18:34 . 2015-12-10 10:25 93696 ----a-w- c:\windows\system32\wudriver.dll
2015-11-20 18:34 . 2015-12-10 10:25 35840 ----a-w- c:\windows\system32\wups2.dll
2015-11-20 18:34 . 2015-12-10 10:25 30208 ----a-w- c:\windows\system32\wups.dll
2015-11-20 18:34 . 2015-12-10 10:25 2956800 ----a-w- c:\windows\system32\wucltux.dll
2015-11-20 18:34 . 2015-12-10 10:25 2062848 ----a-w- c:\windows\system32\wuaueng.dll
2015-11-20 18:34 . 2015-12-10 10:25 174080 ----a-w- c:\windows\system32\wuwebv.dll
2015-11-20 18:34 . 2015-12-10 10:25 573440 ----a-w- c:\windows\system32\wuapi.dll
2015-11-20 18:34 . 2015-12-10 10:25 73728 ----a-w- c:\windows\system32\WinSetupUI.dll
2015-11-20 18:33 . 2015-12-10 10:25 11776 ----a-w- c:\windows\system32\wu.upgrade.ps.dll
2015-11-20 18:33 . 2015-12-10 10:25 35328 ----a-w- c:\windows\system32\wuapp.exe
2015-11-20 18:33 . 2015-12-10 10:25 136192 ----a-w- c:\windows\system32\wuauclt.exe
2015-11-13 11:34 . 2011-12-18 17:39 435464 ----a-w- c:\windows\system32\drivers\aswsp.sys
2015-11-13 11:33 . 2011-12-18 17:39 794952 ----a-w- c:\windows\system32\drivers\aswsnx.sys
2015-11-11 18:39 . 2015-12-10 11:17 1242624 ----a-w- c:\windows\system32\comsvcs.dll
2015-11-11 18:39 . 2015-12-10 11:17 487936 ----a-w- c:\windows\system32\catsrvut.dll
2015-11-10 18:39 . 2015-12-10 10:25 1251328 ----a-w- c:\windows\system32\DWrite.dll
2015-11-10 18:39 . 2015-12-10 10:25 909824 ----a-w- c:\windows\system32\FntCache.dll
2015-11-10 18:39 . 2015-12-10 10:25 811520 ----a-w- c:\windows\system32\user32.dll
2015-11-10 17:40 . 2015-12-10 10:25 2386944 ----a-w- c:\windows\system32\win32k.sys
2015-11-10 00:24 . 2015-12-10 10:26 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2015-11-10 00:24 . 2015-12-10 10:26 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
2015-11-10 00:13 . 2015-12-10 10:26 496640 ----a-w- c:\windows\system32\vbscript.dll
2015-11-10 00:13 . 2015-12-10 10:26 62464 ----a-w- c:\windows\system32\iesetup.dll
2015-11-10 00:12 . 2015-12-10 10:26 47616 ----a-w- c:\windows\system32\ieetwproxystub.dll
2015-11-10 00:12 . 2015-12-10 10:26 341504 ----a-w- c:\windows\system32\html.iec
2015-11-10 00:11 . 2015-12-10 10:26 64000 ----a-w- c:\windows\system32\MshtmlDac.dll
2015-11-10 00:03 . 2015-12-10 10:26 102912 ----a-w- c:\windows\system32\ieetwcollector.exe
2015-11-10 00:03 . 2015-12-10 10:26 115712 ----a-w- c:\windows\system32\ieUnatt.exe
2015-11-10 00:02 . 2015-12-10 10:26 620032 ----a-w- c:\windows\system32\jscript9diag.dll
2015-11-09 23:57 . 2015-12-10 10:26 667648 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2015-11-09 23:50 . 2015-12-10 10:26 60416 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2015-11-09 23:46 . 2015-12-10 10:26 4514816 ----a-w- c:\windows\system32\jscript9.dll
2015-11-09 23:36 . 2015-12-10 10:26 2050560 ----a-w- c:\windows\system32\inetcpl.cpl
2015-11-09 23:35 . 2015-12-10 10:26 1155072 ----a-w- c:\windows\system32\mshtmlmedia.dll
2015-11-09 23:17 . 2015-12-10 10:26 2011136 ----a-w- c:\windows\system32\wininet.dll
2015-11-05 19:02 . 2015-12-10 10:00 14848 ----a-w- c:\windows\system32\wshrm.dll
2015-11-05 19:00 . 2015-12-10 10:27 2048 ----a-w- c:\windows\system32\tzres.dll
2015-11-05 09:48 . 2015-12-10 10:00 117760 ----a-w- c:\windows\system32\drivers\rmcast.sys
2015-11-03 18:56 . 2015-12-10 10:24 627712 ----a-w- c:\windows\system32\usp10.dll
2015-11-03 18:55 . 2015-12-10 10:25 179712 ----a-w- c:\windows\system32\els.dll
2015-10-29 17:50 . 2015-11-13 11:47 5120 ----a-w- c:\windows\system32\shimeng.dll
2015-10-29 17:49 . 2015-11-13 11:47 295936 ----a-w- c:\windows\system32\apphelp.dll
2015-10-29 17:49 . 2015-11-13 11:47 562176 ----a-w- c:\windows\apppatch\AcLayers.dll
2015-10-29 17:49 . 2015-11-13 11:47 470528 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2015-10-29 17:49 . 2015-11-13 11:47 2178560 ----a-w- c:\windows\apppatch\AcGenral.dll
2015-10-29 17:49 . 2015-11-13 11:47 62464 ----a-w- c:\windows\system32\aelupsvc.dll
2015-10-29 17:49 . 2015-11-13 11:47 211968 ----a-w- c:\windows\apppatch\AcXtrnal.dll
2015-10-29 17:49 . 2015-11-13 11:47 20992 ----a-w- c:\windows\system32\sdbinst.exe
2015-10-29 17:39 . 2015-11-13 11:47 2560 ----a-w- c:\windows\apppatch\AcRes.dll
2015-10-20 00:52 . 2015-11-13 11:46 3991488 ----a-w- c:\windows\system32\ntkrnlpa.exe
2015-10-20 00:52 . 2015-11-13 11:46 3935680 ----a-w- c:\windows\system32\ntoskrnl.exe
2015-10-20 00:52 . 2015-11-13 11:46 138176 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2015-10-20 00:52 . 2015-11-13 11:46 67520 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2015-10-20 00:48 . 2015-11-13 11:46 1308160 ----a-w- c:\windows\system32\ntdll.dll
2015-10-20 00:45 . 2015-11-13 11:46 172032 ----a-w- c:\windows\system32\wdigest.dll
2015-10-20 00:45 . 2015-11-13 11:46 65536 ----a-w- c:\windows\system32\TSpkg.dll
2015-10-20 00:45 . 2015-11-13 11:46 400896 ----a-w- c:\windows\system32\srcore.dll
2015-10-20 00:45 . 2015-11-13 11:46 43008 ----a-w- c:\windows\system32\srclient.dll
2015-10-20 00:45 . 2015-11-13 11:46 100352 ----a-w- c:\windows\system32\sspicli.dll
2015-10-20 00:45 . 2015-11-13 11:46 15872 ----a-w- c:\windows\system32\sspisrv.dll
2015-10-20 00:45 . 2015-11-13 11:46 251392 ----a-w- c:\windows\system32\schannel.dll
2015-10-20 00:45 . 2015-11-13 11:46 22016 ----a-w- c:\windows\system32\secur32.dll
2015-10-20 00:45 . 2015-11-13 11:46 655360 ----a-w- c:\windows\system32\rpcrt4.dll
2015-10-20 00:45 . 2015-11-13 11:46 223232 ----a-w- c:\windows\system32\ncrypt.dll
2015-10-20 00:45 . 2015-11-13 11:46 259584 ----a-w- c:\windows\system32\msv1_0.dll
2015-10-20 00:45 . 2015-11-13 11:46 1061376 ----a-w- c:\windows\system32\lsasrv.dll
2015-10-20 00:45 . 2015-11-13 11:46 552960 ----a-w- c:\windows\system32\kerberos.dll
2015-10-20 00:45 . 2015-11-13 11:46 38912 ----a-w- c:\windows\system32\csrsrv.dll
2015-10-20 00:45 . 2015-11-13 11:46 36864 ----a-w- c:\windows\system32\cryptbase.dll
2015-10-20 00:45 . 2015-11-13 11:46 17408 ----a-w- c:\windows\system32\credssp.dll
2015-10-20 00:45 . 2015-11-13 11:46 69632 ----a-w- c:\windows\system32\smss.exe
2015-10-20 00:45 . 2015-11-13 11:46 262656 ----a-w- c:\windows\system32\rstrui.exe
2015-10-20 00:44 . 2015-11-13 11:46 22528 ----a-w- c:\windows\system32\lsass.exe
2015-10-20 00:44 . 2015-11-13 11:46 50176 ----a-w- c:\windows\system32\auditpol.exe
2015-10-20 00:39 . 2015-11-13 11:46 60416 ----a-w- c:\windows\system32\msobjs.dll
2015-10-20 00:39 . 2015-11-13 11:46 146432 ----a-w- c:\windows\system32\msaudite.dll
2015-10-20 00:35 . 2015-11-13 11:46 6656 ----a-w- c:\windows\system32\apisetschema.dll
2015-10-20 00:35 . 2015-11-13 11:46 686080 ----a-w- c:\windows\system32\adtschema.dll
2015-10-19 23:29 . 2015-11-13 11:46 225792 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2015-10-19 23:28 . 2015-11-13 11:46 98304 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2015-10-19 23:28 . 2015-11-13 11:46 124416 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2015-10-07 18:14 696120 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Boxoft Tools"="c:\programdata\Boxtools\Boxofttoolbox.exe" [2010-12-15 514048]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2010-11-01 9398888]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-05-24 336384]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-11-01 1873192]
"ISBMgr.exe"="c:\program files\Sony\ISB Utility\ISBMgr.exe" [2011-02-15 2757312]
"PMBVolumeWatcher"="c:\program files\Sony\PMB\PMBVolumeWatcher.exe" [2010-11-26 648032]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-11-13 6133520]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Mobile Partner"="c:\program files\MobileWiFi\MobileWiFi" [X]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-7-29 836896]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-11-15 20:02 932288 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-11-15 20:02 35736 ----a-w- c:\program files\Adobe\Reader 10.0\Reader\reader_sl.exe
.
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys [2015-10-07 115640]
R2 BBSvc;Bing Bar Update Service;c:\program files\Microsoft\BingBar\BBSvc.EXE [2011-10-21 196176]
R2 HWDeviceService.exe;HWDeviceService.exe;c:\programdata\DatacardService\HWDeviceService.exe [2011-03-14 271712]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2014-12-11 315496]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2014-06-16 89856]
R3 e1yexpress;Intel(R) Gigabit Network Connections Driver;c:\windows\system32\DRIVERS\e1y6032.sys [2009-07-13 214016]
R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys [2010-07-27 102784]
R3 ew_usbenumfilter;huawei_CompositeFilter;c:\windows\system32\DRIVERS\ew_usbenumfilter.sys [2010-03-20 11136]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys [x]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2012-07-04 12400]
R3 huawei_cdcacm;huawei_cdcacm;c:\windows\system32\DRIVERS\ew_jucdcacm.sys [2011-02-25 90368]
R3 huawei_cdcecm;huawei_cdcecm;c:\windows\system32\DRIVERS\ew_jucdcecm.sys [2011-01-30 64384]
R3 huawei_ext_ctrl;huawei_ext_ctrl;c:\windows\system32\DRIVERS\ew_juextctrl.sys [2011-01-30 26624]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2015-11-10 102912]
R3 SOHCImp;VAIO Content Importer;c:\program files\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2011-02-21 113824]
R3 SOHDs;VAIO Device Searcher;c:\program files\Common Files\Sony Shared\SOHLib\SOHDs.exe [2011-02-21 67232]
R3 Sony PC Companion;Sony PC Companion;c:\program files\Sony\Sony PC Companion\PCCService.exe [2012-01-18 155320]
R3 SpfService;VAIO Entertainment Common Service;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService.exe [2011-01-20 228056]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2014-06-16 184192]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
R3 VCFw;VAIO Content Folder Watcher;c:\program files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2011-01-20 887000]
R3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2011-05-19 549616]
R3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2011-02-18 385336]
R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe [2011-02-18 83232]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2011-12-15 1343400]
R3 WSDScan;WSD Scan Support via UMB;c:\windows\system32\DRIVERS\WSDScan.sys [2009-07-14 20480]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S0 amd_sata;amd_sata;c:\windows\system32\drivers\amd_sata.sys [2011-02-17 64128]
S0 amd_xata;amd_xata;c:\windows\system32\drivers\amd_xata.sys [2011-02-17 32384]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 ngvss;ngvss; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2015-11-13 794952]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2015-11-13 435464]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-07-01 176128]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-05-24 294400]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys [2015-10-07 24016]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2015-10-07 76000]
S2 BBUpdate;BBUpdate;c:\program files\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648]
S2 cvhsvc;Client Virtualization Handler;c:\program files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2015-03-18 822496]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files\Sony\PMB\PMBDeviceInfoProvider.exe [2010-11-26 398176]
S2 SampleCollector;VAIO Care Performance Service;c:\program files\Sony\VAIO Care\VCPerfService.exe [2011-01-29 189048]
S2 sftlist;Application Virtualization Client;c:\program files\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
S2 ss_conn_service;SAMSUNG Mobile Connectivity Service;c:\program files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [2014-06-16 741640]
S2 uCamMonitor;CamMonitor;c:\program files\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2011-02-23 105024]
S2 VBoxAswDrv;VBoxAsw Support Driver;c:\program files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-10-07 220752]
S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe [2011-02-28 772800]
S3 amdiox86;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox86.sys [2010-02-18 37944]
S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2009-05-26 17408]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW73.sys [2011-07-01 100880]
S3 AvastVBoxSvc;AvastVBox COM Service;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-10-07 3219136]
S3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2010-11-01 297000]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-11-01 33320]
S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys [2011-01-30 73216]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [2010-11-01 68208]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2011-03-28 197224]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [2010-04-26 9344]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 583848]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 197800]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 24232]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 20136]
S3 sftvsa;Application Virtualization Service Agent;c:\program files\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2011-01-07 35968]
S3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update\VUAgent.exe [2012-10-26 957056]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
utcsvc REG_MULTI_SZ DiagTrack
.
Contents of the 'Scheduled Tasks' folder
.
2016-01-15 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-02-09 10:38]
.
2015-12-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2387537690-525447489-1842085765-1001Core.job
- c:\users\Monika\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-18 08:18]
.
2015-12-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2387537690-525447489-1842085765-1001UA.job
- c:\users\Monika\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-18 08:18]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com
uInternet Settings,ProxyOverride = <local>
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MIF5BA~1\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1 192.168.1.1
FF - ProfilePath - c:\users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\27iyp5xm.default\
.
- - - - ORPHANS REMOVED - - - -
.
AddRemove-01_Simmental - c:\program files\SAMSUNG\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\program files\SAMSUNG\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\program files\SAMSUNG\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\SAMSUNG\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-07_Schorl - c:\program files\SAMSUNG\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-09_Hsp - c:\program files\SAMSUNG\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\program files\SAMSUNG\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\SAMSUNG\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-20_NXP_Driver - c:\program files\SAMSUNG\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-24_flashusbdriver - c:\program files\SAMSUNG\USB Drivers\24_flashusbdriver\Uninstall.exe
AddRemove-25_escape - c:\program files\SAMSUNG\USB Drivers\25_escape\Uninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SampleCollector]
"ImagePath"="\"c:\program files\Sony\VAIO Care\VCPerfService.exe\" \"/service\" \"/sstates\" \"/sampleinterval=5000\" \"/procinterval=5\" \"/dllinterval=120\" \"/counter=\Processor(_Total)\% Processor Time:1/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1\" \"/counter=\Network Interface(*)\Bytes Total/sec:1\" \"/expandcounter=\Processor Information(*)\Processor Frequency:1\" \"/expandcounter=\Processor(*)\% Idle Time:1\" \"/expandcounter=\Processor(*)\% C1 Time:1\" \"/expandcounter=\Processor(*)\% C2 Time:1\" \"/expandcounter=\Processor(*)\% C3 Time:1\" \"/expandcounter=\Processor(*)\% Processor Time:1\" \"/directory=c:\programdata\Sony Corporation\VAIO Care\inteldata\""
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Completion time: 2016-01-15 13:33:40
ComboFix-quarantined-files.txt 2016-01-15 12:33
.
Pre-Run: 289 121 239 040 bytes free
Post-Run: 289 058 902 016 bytes free
.
- - End Of File - - 4687A578B40EDC35A448F46CFF3E7E25
A36C5E4F47E84449FF07ED3517B43A31

Re: pomalý NT, svchost.exe na 60%

Napsal: 15 led 2016 13:46
od JaRon
premenuj combofix na uninstall a spust - prebehne odinstalacia

Re: pomalý NT, svchost.exe na 60%

Napsal: 15 led 2016 14:20
od milvin
Hotovo. A potom?

Re: pomalý NT, svchost.exe na 60%

Napsal: 15 led 2016 14:54
od JaRon
vloz obrazok benchmark z HDTune free

Re: pomalý NT, svchost.exe na 60%

Napsal: 15 led 2016 15:44
od milvin
Robil som ešte scan MBAM. Niečo našlo, neviem čo s tým. Treba odstrániť? Prikladám log.

Malwarebytes Anti-Malware
www.malwarebytes.org

Dátum kontroly: 15. 1. 2016
Čas kontroly: 14:52
Protokol:
Správca: Áno

Verzia: 2.2.0.1024
Dazabáza malware: v2016.01.15.04
Databáza rootkitov: v2016.01.09.01
Licencia: Skúšobná verzia
Ochrana pred škodlivým softvérom: Zapnuté
Ochrana pred škodlivými webstránkami: Zapnuté
Vlastná ochrana: Vypnuté

OS: Windows 7 Service Pack 1
CPU: x86
Súborový systém: NTFS
Používateľ: Monika

Typ kontroly: Kontrola hrozieb
Výsledok: Dokončená
Skontrolovaných objektov: 326402
Uplynulý čas: 45 min, 31 s

Pamäť: Zapnuté
Pri spustení: Zapnuté
Súborový systém: Zapnuté
Archívy: Zapnuté
Rootkity: Zapnuté
Heuristika: Zapnuté
PUP: Zapnuté
PUM: Zapnuté

Procesy: 0
(Žiadne škodlivé položky neboli zistené)

Moduly: 0
(Žiadne škodlivé položky neboli zistené)

Kľúče databázy Registry: 2
PUP.Optional.DefaultTab, HKU\S-1-5-21-2387537690-525447489-1842085765-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, , [f2fe48f1a3f661d537b57df7b1511ce4],
PUP.Optional.WxDownload, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\FAFFLIHLOBAPAEHHJJLDGHIDKAMJJDMK, , [3db3c9705742fc3a760e895db94a59a7],

Hodnoty databázy Registry: 1
PUP.Optional.WxDownload, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\fafflihlobapaehhjjldghidkamjjdmk|path, C:\ProgramData\wxDownload\fafflihlobapaehhjjldghidkamjjdmk.crx, , [3db3c9705742fc3a760e895db94a59a7]

Údaj databázy Registry: 0
(Žiadne škodlivé položky neboli zistené)

Priečinky: 1
PUP.Optional.Staging, C:\ProgramData\dl159, , [38b8c178abeeb97dcf6ee4da42c01ee2],

Súbory: 8
PUP.Optional.APNToolBar, C:\Users\Monika\Documents\APNSetup.exe, , [38b870c96e2b87af4db7062adf2243bd],
PUP.Optional.SweetIM, C:\Users\Monika\Downloads\sweetimsetup (1).exe, , [f9f7e158dbbe4de97853913657ade719],
PUP.Optional.SweetIM, C:\Users\Monika\Downloads\sweetimsetup.exe, , [35bbf9402277c76fdfecd9eefa0a12ee],
PUP.Optional.Ilivid, C:\Users\Monika\Downloads\iLividSetup (1).exe, , [30c096a330693cfac0a26f66f10fa35d],
PUP.Optional.Ilivid, C:\Users\Monika\Downloads\iLividSetup.exe, , [db159e9b6c2d330370f2993cf60ad22e],
PUP.Optional.APNToolBar, C:\Users\Monika\Downloads\FreeTorrentViewer.exe, , [f5fb9c9d9affa88eda2b00305ba62ed2],
PUP.Optional.InstallCore, C:\Users\Monika\Foto\VLCPlayerSetup.exe, , [aa46b0899702181ebcfcae2791731ae6],
PUP.Optional.Staging, C:\ProgramData\dl159\159.dll, , [38b8c178abeeb97dcf6ee4da42c01ee2],

Fyzické sektory: 0
(Žiadne škodlivé položky neboli zistené)


(end)

Re: pomalý NT, svchost.exe na 60%

Napsal: 15 led 2016 17:22
od JaRon
Samozrejme vsetko zmazat

Re: pomalý NT, svchost.exe na 60%

Napsal: 15 led 2016 18:58
od milvin
V prílohe HD Tune.
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz