VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

zpomalený notebook

https://forum.viry.cz:443/viewtopic.php?t=154449

Stránka 1 z 1

zpomalený notebook

Napsal: 24 čer 2018 15:53
od northendcz
ahoj a předem díky za kontrolu
po delší době jsem začal používat notebook a příjde mi jako by jel hlemýždím tenpem (zmáčku tlačítko win a chci vyhledat program ccleaner, napíšu tedy ccl a čekám, čekám ...)

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20.06.2018
Ran by Jan (administrator) on NTH (24-06-2018 16:46:54)
Running from C:\Users\Jan\Desktop
Loaded Profiles: Jan (Available Profiles: Jan)
Platform: Windows 10 Home Version 1709 16299.431 (X64) Language: Čeština (Česko)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe
(Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Users\Jan\AppData\Local\Programs\Google\MusicManager\MusicManager.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
() C:\Program Files (x86)\Acer\Care Center\ACCStd.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.16299.428_none_1704c21831ffb4a8\TiWorker.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672152 2014-05-26] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1387376 2014-05-13] (Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242904 2018-05-17] (AVAST Software)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [316392 2018-05-11] (Adobe Systems, Incorporated)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
HKU\S-1-5-21-2793044364-4081862340-4030437890-1001\...\Run: [Google Update] => C:\Users\Jan\AppData\Local\Google\Update\1.3.33.17\GoogleUpdateCore.exe [601680 2018-05-21] (Google Inc.)
HKU\S-1-5-21-2793044364-4081862340-4030437890-1001\...\Run: [MusicManager] => C:\Users\Jan\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [5968896 2018-01-30] (Google Inc.)
HKU\S-1-5-21-2793044364-4081862340-4030437890-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3201312 2018-06-09] (Valve Corporation)
HKU\S-1-5-21-2793044364-4081862340-4030437890-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9288408 2016-12-06] (Piriform Ltd)
HKU\S-1-5-21-2793044364-4081862340-4030437890-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 19\Program32\ZPSTRAY.EXE [568904 2016-10-27] (ZONER software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{79a81d0f-c5fa-4d86-bf6d-a6bed80db8bf}: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{dd51e577-207f-41e2-8a93-5b3574755377}: [DhcpNameServer] 213.46.172.37 213.46.172.36

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-2793044364-4081862340-4030437890-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2793044364-4081862340-4030437890-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
SearchScopes: HKU\S-1-5-21-2793044364-4081862340-4030437890-1001 -> DefaultScope {3A8F149C-70FF-44E4-AEB7-C9DC61E4CD6B} URL =

FireFox:
========
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi => not found
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-02-20] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-02-20] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-21] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-21] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin HKU\S-1-5-21-2793044364-4081862340-4030437890-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Jan\AppData\Local\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-21] (Google Inc.)
FF Plugin HKU\S-1-5-21-2793044364-4081862340-4030437890-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Jan\AppData\Local\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-21] (Google Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://qip.ru
CHR StartupUrls: Default -> "chrome://newtab/","hxxp://www.yessearches.com/?mode=nnnb&ptid=cos ... AHMtA34kCE.."
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default [2018-06-24]
CHR Extension: (Překladač Google) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2017-10-23]
CHR Extension: (YouTube) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-05-28]
CHR Extension: (WMS Map Viewer on line) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpiokkjcjgiabafjancfgfdogefnihpk [2018-01-29]
CHR Extension: (iMacros for Chrome) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cplklnmnlbnpmjogncfgfijoopmnlemp [2018-06-07]
CHR Extension: (AdBlock) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-06-24]
CHR Extension: (Avast Online Security) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-04-22]
CHR Extension: (2048 v pop-up) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijkmjnaahlnmdjjlbhbjbhlnmadmmlgg [2018-06-24]
CHR Extension: (Ghostery – Privacy Ad Blocker) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2018-06-07]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-07]
CHR Extension: (Gmail) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-05-28]
CHR Extension: (Chrome Media Router) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-14]
CHR Profile: C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1 [2018-06-24]
CHR Extension: (Prezentace) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Dokumenty) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Disk Google) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-08]
CHR Extension: (YouTube) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-08]
CHR Extension: (Bounceball) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bnonnffemhpfblohaicmfmofbfaaoobf [2016-11-08]
CHR Extension: (Adblock Plus) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2018-05-25]
CHR Extension: (Avast SafePrice) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2018-06-09]
CHR Extension: (Tabulky) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Dokumenty Google offline) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-13]
CHR Extension: (Avast Online Security) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-04-22]
CHR Extension: (Grass) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mmiboiefncpfjihjdedpaoammipkilla [2016-11-08]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-07]
CHR Extension: (Short url using official goo.gl api) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\phncbknmjfhhegegchdflhepkoibbbie [2016-11-08]
CHR Extension: (Gmail) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-08]
CHR Extension: (Chrome Media Router) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-14]
CHR Profile: C:\Users\Jan\AppData\Local\Google\Chrome\User Data\System Profile [2018-06-24]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2321384 2018-05-11] (Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2128872 2018-05-11] (Adobe Systems, Incorporated)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7620096 2018-05-17] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [317280 2018-05-17] (AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1494024 2017-11-30] ()
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2860760 2016-04-18] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-06-12] (Acer Incorporated)
S3 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [1194512 2018-06-06] (Garmin Ltd. or its subsidiaries)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [373720 2016-12-19] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-02-01] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2014-02-20] (Intel Corporation)
R3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-01-17] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-02-20] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [466664 2014-06-10] (Acer Incorporate)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate)
S3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [233216 2014-06-24] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [355304 2017-09-29] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105944 2017-09-29] (Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [196640 2018-05-17] (AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdrivera.sys [227504 2018-04-22] (AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsha.sys [199440 2018-04-22] (AVAST Software)
R0 aswblog; C:\WINDOWS\System32\drivers\aswbloga.sys [343752 2018-04-22] (AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniva.sys [57680 2018-04-22] (AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [234560 2018-05-17] (AVAST Software)
S3 aswHwid; C:\WINDOWS\System32\drivers\aswHwid.sys [46968 2018-05-17] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [41832 2017-09-19] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [159120 2018-05-17] (AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [111360 2018-05-17] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [85968 2018-05-17] (AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1027720 2018-05-17] (AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [460520 2018-05-17] (AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [205976 2018-05-17] (AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [381552 2018-05-17] (AVAST Software)
S3 CH341SER_A64; C:\WINDOWS\System32\Drivers\CH341S64.SYS [59904 2015-01-26] (www.winchiphead.com)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [21360 2013-07-18] (Acer Incorporated)
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [116736 2014-02-20] (Intel Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvaci.inf_amd64_2c4bd92aa476af37\nvlddmkm.sys [17020720 2017-11-28] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-10-11] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48064 2017-08-18] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-10-11] (NVIDIA Corporation)
R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [14680 2013-07-18] (Acer Incorporated)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2017-09-29] (Realtek )
S3 RTL2832UBDA; C:\Windows\SysWOW64\drivers\RTL2832UBDA.sys [237968 2012-08-03] (REALTEK SEMICONDUCTOR Corp.)
S3 RTL2832UUSB; C:\Windows\SysWOW64\Drivers\RTL2832UUSB.sys [39056 2012-08-03] (REALTEK SEMICONDUCTOR Corp.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44608 2017-09-29] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [309144 2017-09-29] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [119192 2017-09-29] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-06-24 16:46 - 2018-06-24 16:49 - 000023553 _____ C:\Users\Jan\Desktop\FRST.txt
2018-06-24 16:46 - 2018-06-24 16:46 - 002412544 _____ (Farbar) C:\Users\Jan\Desktop\FRST64.exe
2018-06-24 16:46 - 2018-06-24 16:46 - 000000000 ____D C:\FRST
2018-06-24 15:36 - 2018-06-24 15:36 - 000000000 ____D C:\Windows.old
2018-06-14 19:27 - 2018-06-14 19:27 - 000014336 ___SH C:\Users\Jan\Downloads\Thumbs.db
2018-06-12 17:23 - 2018-06-12 17:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2018-06-07 18:48 - 2018-06-07 18:48 - 000000000 ____D C:\Users\Jan\AppData\LocalLow\Landfall Games
2018-06-07 17:15 - 2018-06-07 17:29 - 000000000 ____D C:\Users\Jan\Desktop\egypt
2018-06-07 17:12 - 2018-06-07 17:12 - 000001803 _____ C:\Users\Jan\Desktop\wsclient.exe – zástupce.lnk
2018-06-07 17:10 - 2018-06-07 17:28 - 000000000 ____D C:\Users\Jan\Downloads\wsclient.20180531
2018-06-07 17:09 - 2018-06-07 17:09 - 003658184 _____ C:\Users\Jan\Downloads\wsclient.20180531.zip
2018-06-07 16:39 - 2018-06-06 01:24 - 000835056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-06-07 16:39 - 2018-06-06 01:24 - 000179704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-06-24 16:43 - 2018-03-24 13:25 - 000008192 ___SH C:\Users\Jan\Desktop\Thumbs.db
2018-06-24 16:43 - 2018-01-18 21:43 - 000000000 ____D C:\Users\Jan\Desktop\SK
2018-06-24 16:43 - 2016-07-31 18:18 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-06-24 16:40 - 2016-09-29 17:00 - 000000000 ____D C:\ProgramData\NVIDIA
2018-06-24 16:39 - 2017-12-06 19:58 - 004128462 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-06-24 16:39 - 2017-09-30 16:31 - 001968290 _____ C:\WINDOWS\system32\perfh005.dat
2018-06-24 16:39 - 2017-09-30 16:31 - 000511894 _____ C:\WINDOWS\system32\perfc005.dat
2018-06-24 16:39 - 2016-06-21 16:15 - 000063577 _____ C:\IFRToolLog.txt
2018-06-24 16:38 - 2017-10-11 18:05 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2018-06-24 16:38 - 2016-07-31 18:18 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-06-24 16:36 - 2016-06-20 14:57 - 000000000 ____D C:\Program Files (x86)\Steam
2018-06-24 16:34 - 2016-06-06 21:01 - 000000000 __SHD C:\Users\Jan\IntelGraphicsProfiles
2018-06-24 16:33 - 2017-05-26 22:38 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2018-06-24 16:32 - 2018-03-28 18:01 - 000000000 ____D C:\Program Files (x86)\BlueStacks
2018-06-24 16:32 - 2017-12-06 19:56 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-06-24 16:32 - 2017-12-06 19:34 - 005117872 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-06-24 16:31 - 2017-09-29 10:45 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-06-24 16:22 - 2018-04-12 18:55 - 000000000 ___HD C:\$WINDOWS.~BT
2018-06-24 16:21 - 2016-06-06 21:24 - 000000000 ____D C:\ProgramData\AVAST Software
2018-06-24 16:19 - 2018-03-28 18:01 - 000000000 ____D C:\Users\Jan\AppData\Local\Bluestacks
2018-06-24 16:18 - 2017-12-04 12:11 - 000000000 ___DC C:\WINDOWS\Panther
2018-06-24 16:18 - 2017-09-29 15:44 - 000000000 ____D C:\WINDOWS\INF
2018-06-24 16:18 - 2016-07-04 08:59 - 000000000 ____D C:\Users\Jan\AppData\Local\CrashDumps
2018-06-24 16:13 - 2017-12-06 19:34 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-06-24 16:09 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2018-06-24 15:03 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-06-24 15:02 - 2017-09-29 15:46 - 000000000 ___HD C:\Program Files\WindowsApps
2018-06-24 14:59 - 2017-12-06 19:56 - 000003350 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2793044364-4081862340-4030437890-1001
2018-06-24 14:59 - 2017-05-26 23:16 - 000002422 _____ C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-06-24 14:59 - 2016-06-06 21:07 - 000000000 ___RD C:\Users\Jan\OneDrive
2018-06-17 17:22 - 2017-09-29 10:45 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2018-06-17 17:12 - 2017-12-06 19:55 - 000024768 _____ C:\WINDOWS\diagwrn.xml
2018-06-17 17:12 - 2017-12-06 19:55 - 000024768 _____ C:\WINDOWS\diagerr.xml
2018-06-17 17:05 - 2017-12-06 19:56 - 000004264 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2018-06-14 19:36 - 2016-06-06 21:13 - 000002305 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-06-14 19:36 - 2016-06-06 21:13 - 000002264 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-06-12 20:31 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\Registration
2018-06-12 17:24 - 2017-05-10 15:58 - 000000000 ____D C:\Program Files (x86)\Garmin
2018-06-12 17:24 - 2014-09-20 16:21 - 000000000 ____D C:\ProgramData\Package Cache
2018-06-12 17:23 - 2017-12-06 19:56 - 000003624 _____ C:\WINDOWS\System32\Tasks\GarminUpdaterTask
2018-06-10 15:00 - 2017-09-29 15:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-06-10 14:42 - 2016-06-15 20:30 - 000000962 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA.job
2018-06-10 14:42 - 2016-06-15 20:30 - 000000910 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core.job
2018-06-10 14:42 - 2016-06-06 21:13 - 000000968 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2018-06-09 09:42 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\rescache
2018-06-09 09:24 - 2017-12-06 19:56 - 000003406 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1465241279
2018-06-07 19:13 - 2018-02-16 13:37 - 000002760 _____ C:\WINDOWS\System32\Tasks\AdobeGCInvoker-1.0-MicrosoftAccount-northendcz@gmail.com
2018-06-07 19:13 - 2017-12-06 19:56 - 000004154 _____ C:\WINDOWS\System32\Tasks\Software Update Application
2018-06-07 19:13 - 2017-12-06 19:56 - 000003742 _____ C:\WINDOWS\System32\Tasks\ACCAgent
2018-06-07 19:13 - 2017-12-06 19:56 - 000003600 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA1d25885b7796f
2018-06-07 19:13 - 2017-12-06 19:56 - 000003430 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA1d1c02830573b9b
2018-06-07 19:13 - 2017-12-06 19:56 - 000003410 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA
2018-06-07 19:13 - 2017-12-06 19:56 - 000003398 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-07 19:13 - 2017-12-06 19:56 - 000003336 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2018-06-07 19:13 - 2017-12-06 19:56 - 000003332 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core1d25885af55c6
2018-06-07 19:13 - 2017-12-06 19:56 - 000003176 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-07 19:13 - 2017-12-06 19:56 - 000003176 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2018-06-07 19:13 - 2017-12-06 19:56 - 000003138 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core
2018-06-07 19:13 - 2017-12-06 19:56 - 000002984 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-07 19:13 - 2017-12-06 19:56 - 000002956 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-07 19:13 - 2017-12-06 19:56 - 000002914 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-07 19:13 - 2017-12-06 19:56 - 000002868 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2018-06-07 19:13 - 2017-12-06 19:56 - 000002838 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-07 19:13 - 2017-12-06 19:56 - 000002786 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-07 19:13 - 2017-12-06 19:56 - 000002750 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2793044364-4081862340-4030437890-500
2018-06-07 19:13 - 2017-12-06 19:56 - 000002744 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-07 19:13 - 2017-12-06 19:56 - 000002720 _____ C:\WINDOWS\System32\Tasks\ACC
2018-06-07 19:13 - 2017-12-06 19:56 - 000002588 _____ C:\WINDOWS\System32\Tasks\BacKGroundAgent
2018-06-07 19:13 - 2017-12-06 19:56 - 000002494 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon
2018-06-07 19:13 - 2017-12-06 19:56 - 000002220 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2018-06-07 19:13 - 2017-12-06 19:56 - 000002186 _____ C:\WINDOWS\System32\Tasks\ACCBackgroundApplication
2018-06-07 19:13 - 2017-12-06 19:56 - 000002182 _____ C:\WINDOWS\System32\Tasks\Quick Access Quick Launcher
2018-06-07 19:13 - 2017-12-06 19:56 - 000002118 _____ C:\WINDOWS\System32\Tasks\DolbySelectorTask
2018-06-07 19:13 - 2017-12-06 19:56 - 000002096 _____ C:\WINDOWS\System32\Tasks\Power Management
2018-06-07 19:13 - 2017-12-06 19:56 - 000002070 _____ C:\WINDOWS\System32\Tasks\Launch Manager
2018-06-07 19:13 - 2017-12-06 19:56 - 000002062 _____ C:\WINDOWS\System32\Tasks\Quick Access
2018-06-07 16:42 - 2016-04-27 08:56 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-06-07 16:41 - 2017-12-06 19:58 - 000000000 ___RD C:\Users\Jan\3D Objects
2018-05-25 15:33 - 2017-09-29 15:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2018-05-25 15:33 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2018-05-25 15:32 - 2017-09-29 15:46 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2018-05-25 15:32 - 2017-09-29 15:46 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2018-05-25 15:32 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\system32\oobe
2018-05-25 15:32 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\ShellExperiences
2018-05-25 15:32 - 2017-09-29 10:45 - 000000000 ____D C:\WINDOWS\system32\Dism
2018-05-25 15:32 - 2017-09-29 10:45 - 000000000 ____D C:\WINDOWS\servicing

Some files in TEMP:
====================
2018-06-24 16:19 - 2018-03-22 04:00 - 001476640 _____ (BlueStack Systems, Inc.) C:\Users\Jan\AppData\Local\Temp\BlueStacksClientUninstaller.exe
2018-06-24 16:19 - 2018-03-22 04:00 - 000421368 _____ (CodeTitans) C:\Users\Jan\AppData\Local\Temp\JSON.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-06-07 19:19

==================== End of FRST.txt ============================

Re: zpomalený notebook

Napsal: 24 čer 2018 18:05
od Rudy
Zdravím!
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Re: zpomalený notebook

Napsal: 24 čer 2018 18:33
od northendcz
# -------------------------------
# Malwarebytes AdwCleaner 7.2.0.0
# -------------------------------
# Build: 06-05-2018
# Database: 2018-06-22.2
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 06-24-2018
# Duration: 00:00:12
# OS: Windows 10 Home
# Cleaned: 6
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Program Files\Booking.com
Deleted C:\ProgramData\Pokki
Deleted C:\Users\Public\Pokki

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\Classes\pokki

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

Deleted http://www.yessearches.com/?mode=nnnb&p ... AHMtA34kCE..
Deleted slunecnice.cz

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1567 octets] - [24/06/2018 19:22:27]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Re: zpomalený notebook

Napsal: 24 čer 2018 18:52
od Rudy
Dejte nový log FRST.

Re: zpomalený notebook

Napsal: 25 čer 2018 17:44
od northendcz
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20.06.2018
Ran by Jan (administrator) on NTH (25-06-2018 18:39:15)
Running from C:\Users\Jan\Desktop
Loaded Profiles: Jan (Available Profiles: Jan)
Platform: Windows 10 Home Version 1709 16299.431 (X64) Language: Čeština (Česko)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
() C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Dolby Laboratories Inc.) C:\Program Files\Dolby Digital Plus\ddp.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Google Inc.) C:\Users\Jan\AppData\Local\Programs\Google\MusicManager\MusicManager.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Users\Jan\AppData\Local\Google\Update\GoogleUpdate.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
(Microsoft Corporation) C:\Windows\System32\DeviceCensus.exe
() C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
() C:\Program Files (x86)\Acer\Care Center\ACCStd.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\HelpPane.exe
() C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672152 2014-05-26] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1387376 2014-05-13] (Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242904 2018-05-17] (AVAST Software)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [316392 2018-05-11] (Adobe Systems, Incorporated)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
HKU\S-1-5-21-2793044364-4081862340-4030437890-1001\...\Run: [Google Update] => C:\Users\Jan\AppData\Local\Google\Update\1.3.33.17\GoogleUpdateCore.exe [601680 2018-05-21] (Google Inc.)
HKU\S-1-5-21-2793044364-4081862340-4030437890-1001\...\Run: [MusicManager] => C:\Users\Jan\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [5968896 2018-01-30] (Google Inc.)
HKU\S-1-5-21-2793044364-4081862340-4030437890-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3201312 2018-06-09] (Valve Corporation)
HKU\S-1-5-21-2793044364-4081862340-4030437890-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9288408 2016-12-06] (Piriform Ltd)
HKU\S-1-5-21-2793044364-4081862340-4030437890-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 19\Program32\ZPSTRAY.EXE [568904 2016-10-27] (ZONER software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{79a81d0f-c5fa-4d86-bf6d-a6bed80db8bf}: [DhcpNameServer] 213.46.172.37 213.46.172.36
Tcpip\..\Interfaces\{dd51e577-207f-41e2-8a93-5b3574755377}: [DhcpNameServer] 213.46.172.37 213.46.172.36

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-2793044364-4081862340-4030437890-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2793044364-4081862340-4030437890-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
SearchScopes: HKU\S-1-5-21-2793044364-4081862340-4030437890-1001 -> DefaultScope {3A8F149C-70FF-44E4-AEB7-C9DC61E4CD6B} URL =

FireFox:
========
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi => not found
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-02-20] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-02-20] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-21] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-21] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin HKU\S-1-5-21-2793044364-4081862340-4030437890-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Jan\AppData\Local\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-21] (Google Inc.)
FF Plugin HKU\S-1-5-21-2793044364-4081862340-4030437890-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Jan\AppData\Local\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-21] (Google Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://qip.ru
CHR StartupUrls: Default -> "chrome://newtab/","hxxps://www.google.com/"
CHR Session Restore: Default -> is enabled.
CHR Profile: C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default [2018-06-25]
CHR Extension: (Překladač Google) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2017-10-23]
CHR Extension: (YouTube) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-05-28]
CHR Extension: (WMS Map Viewer on line) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpiokkjcjgiabafjancfgfdogefnihpk [2018-01-29]
CHR Extension: (iMacros for Chrome) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cplklnmnlbnpmjogncfgfijoopmnlemp [2018-06-07]
CHR Extension: (AdBlock) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-06-24]
CHR Extension: (Avast Online Security) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-04-22]
CHR Extension: (2048 v pop-up) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijkmjnaahlnmdjjlbhbjbhlnmadmmlgg [2018-06-24]
CHR Extension: (Ghostery – Privacy Ad Blocker) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2018-06-07]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-07]
CHR Extension: (Gmail) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-05-28]
CHR Extension: (Chrome Media Router) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-14]
CHR Profile: C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1 [2018-06-24]
CHR Extension: (Prezentace) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Dokumenty) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Disk Google) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-08]
CHR Extension: (YouTube) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-08]
CHR Extension: (Bounceball) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bnonnffemhpfblohaicmfmofbfaaoobf [2016-11-08]
CHR Extension: (Adblock Plus) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2018-05-25]
CHR Extension: (Avast SafePrice) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2018-06-09]
CHR Extension: (Tabulky) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Dokumenty Google offline) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-13]
CHR Extension: (Avast Online Security) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-04-22]
CHR Extension: (Grass) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mmiboiefncpfjihjdedpaoammipkilla [2016-11-08]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-07]
CHR Extension: (Short url using official goo.gl api) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\phncbknmjfhhegegchdflhepkoibbbie [2016-11-08]
CHR Extension: (Gmail) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-08]
CHR Extension: (Chrome Media Router) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-14]
CHR Profile: C:\Users\Jan\AppData\Local\Google\Chrome\User Data\System Profile [2018-06-24]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2321384 2018-05-11] (Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2128872 2018-05-11] (Adobe Systems, Incorporated)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7620096 2018-05-17] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [317280 2018-05-17] (AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1494024 2017-11-30] ()
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2860760 2016-04-18] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-06-12] (Acer Incorporated)
S3 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [1194512 2018-06-06] (Garmin Ltd. or its subsidiaries)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [373720 2016-12-19] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-02-01] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2014-02-20] (Intel Corporation)
R3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-01-17] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-02-20] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [466664 2014-06-10] (Acer Incorporate)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation)
R2 osrss; C:\WINDOWS\system32\osrss.dll [130808 2018-06-08] (Microsoft Corporation)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate)
S3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [233216 2014-06-24] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [355304 2017-09-29] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105944 2017-09-29] (Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [196640 2018-05-17] (AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdrivera.sys [227504 2018-04-22] (AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsha.sys [199440 2018-04-22] (AVAST Software)
R0 aswblog; C:\WINDOWS\System32\drivers\aswbloga.sys [343752 2018-04-22] (AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniva.sys [57680 2018-04-22] (AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [234560 2018-05-17] (AVAST Software)
S3 aswHwid; C:\WINDOWS\System32\drivers\aswHwid.sys [46968 2018-05-17] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [41832 2017-09-19] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [159120 2018-05-17] (AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [111360 2018-05-17] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [85968 2018-05-17] (AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1027720 2018-05-17] (AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [460520 2018-05-17] (AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [205976 2018-05-17] (AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [381552 2018-05-17] (AVAST Software)
S3 CH341SER_A64; C:\WINDOWS\System32\Drivers\CH341S64.SYS [59904 2015-01-26] (www.winchiphead.com)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [21360 2013-07-18] (Acer Incorporated)
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [116736 2014-02-20] (Intel Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvaci.inf_amd64_2c4bd92aa476af37\nvlddmkm.sys [17020720 2017-11-28] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-10-11] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48064 2017-08-18] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-10-11] (NVIDIA Corporation)
R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [14680 2013-07-18] (Acer Incorporated)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2017-09-29] (Realtek )
S3 RTL2832UBDA; C:\Windows\SysWOW64\drivers\RTL2832UBDA.sys [237968 2012-08-03] (REALTEK SEMICONDUCTOR Corp.)
S3 RTL2832UUSB; C:\Windows\SysWOW64\Drivers\RTL2832UUSB.sys [39056 2012-08-03] (REALTEK SEMICONDUCTOR Corp.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44608 2017-09-29] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [309144 2017-09-29] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [119192 2017-09-29] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-06-25 18:38 - 2018-06-25 18:39 - 000000000 ____D C:\Users\Jan\Desktop\Frsit log
2018-06-24 19:20 - 2018-06-24 19:22 - 000000000 ____D C:\AdwCleaner
2018-06-24 19:18 - 2018-06-24 19:18 - 007372496 _____ (Malwarebytes) C:\Users\Jan\Desktop\adwcleaner_7.2.0.exe
2018-06-24 18:37 - 2018-06-24 18:39 - 164652169 _____ C:\Users\Jan\Desktop\Proso.zip
2018-06-24 17:35 - 2018-06-08 14:09 - 000130808 _____ (Microsoft Corporation) C:\WINDOWS\system32\osrss.dll
2018-06-24 16:53 - 2018-06-24 16:53 - 000000075 _____ C:\Users\Jan\Desktop\VIRY.CZ • Zobrazit téma - zpomalený notebook.url
2018-06-24 16:46 - 2018-06-25 18:40 - 000022487 _____ C:\Users\Jan\Desktop\FRST.txt
2018-06-24 16:46 - 2018-06-25 18:39 - 000000000 ____D C:\FRST
2018-06-24 16:46 - 2018-06-24 16:46 - 002412544 _____ (Farbar) C:\Users\Jan\Desktop\FRST64.exe
2018-06-24 15:36 - 2018-06-24 15:36 - 000000000 ____D C:\Windows.old
2018-06-14 19:27 - 2018-06-14 19:27 - 000014336 ___SH C:\Users\Jan\Downloads\Thumbs.db
2018-06-12 17:23 - 2018-06-12 17:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2018-06-07 18:48 - 2018-06-07 18:48 - 000000000 ____D C:\Users\Jan\AppData\LocalLow\Landfall Games
2018-06-07 17:15 - 2018-06-07 17:29 - 000000000 ____D C:\Users\Jan\Desktop\egypt
2018-06-07 17:12 - 2018-06-07 17:12 - 000001803 _____ C:\Users\Jan\Desktop\wsclient.exe – zástupce.lnk
2018-06-07 17:10 - 2018-06-07 17:28 - 000000000 ____D C:\Users\Jan\Downloads\wsclient.20180531
2018-06-07 17:09 - 2018-06-07 17:09 - 003658184 _____ C:\Users\Jan\Downloads\wsclient.20180531.zip
2018-06-07 16:39 - 2018-06-06 01:24 - 000835056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2018-06-07 16:39 - 2018-06-06 01:24 - 000179704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-06-25 18:36 - 2017-12-06 19:58 - 004214412 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-06-25 18:36 - 2017-09-30 16:31 - 002012684 _____ C:\WINDOWS\system32\perfh005.dat
2018-06-25 18:36 - 2017-09-30 16:31 - 000525094 _____ C:\WINDOWS\system32\perfc005.dat
2018-06-25 18:35 - 2016-09-29 17:00 - 000000000 ____D C:\ProgramData\NVIDIA
2018-06-25 18:34 - 2016-06-20 14:57 - 000000000 ____D C:\Program Files (x86)\Steam
2018-06-25 18:32 - 2017-05-26 22:38 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2018-06-25 18:32 - 2016-06-06 21:01 - 000000000 __SHD C:\Users\Jan\IntelGraphicsProfiles
2018-06-24 19:48 - 2016-06-21 16:15 - 000063931 _____ C:\IFRToolLog.txt
2018-06-24 19:42 - 2017-12-06 19:56 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-06-24 19:42 - 2017-09-29 10:45 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-06-24 19:34 - 2018-04-12 18:55 - 000000000 ___HD C:\$WINDOWS.~BT
2018-06-24 19:34 - 2017-12-04 12:11 - 000000000 ___DC C:\WINDOWS\Panther
2018-06-24 19:26 - 2016-06-15 20:30 - 000000962 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA.job
2018-06-24 19:26 - 2016-06-15 20:30 - 000000910 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core.job
2018-06-24 19:26 - 2016-06-06 21:13 - 000000968 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2018-06-24 19:22 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\Registration
2018-06-24 19:02 - 2017-12-06 19:34 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-06-24 18:56 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2018-06-24 18:35 - 2018-02-16 13:37 - 000002760 _____ C:\WINDOWS\System32\Tasks\AdobeGCInvoker-1.0-MicrosoftAccount-northendcz@gmail.com
2018-06-24 18:35 - 2017-12-06 19:56 - 000004154 _____ C:\WINDOWS\System32\Tasks\Software Update Application
2018-06-24 18:35 - 2017-12-06 19:56 - 000003742 _____ C:\WINDOWS\System32\Tasks\ACCAgent
2018-06-24 18:35 - 2017-12-06 19:56 - 000003600 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA1d25885b7796f
2018-06-24 18:35 - 2017-12-06 19:56 - 000003430 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA1d1c02830573b9b
2018-06-24 18:35 - 2017-12-06 19:56 - 000003410 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA
2018-06-24 18:35 - 2017-12-06 19:56 - 000003398 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-24 18:35 - 2017-12-06 19:56 - 000003336 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2018-06-24 18:35 - 2017-12-06 19:56 - 000003332 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core1d25885af55c6
2018-06-24 18:35 - 2017-12-06 19:56 - 000003176 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-24 18:35 - 2017-12-06 19:56 - 000003176 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2018-06-24 18:35 - 2017-12-06 19:56 - 000003138 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core
2018-06-24 18:35 - 2017-12-06 19:56 - 000002984 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-24 18:35 - 2017-12-06 19:56 - 000002956 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-24 18:35 - 2017-12-06 19:56 - 000002914 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-24 18:35 - 2017-12-06 19:56 - 000002868 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2018-06-24 18:35 - 2017-12-06 19:56 - 000002838 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-24 18:35 - 2017-12-06 19:56 - 000002786 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-24 18:35 - 2017-12-06 19:56 - 000002750 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2793044364-4081862340-4030437890-500
2018-06-24 18:35 - 2017-12-06 19:56 - 000002744 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-06-24 18:35 - 2017-12-06 19:56 - 000002720 _____ C:\WINDOWS\System32\Tasks\ACC
2018-06-24 18:35 - 2017-12-06 19:56 - 000002702 _____ C:\WINDOWS\System32\Tasks\GarminUpdaterTask
2018-06-24 18:35 - 2017-12-06 19:56 - 000002588 _____ C:\WINDOWS\System32\Tasks\BacKGroundAgent
2018-06-24 18:35 - 2017-12-06 19:56 - 000002494 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon
2018-06-24 18:35 - 2017-12-06 19:56 - 000002220 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2018-06-24 18:35 - 2017-12-06 19:56 - 000002186 _____ C:\WINDOWS\System32\Tasks\ACCBackgroundApplication
2018-06-24 18:35 - 2017-12-06 19:56 - 000002182 _____ C:\WINDOWS\System32\Tasks\Quick Access Quick Launcher
2018-06-24 18:35 - 2017-12-06 19:56 - 000002118 _____ C:\WINDOWS\System32\Tasks\DolbySelectorTask
2018-06-24 18:35 - 2017-12-06 19:56 - 000002096 _____ C:\WINDOWS\System32\Tasks\Power Management
2018-06-24 18:35 - 2017-12-06 19:56 - 000002070 _____ C:\WINDOWS\System32\Tasks\Launch Manager
2018-06-24 18:35 - 2017-12-06 19:56 - 000002062 _____ C:\WINDOWS\System32\Tasks\Quick Access
2018-06-24 18:35 - 2017-12-06 19:56 - 000000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2018-06-24 18:35 - 2017-11-07 17:01 - 000000000 ____D C:\Users\Jan\AppData\Local\Ubisoft Game Launcher
2018-06-24 18:33 - 2017-12-06 19:39 - 000000000 ____D C:\Users\Jan\AppData\Local\Packages
2018-06-24 18:33 - 2017-09-29 15:46 - 000000000 ___HD C:\Program Files\WindowsApps
2018-06-24 18:33 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\AppReadiness
2018-06-24 18:33 - 2017-09-29 10:45 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2018-06-24 18:31 - 2017-09-29 15:44 - 000000000 ____D C:\WINDOWS\INF
2018-06-24 18:30 - 2016-06-06 21:07 - 000000000 ___RD C:\Users\Jan\OneDrive
2018-06-24 18:27 - 2017-12-06 19:55 - 000026673 _____ C:\WINDOWS\diagwrn.xml
2018-06-24 18:27 - 2017-12-06 19:55 - 000026673 _____ C:\WINDOWS\diagerr.xml
2018-06-24 17:35 - 2014-09-20 16:51 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2018-06-24 16:43 - 2018-03-24 13:25 - 000008192 ___SH C:\Users\Jan\Desktop\Thumbs.db
2018-06-24 16:43 - 2018-01-18 21:43 - 000000000 ____D C:\Users\Jan\Desktop\SK
2018-06-24 16:43 - 2016-07-31 18:18 - 000000000 ____D C:\WINDOWS\system32\MRT
2018-06-24 16:38 - 2017-10-11 18:05 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2018-06-24 16:38 - 2016-07-31 18:18 - 133315992 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2018-06-24 16:32 - 2018-03-28 18:01 - 000000000 ____D C:\Program Files (x86)\BlueStacks
2018-06-24 16:32 - 2017-12-06 19:34 - 005117872 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-06-24 16:21 - 2016-06-06 21:24 - 000000000 ____D C:\ProgramData\AVAST Software
2018-06-24 16:19 - 2018-03-28 18:01 - 000000000 ____D C:\Users\Jan\AppData\Local\Bluestacks
2018-06-24 16:18 - 2016-07-04 08:59 - 000000000 ____D C:\Users\Jan\AppData\Local\CrashDumps
2018-06-17 17:05 - 2017-12-06 19:56 - 000004264 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2018-06-14 19:36 - 2016-06-06 21:13 - 000002305 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-06-14 19:36 - 2016-06-06 21:13 - 000002264 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-06-12 17:24 - 2017-05-10 15:58 - 000000000 ____D C:\Program Files (x86)\Garmin
2018-06-12 17:24 - 2014-09-20 16:21 - 000000000 ____D C:\ProgramData\Package Cache
2018-06-10 15:00 - 2017-09-29 15:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2018-06-09 09:42 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\rescache
2018-06-09 09:24 - 2017-12-06 19:56 - 000003406 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1465241279
2018-06-07 16:42 - 2016-04-27 08:56 - 000000000 __RHD C:\Users\Public\AccountPictures
2018-06-07 16:41 - 2017-12-06 19:58 - 000000000 ___RD C:\Users\Jan\3D Objects

Some files in TEMP:
====================
2018-06-24 16:19 - 2018-03-22 04:00 - 001476640 _____ (BlueStack Systems, Inc.) C:\Users\Jan\AppData\Local\Temp\BlueStacksClientUninstaller.exe
2018-06-24 16:19 - 2018-03-22 04:00 - 000421368 _____ (CodeTitans) C:\Users\Jan\AppData\Local\Temp\JSON.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-06-07 19:19

==================== End of FRST.txt ============================

Re: zpomalený notebook

Napsal: 25 čer 2018 19:12
od Rudy
Otevřte poznámkový blok a zkopírujte do něj:
Start

CloseProcesses:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
SearchScopes: HKU\S-1-5-21-2793044364-4081862340-4030437890-1001 -> DefaultScope {3A8F149C-70FF-44E4-AEB7-C9DC61E4CD6B} URL =
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA.job
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA1d25885b7796f
c:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA1d1c02830573b9b
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core1d25885af55c6
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core
C:\Users\Jan\AppData\Local\Temp
CustomCLSID: HKU\S-1-5-21-2793044364-4081862340-4030437890-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Jan\AppData\Local\Microsoft\OneDrive\18.091.0506.0007\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2793044364-4081862340-4030437890-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Jan\AppData\Local\Microsoft\OneDrive\18.091.0506.0007\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2793044364-4081862340-4030437890-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Jan\AppData\Local\Microsoft\OneDrive\18.091.0506.0007\amd64\FileSyncShell64.dll => No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Task: {207AC315-7F5A-42BB-8703-C0C29D5B8656} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA => C:\Users\Jan\AppData\Local\Google\Update\GoogleUpdate.exe [2016-06-15] (Google Inc.)
Task: {23F8A703-A257-4A32-AF77-7B75E6AF0A27} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {2AF3BFB4-026C-4BC1-A5D4-0A26BCAB85C7} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core => C:\Users\Jan\AppData\Local\Google\Update\GoogleUpdate.exe [2016-06-15] (Google Inc.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core.job => C:\Users\Jan\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA.job => C:\Users\Jan\AppData\Local\Google\Update\GoogleUpdate.exe

EmptyTemp:
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Re: zpomalený notebook

Napsal: 25 čer 2018 19:42
od northendcz
Fix result of Farbar Recovery Scan Tool (x64) Version: 20.06.2018
Ran by Jan (25-06-2018 20:33:31) Run:1
Running from C:\Users\Jan\Desktop
Loaded Profiles: Jan (Available Profiles: Jan)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
SearchScopes: HKU\S-1-5-21-2793044364-4081862340-4030437890-1001 -> DefaultScope {3A8F149C-70FF-44E4-AEB7-C9DC61E4CD6B} URL =
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA.job
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA1d25885b7796f
c:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA1d1c02830573b9b
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core1d25885af55c6
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core
C:\Users\Jan\AppData\Local\Temp
CustomCLSID: HKU\S-1-5-21-2793044364-4081862340-4030437890-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Jan\AppData\Local\Microsoft\OneDrive\18.091.0506.0007\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2793044364-4081862340-4030437890-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Jan\AppData\Local\Microsoft\OneDrive\18.091.0506.0007\amd64\FileSyncShell64.dll => No File
CustomCLSID: HKU\S-1-5-21-2793044364-4081862340-4030437890-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Jan\AppData\Local\Microsoft\OneDrive\18.091.0506.0007\amd64\FileSyncShell64.dll => No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Task: {207AC315-7F5A-42BB-8703-C0C29D5B8656} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA => C:\Users\Jan\AppData\Local\Google\Update\GoogleUpdate.exe [2016-06-15] (Google Inc.)
Task: {23F8A703-A257-4A32-AF77-7B75E6AF0A27} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {2AF3BFB4-026C-4BC1-A5D4-0A26BCAB85C7} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core => C:\Users\Jan\AppData\Local\Google\Update\GoogleUpdate.exe [2016-06-15] (Google Inc.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core.job => C:\Users\Jan\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA.job => C:\Users\Jan\AppData\Local\Google\Update\GoogleUpdate.exe

EmptyTemp:
End
*****************

Processes closed successfully.
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION => restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Local Page => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Local Page => value restored successfully
"HKU\S-1-5-21-2793044364-4081862340-4030437890-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core.job => moved successfully
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA1d25885b7796f => moved successfully
c:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA1d1c02830573b9b => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core1d25885af55c6 => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core => moved successfully
C:\Users\Jan\AppData\Local\Temp => moved successfully
"HKU\S-1-5-21-2793044364-4081862340-4030437890-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}" => removed successfully
"HKU\S-1-5-21-2793044364-4081862340-4030437890-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}" => removed successfully
"HKU\S-1-5-21-2793044364-4081862340-4030437890-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}" => removed successfully
"HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui" => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{207AC315-7F5A-42BB-8703-C0C29D5B8656}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{207AC315-7F5A-42BB-8703-C0C29D5B8656}" => removed successfully
"C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA" => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{23F8A703-A257-4A32-AF77-7B75E6AF0A27}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{23F8A703-A257-4A32-AF77-7B75E6AF0A27}" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2AF3BFB4-026C-4BC1-A5D4-0A26BCAB85C7}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2AF3BFB4-026C-4BC1-A5D4-0A26BCAB85C7}" => removed successfully
"C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core" => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core" => removed successfully
"C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job" => not found
"C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001Core.job" => not found
"C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2793044364-4081862340-4030437890-1001UA.job" => not found

=========== EmptyTemp: ==========

BITS transfer queue => 7888896 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 14841185 B
Java, Flash, Steam htmlcache => 626900922 B
Windows/system/drivers => 1030402 B
Edge => 1197 B
Chrome => 357782112 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 2450 B
NetworkService => 0 B
Jan => 1573614 B

RecycleBin => 0 B
EmptyTemp: => 963.2 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 20:35:08 ====

Re: zpomalený notebook

Napsal: 25 čer 2018 20:59
od Rudy
Smazáno. Nastala nějaká změna?

Re: zpomalený notebook

Napsal: 28 čer 2018 17:23
od northendcz
Byl jsem mimo domov, omlouvám se že jsem neodepsal dříve.
reakce notebooku se zrychlyli

Re: zpomalený notebook

Napsal: 28 čer 2018 17:57
od Rudy
Tak to jsem rád. Vše vyřešeno?

Re: zpomalený notebook

Napsal: 28 čer 2018 18:47
od northendcz
vypadá to že jo, moc času u notebooku poslední dobou netrávím, ale kdybych na něco narazil tak bych se ozval.
z plochy vymazat?

Re: zpomalený notebook

Napsal: 28 čer 2018 18:56
od Rudy
ADW znovu spusťte a v levém roletovém menu klikněte na odinstalovat. Vše ostatní normálně smažte. Klidně se ozvěte, vždy tu někdo je. :)
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz