VIRY.CZ

Dobrý den,

do rukou se mi dostal kamarádky strarý NTB ještě s win xp. Je velmi pomalý a tak chci zkusit, jestliby šlo s tím něco udělat, nebo je načase ho poslat do křemíkového nebe? Logy z FRST přikládám jako archiv.

Zdravím!

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Java\jre6\bin\jusched.exe [136600 2016-09-08] (Sun Microsystems, Inc. -> Sun Microsystems, Inc.)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [HPUsageTracking] => "C:\Program Files\Hewlett-Packard\HP UT\bin\hppusg.exe" "C:\Program Files\Hewlett-Packard\HP UT\" [0 0000-00-00] () <==== ATTENTION [zero byte File/Folder]
HKU\S-1-5-21-1482476501-682003330-1801674531-1003\...\MountPoints2: {d49dae48-78ae-11e6-87bc-0040cadb96bc} - E:\Autorun.exe
HKU\S-1-5-21-1482476501-682003330-1801674531-1003\...\MountPoints2: {d49dae4a-78ae-11e6-87bc-0040cadb96bc} - E:\Autorun.exe
HKLM\...\Windows NT x86\Print Processors\winprint: localspl.dll (No File)
HKLM\...\Print\Monitors\BlueSoleil Print Port: BsMonSvr (No File)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}] ->
HKLM\Software\Microsoft\Active Setup\Installed Components: [{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] ->
HKLM\Software\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] ->
Task: C:\WINDOWS\Tasks\AutoKMS.job => C:\WINDOWS\AutoKMS.exe
Task: C:\WINDOWS\Tasks\AutoKMSDaily.job => C:\WINDOWS\AutoKMS.exe
S3 GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS [X]
S3 NTACCESS; \??\D:\NTACCESS.sys [X]
S3 SetupNTGLM7X; \??\D:\NTGLM7X.sys [X]
U1 WS2IFSL; no ImagePath
C:\WINDOWS\Tasks\AutoKMSDaily.job
C:\WINDOWS\Tasks\AutoKMS.job
C:\WINDOWS\KMSEmulator.exe

EmptyTemp:
End

Uložte do C:\Documents and Settings\uzivatel\Dokumenty\Stažené soubory jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte. V PC není přítomen žádný bezpečnostní software.

Fix result of Farbar Recovery Scan Tool (x86) Version: 09-09-2024
Ran by uzivatel (15-09-2024 14:41:18) Run:1
Running from C:\Documents and Settings\uzivatel\Dokumenty\Stažené soubory
Loaded Profiles: uzivatel
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Java\jre6\bin\jusched.exe [136600 2016-09-08] (Sun Microsystems, Inc. -> Sun Microsystems, Inc.)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [HPUsageTracking] => "C:\Program Files\Hewlett-Packard\HP UT\bin\hppusg.exe" "C:\Program Files\Hewlett-Packard\HP UT\" [0 0000-00-00] () <==== ATTENTION [zero byte File/Folder]
HKU\S-1-5-21-1482476501-682003330-1801674531-1003\...\MountPoints2: {d49dae48-78ae-11e6-87bc-0040cadb96bc} - E:\Autorun.exe
HKU\S-1-5-21-1482476501-682003330-1801674531-1003\...\MountPoints2: {d49dae4a-78ae-11e6-87bc-0040cadb96bc} - E:\Autorun.exe
HKLM\...\Windows NT x86\Print Processors\winprint: localspl.dll (No File)
HKLM\...\Print\Monitors\BlueSoleil Print Port: BsMonSvr (No File)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}] ->
HKLM\Software\Microsoft\Active Setup\Installed Components: [{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] ->
HKLM\Software\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] ->
Task: C:\WINDOWS\Tasks\AutoKMS.job => C:\WINDOWS\AutoKMS.exe
Task: C:\WINDOWS\Tasks\AutoKMSDaily.job => C:\WINDOWS\AutoKMS.exe
S3 GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS [X]
S3 NTACCESS; \??\D:\NTACCESS.sys [X]
S3 SetupNTGLM7X; \??\D:\NTGLM7X.sys [X]
U1 WS2IFSL; no ImagePath
C:\WINDOWS\Tasks\AutoKMSDaily.job
C:\WINDOWS\Tasks\AutoKMS.job
C:\WINDOWS\KMSEmulator.exe

EmptyTemp:
End
*****************

Processes closed successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched" => removed successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\HPUsageTracking" => removed successfully.
HKU\S-1-5-21-1482476501-682003330-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d49dae48-78ae-11e6-87bc-0040cadb96bc} => removed successfully.
HKU\S-1-5-21-1482476501-682003330-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d49dae4a-78ae-11e6-87bc-0040cadb96bc} => removed successfully.
HKLM\System\CurrentControlSet\Control\Print\Environments\Windows NT x86\Print Processors\winprint => removed successfully.
HKLM\System\CurrentControlSet\Control\Print\Monitors\BlueSoleil Print Port => removed successfully.
HKLM\Software\Microsoft\Active Setup\Installed Components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} => removed successfully.
HKLM\Software\Microsoft\Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95} => removed successfully.
HKLM\Software\Microsoft\Active Setup\Installed Components\{73FA19D0-2D75-11D2-995D-00C04F98BBC9} => removed successfully.
C:\WINDOWS\Tasks\AutoKMS.job => moved successfully
C:\WINDOWS\Tasks\AutoKMSDaily.job => moved successfully
HKLM\System\CurrentControlSet\Services\GMSIPCI => removed successfully.
GMSIPCI => service removed successfully.
HKLM\System\CurrentControlSet\Services\NTACCESS => removed successfully.
NTACCESS => service removed successfully.
HKLM\System\CurrentControlSet\Services\SetupNTGLM7X => removed successfully.
SetupNTGLM7X => service removed successfully.
HKLM\System\CurrentControlSet\Services\WS2IFSL => removed successfully.
WS2IFSL => service removed successfully.
"C:\WINDOWS\Tasks\AutoKMSDaily.job" => not found
"C:\WINDOWS\Tasks\AutoKMS.job" => not found
C:\WINDOWS\KMSEmulator.exe => moved successfully

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 0 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache => 74830 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 24482214 B
Windows/system/dllcache/drivers => 262766645 B
Edge => 0 B
Firefox => 405616433 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default User => 66164 B
All Users => 66164 B
systemprofile => 181480 B
LocalService => 10410849 B
NetworkService.NT AUTHORITY => 10477080 B
NetworkService => 10543311 B
uzivatel => 1319536192 B

RecycleBin => 0 B
EmptyTemp: => 1.9 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 14:47:45 ====

Jaký bezpečnostní software byste doporučil?

Pro většinu home userů postačí nějaký free (Avira, Avast). Zrychlil se chod?

Děkuji, ano, zdá se, že ano.

Rádo se stalo!