Prosím o kontrolu logu, pomalé PC Vyřešeno

Místo pro vaše HiJackThis logy a logy z dalších programů…

Moderátoři: Mods_senior, Security team

Zamčeno
zenda
nováček
Příspěvky: 39
Registrován: srpen 13
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, pomalé PC

Příspěvekod zenda » 16 úno 2014 12:11

ComboFix


ComboFix 14-02-14.01 - Ivan 16.02.2014 11:55:15.4.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4003.2748 [GMT 1:00]
Spuštěný z: c:\users\Ivan\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\PCDr\6422\AddOnDownloaded\1b8965d5-1ace-460f-9f9d-51d4c6c7c534.dll
c:\programdata\PCDr\6422\AddOnDownloaded\236515c7-c29a-41e6-873d-b9e2673e11c3.dll
c:\programdata\PCDr\6422\AddOnDownloaded\2b605d7d-d0d9-4054-adbf-4b49c7319932.dll
c:\programdata\PCDr\6422\AddOnDownloaded\46396106-fa11-4329-87bf-ed5a85069e89.dll
c:\programdata\PCDr\6422\AddOnDownloaded\46f8f9b8-a6d9-4ac9-a82f-2c79e2a75546.dll
c:\programdata\PCDr\6422\AddOnDownloaded\4f436db1-def5-4137-a084-15125ef65010.dll
c:\programdata\PCDr\6422\AddOnDownloaded\5dc25d30-0116-4ea0-9e12-f329c60c603b.dll
c:\programdata\PCDr\6422\AddOnDownloaded\667e2f17-0031-40e7-a376-b390959abbb8.dll
c:\programdata\PCDr\6422\AddOnDownloaded\6ff7e11c-29c5-4891-bc9e-fae289e9c9fe.dll
c:\programdata\PCDr\6422\AddOnDownloaded\7bc69e73-3dda-484f-af68-bb19598a4b32.dll
c:\programdata\PCDr\6422\AddOnDownloaded\9c39bb99-9a2d-442b-9a53-fc7bd3d32368.dll
c:\programdata\PCDr\6422\AddOnDownloaded\9c91892f-68c1-49f2-9c84-27a2e4701c64.dll
c:\programdata\PCDr\6422\AddOnDownloaded\a5fe6876-4636-4d79-8440-3ce56e4f4416.dll
c:\programdata\PCDr\6422\AddOnDownloaded\a9d9bdb2-283c-48d2-b6ea-df9f6bc83b04.dll
c:\programdata\PCDr\6422\AddOnDownloaded\ade7fb72-009e-483b-8dbb-a94667c9efee.dll
c:\programdata\PCDr\6422\AddOnDownloaded\b1cd2350-1a70-4fd2-9b75-98208aace99a.dll
c:\programdata\PCDr\6422\AddOnDownloaded\cdf86821-bbfe-4586-8cae-bf998bb8d498.dll
c:\programdata\PCDr\6422\AddOnDownloaded\e6166583-b575-4093-a3ca-d9c4587d4bb7.dll
c:\programdata\PCDr\6422\AddOnDownloaded\fdae1379-f1f4-49e3-a1cc-0a3d1c8ae2a5.dll
c:\programdata\PCDr\6422\AddOnDownloaded\ffa288d5-37d2-4036-812e-1b7722ec86ed.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-01-16 do 2014-02-16 )))))))))))))))))))))))))))))))
.
.
2014-02-16 11:04 . 2014-02-16 11:04 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2014-02-16 11:04 . 2014-02-16 11:04 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-02-15 11:31 . 2014-02-15 11:31 -------- d-----w- c:\users\Ivan\AppData\Local\Adobe
2014-02-15 05:56 . 2013-12-04 03:28 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{6D073193-3615-4CDC-BDB7-987E6CCB0753}\mpengine.dll
2014-02-13 18:28 . 2014-02-13 18:28 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2014-02-13 18:28 . 2013-04-04 13:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-02-13 18:27 . 2013-11-26 23:29 5693440 ----a-w- c:\windows\SysWow64\mstscax.dll
2014-02-13 18:27 . 2013-11-26 22:49 6573056 ----a-w- c:\windows\system32\mstscax.dll
2014-02-13 18:24 . 2014-02-15 11:34 -------- d-----w- C:\AdwCleaner
2014-02-13 11:40 . 2013-12-21 09:53 548864 ----a-w- c:\windows\system32\vbscript.dll
2014-02-13 11:39 . 2014-02-06 09:25 4244480 ----a-w- c:\windows\SysWow64\jscript9.dll
2014-02-13 11:39 . 2014-02-06 10:11 5768704 ----a-w- c:\windows\system32\jscript9.dll
2014-02-13 11:39 . 2013-12-24 23:09 1987584 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2014-02-13 11:39 . 2013-12-24 22:48 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2014-02-13 11:39 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2014-02-13 11:39 . 2013-11-22 22:48 3928064 ----a-w- c:\windows\system32\d2d1.dll
2014-02-03 14:04 . 2014-02-03 14:04 -------- d-sh--w- c:\users\Ivan\AppData\Roaming\Common
2014-02-03 14:04 . 2014-02-10 09:20 -------- d-----w- c:\users\Ivan\AppData\Roaming\DisplayFusion
2014-02-03 14:04 . 2014-02-03 14:04 -------- d-----w- c:\programdata\Binary Fortress Software
2014-02-03 13:49 . 2013-11-26 11:40 376768 ----a-w- c:\windows\system32\drivers\netio.sys
2014-02-03 12:52 . 2014-02-03 14:04 -------- d-----w- c:\users\Ivan\AppData\Roaming\Binary Fortress Software
2014-02-03 12:50 . 2014-02-03 14:07 -------- d-----w- c:\program files (x86)\DisplayFusion
2014-01-25 16:17 . 2014-01-25 16:17 -------- d-----w- c:\users\Ivan\AppData\Local\Foxit Reader
2014-01-23 04:54 . 2013-12-18 20:09 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-01-21 21:43 . 2014-01-21 21:43 -------- d-----w- c:\users\Public\Davar3
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-13 11:45 . 2012-09-12 15:13 88567024 ----a-w- c:\windows\system32\MRT.exe
2014-02-05 10:37 . 2012-10-19 05:25 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-02-05 10:37 . 2012-10-19 05:25 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-12-18 13:43 . 2013-12-18 13:43 18286416 ----a-w- c:\windows\system32\nvwgf2umx.dll
2013-12-18 13:43 . 2013-12-18 13:43 15855568 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2013-12-18 13:43 . 2011-06-13 00:00 1435504 ----a-w- c:\windows\system32\nvumdshimx.dll
2013-12-18 13:43 . 2011-06-13 00:00 1241376 ----a-w- c:\windows\SysWow64\nvumdshim.dll
2013-12-18 13:42 . 2013-12-18 13:42 9480328 ----a-w- c:\windows\SysWow64\nvopencl.dll
2013-12-18 13:42 . 2013-12-18 13:42 32544 ----a-w- c:\windows\system32\drivers\nvpciflt.sys
2013-12-18 13:42 . 2013-12-18 13:42 11374520 ----a-w- c:\windows\system32\nvopencl.dll
2013-12-18 13:42 . 2013-12-18 13:42 317472 ----a-w- c:\windows\system32\nvoglshim64.dll
2013-12-18 13:42 . 2013-12-18 13:42 30344480 ----a-w- c:\windows\system32\nvoglv64.dll
2013-12-18 13:42 . 2013-12-18 13:42 266984 ----a-w- c:\windows\SysWow64\nvoglshim32.dll
2013-12-18 13:42 . 2013-12-18 13:42 22933792 ----a-w- c:\windows\SysWow64\nvoglv32.dll
2013-12-18 13:42 . 2013-12-18 13:42 655136 ----a-w- c:\windows\system32\NvIFR64.dll
2013-12-18 13:42 . 2013-12-18 13:42 560416 ----a-w- c:\windows\SysWow64\NvIFR.dll
2013-12-18 13:42 . 2013-12-18 13:42 300320 ----a-w- c:\windows\system32\drivers\nvkflt.sys
2013-12-18 13:42 . 2013-12-18 13:42 168616 ----a-w- c:\windows\system32\nvinitx.dll
2013-12-18 13:42 . 2013-12-18 13:42 12572960 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2013-12-18 13:42 . 2011-06-13 00:00 141336 ----a-w- c:\windows\SysWow64\nvinit.dll
2013-12-18 13:42 . 2013-12-18 13:42 696096 ----a-w- c:\windows\system32\NvFBC64.dll
2013-12-18 13:42 . 2013-12-18 13:42 599840 ----a-w- c:\windows\SysWow64\NvFBC.dll
2013-12-18 13:42 . 2013-12-18 13:42 1511712 ----a-w- c:\windows\system32\nvdispgenco6433165.dll
2013-12-18 13:42 . 2013-12-18 13:42 1884448 ----a-w- c:\windows\system32\nvdispco6433165.dll
2013-12-18 13:42 . 2013-12-18 13:42 18199872 ----a-w- c:\windows\system32\nvd3dumx.dll
2013-12-18 13:42 . 2011-06-13 00:00 15212336 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2013-12-18 13:42 . 2013-12-18 13:42 9524088 ----a-w- c:\windows\SysWow64\nvcuda.dll
2013-12-18 13:42 . 2013-12-18 13:42 3131680 ----a-w- c:\windows\system32\nvcuvid.dll
2013-12-18 13:42 . 2013-12-18 13:42 3124512 ----a-w- c:\windows\system32\nvcuvenc.dll
2013-12-18 13:42 . 2013-12-18 13:42 2946848 ----a-w- c:\windows\SysWow64\nvcuvid.dll
2013-12-18 13:42 . 2013-12-18 13:42 2747168 ----a-w- c:\windows\SysWow64\nvcuvenc.dll
2013-12-18 13:42 . 2013-12-18 13:42 11426568 ----a-w- c:\windows\system32\nvcuda.dll
2013-12-18 13:42 . 2013-12-18 13:42 17560352 ----a-w- c:\windows\SysWow64\nvcompiler.dll
2013-12-18 13:42 . 2013-12-18 13:42 25257248 ----a-w- c:\windows\system32\nvcompiler.dll
2013-12-18 13:42 . 2011-06-13 00:00 3067560 ----a-w- c:\windows\system32\nvapi64.dll
2013-12-18 13:42 . 2011-06-13 00:00 2695200 ----a-w- c:\windows\SysWow64\nvapi.dll
2013-12-18 05:13 . 2010-11-21 03:27 270496 ------w- c:\windows\system32\MpSigStub.exe
2013-11-27 01:42 . 2014-01-15 07:15 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2013-11-27 01:42 . 2014-01-15 07:15 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2013-11-27 01:42 . 2014-01-15 07:15 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2013-11-27 01:42 . 2014-01-15 07:15 53248 ----a-w- c:\windows\system32\drivers\usbehci.sys
2013-11-27 01:42 . 2014-01-15 07:15 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2013-11-27 01:42 . 2014-01-15 07:15 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2013-11-27 01:42 . 2014-01-15 07:15 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
2013-11-26 10:32 . 2014-01-15 07:15 3156480 ----a-w- c:\windows\system32\win32k.sys
2013-11-23 18:26 . 2013-12-30 18:55 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-11-23 17:47 . 2013-12-30 18:55 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-11-19 05:27 . 2013-11-19 05:27 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-11-19 05:27 . 2013-11-19 05:27 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-11-19 05:27 . 2013-11-19 05:27 942592 ----a-w- c:\windows\system32\jsIntl.dll
2013-11-19 05:27 . 2013-11-19 05:27 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-11-19 05:27 . 2013-11-19 05:27 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-11-19 05:27 . 2013-11-19 05:27 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-11-19 05:27 . 2013-11-19 05:27 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-11-19 05:27 . 2013-11-19 05:27 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2013-11-19 05:27 . 2013-11-19 05:27 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-11-19 05:27 . 2013-11-19 05:27 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2013-11-19 05:27 . 2013-11-19 05:27 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-11-19 05:27 . 2013-11-19 05:27 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-11-19 05:27 . 2013-11-19 05:27 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-11-19 05:27 . 2013-11-19 05:27 34816 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-11-19 05:27 . 2013-11-19 05:27 337408 ----a-w- c:\windows\SysWow64\html.iec
2013-11-19 05:27 . 2013-11-19 05:27 247808 ----a-w- c:\windows\system32\msls31.dll
2013-11-19 05:27 . 2013-11-19 05:27 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-11-19 05:27 . 2013-11-19 05:27 235008 ----a-w- c:\windows\system32\elshyph.dll
2013-11-19 05:27 . 2013-11-19 05:27 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2013-11-19 05:27 . 2013-11-19 05:27 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-11-19 05:27 . 2013-11-19 05:27 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2013-11-19 05:27 . 2013-11-19 05:27 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2013-11-19 05:27 . 2013-11-19 05:27 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2013-11-19 05:27 . 2013-11-19 05:27 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-11-19 05:27 . 2013-11-19 05:27 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-11-19 05:27 . 2013-11-19 05:27 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-11-19 05:27 . 2013-11-19 05:27 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-11-19 05:27 . 2013-11-19 05:27 84992 ----a-w- c:\windows\system32\mshtmled.dll
2013-11-19 05:27 . 2013-11-19 05:27 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2013-11-19 05:27 . 2013-11-19 05:27 81408 ----a-w- c:\windows\system32\icardie.dll
2013-11-19 05:27 . 2013-11-19 05:27 774144 ----a-w- c:\windows\system32\jscript.dll
2013-11-19 05:27 . 2013-11-19 05:27 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-11-19 05:27 . 2013-11-19 05:27 62464 ----a-w- c:\windows\system32\pngfilt.dll
2013-11-19 05:27 . 2013-11-19 05:27 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2013-11-19 05:27 . 2013-11-19 05:27 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-11-19 05:27 . 2013-11-19 05:27 48128 ----a-w- c:\windows\system32\imgutil.dll
2013-11-19 05:27 . 2013-11-19 05:27 453120 ----a-w- c:\windows\system32\dxtmsft.dll
2013-11-19 05:27 . 2013-11-19 05:27 413696 ----a-w- c:\windows\system32\html.iec
2013-11-19 05:27 . 2013-11-19 05:27 40448 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2013-11-19 05:27 . 2013-11-19 05:27 30208 ----a-w- c:\windows\system32\licmgr10.dll
2013-11-19 05:27 . 2013-11-19 05:27 296960 ----a-w- c:\windows\system32\dxtrans.dll
2013-11-19 05:27 . 2013-11-19 05:27 263376 ----a-w- c:\windows\system32\iedkcs32.dll
2013-11-19 05:27 . 2013-11-19 05:27 243200 ----a-w- c:\windows\system32\webcheck.dll
2013-11-19 05:27 . 2013-11-19 05:27 235520 ----a-w- c:\windows\system32\url.dll
2013-11-19 05:27 . 2013-11-19 05:27 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-11-19 05:27 . 2013-11-19 05:27 147968 ----a-w- c:\windows\system32\occache.dll
2013-11-19 05:27 . 2013-11-19 05:27 143872 ----a-w- c:\windows\system32\wextract.exe
2013-11-19 05:27 . 2013-11-19 05:27 13824 ----a-w- c:\windows\system32\mshta.exe
2013-11-19 05:27 . 2013-11-19 05:27 135680 ----a-w- c:\windows\system32\iepeers.dll
2013-11-19 05:27 . 2013-11-19 05:27 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-11-19 05:27 . 2013-11-19 05:27 105984 ----a-w- c:\windows\system32\iesysprep.dll
2013-11-19 05:27 . 2013-11-19 05:27 101376 ----a-w- c:\windows\system32\inseng.dll
2013-11-19 05:26 . 2013-11-19 05:26 859648 ----a-w- c:\windows\system32\tdh.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sony PC Companion"="c:\program files (x86)\Sony\Sony PC Companion\PCCompanion.exe" [2013-10-31 449760]
"DAEMON Tools Lite"="d:\programy\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
"DisplayFusion"="c:\program files (x86)\DisplayFusion\DisplayFusion.exe" [2013-11-27 7952224]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll c:\windows\SysWOW64\nvinit.dll c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AccuWeatherWidget]
2012-02-01 09:50 968048 ----a-w- c:\program files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dell Registration]
2010-08-23 18:43 3926528 ----a-w- c:\program files (x86)\System Registration\prodreg.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dell Webcam Central]
2010-08-19 23:06 487562 ----a-w- c:\program files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Desktop Disc Tool]
2010-11-17 15:35 514544 ----a-w- c:\program files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAStorIcon]
2010-11-06 04:54 283160 ----a-w- c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NUSB3MON]
2010-11-17 17:53 113288 ----a-w- c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray]
2010-11-25 10:33 240112 ----a-w- c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2013-07-02 08:16 254336 ----a-w- c:\program files (x86)\Common Files\Java\Java Update\jusched.exe
.
R2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [x]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [x]
R3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [x]
R3 btmaudio;Intel Bluetooth Audio Service;c:\windows\system32\drivers\btmaud.sys;c:\windows\SYSNATIVE\drivers\btmaud.sys [x]
R3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys;c:\windows\SYSNATIVE\DRIVERS\btmaux.sys [x]
R3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys;c:\windows\SYSNATIVE\DRIVERS\btmhsf.sys [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x]
R3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys;c:\windows\SYSNATIVE\DRIVERS\iBtFltCoex.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 s1039bus;Sony Ericsson Device 1039 driver (WDM);c:\windows\system32\DRIVERS\s1039bus.sys;c:\windows\SYSNATIVE\DRIVERS\s1039bus.sys [x]
R3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1039mdfl.sys;c:\windows\SYSNATIVE\DRIVERS\s1039mdfl.sys [x]
R3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1039mdm.sys;c:\windows\SYSNATIVE\DRIVERS\s1039mdm.sys [x]
R3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1039mgmt.sys;c:\windows\SYSNATIVE\DRIVERS\s1039mgmt.sys [x]
R3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1039nd5.sys;c:\windows\SYSNATIVE\DRIVERS\s1039nd5.sys [x]
R3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1039obex.sys;c:\windows\SYSNATIVE\DRIVERS\s1039obex.sys [x]
R3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1039unic.sys;c:\windows\SYSNATIVE\DRIVERS\s1039unic.sys [x]
R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 NCFilter;Novell UNC Filter - Filter;c:\windows\system32\DRIVERS\NCFilter.sys;c:\windows\SYSNATIVE\DRIVERS\NCFilter.sys [x]
S0 NCRecognizer;Novell UNC Filter - Recognizer;c:\windows\system32\DRIVERS\NCRecognizer.sys;c:\windows\SYSNATIVE\DRIVERS\NCRecognizer.sys [x]
S0 NCUncFilter;Novell UNC Filter - UNC Filter;c:\windows\system32\DRIVERS\NCUncFilter.sys;c:\windows\SYSNATIVE\DRIVERS\NCUncFilter.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 nvkflt;nvkflt;c:\windows\system32\DRIVERS\nvkflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvkflt.sys [x]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe;c:\program files\IDT\WDM\AESTSr64.exe [x]
S2 Autodesk Content Service;Autodesk Content Service;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [x]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 DisplayFusionService;DisplayFusionService;c:\program files (x86)\DisplayFusion\DisplayFusionService.exe;c:\program files (x86)\DisplayFusion\DisplayFusionService.exe [x]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;d:\programy\NOD32\x86\ekrn.exe;d:\programy\NOD32\x86\ekrn.exe [x]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfpr.sys [x]
S2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 NCFSD;Novell Client File System Redirector;c:\program files\Novell\Client\XTier\Drivers\ncfsd.sys;c:\program files\Novell\Client\XTier\Drivers\ncfsd.sys [x]
S2 NCIOCTL;Novell Xplat IoCtl Driver;c:\program files\Novell\Client\XTier\Drivers\ncioctl.sys;c:\program files\Novell\Client\XTier\Drivers\ncioctl.sys [x]
S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 XTSvcMgr;Novell XTier Service Manager;c:\program files\Novell\Client\XTier\Services\XTSvcMgr.exe;c:\program files\Novell\Client\XTier\Services\XTSvcMgr.exe [x]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys;c:\windows\SYSNATIVE\DRIVERS\CtClsFlt.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 wdkmd;Intel WiDi KMD;c:\windows\system32\DRIVERS\WDKMD.sys;c:\windows\SYSNATIVE\DRIVERS\WDKMD.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*Deregistered* - nciom
*Deregistered* - ncp
*Deregistered* - ncpl
*Deregistered* - ndm
*Deregistered* - ndmndap
*Deregistered* - ndslpp
*Deregistered* - niam
*Deregistered* - nipctl
*Deregistered* - nscm
*Deregistered* - nsns
*Deregistered* - nsvccost
*Deregistered* - xtxplat
.
Obsah adresáře 'Naplánované úlohy'
.
2014-02-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-19 10:37]
.
2014-02-15 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1253719010-2860817106-3115264128-1001Core.job
- c:\users\Ivan\AppData\Local\Google\Update\GoogleUpdate.exe [2013-11-20 17:46]
.
2014-02-16 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1253719010-2860817106-3115264128-1001UA.job
- c:\users\Ivan\AppData\Local\Google\Update\GoogleUpdate.exe [2013-11-20 17:46]
.
2014-02-16 c:\windows\Tasks\MATLAB R2012a Startup Accelerator.job
- d:\programy\Matlab\bin\win64\MATLABStartupAccelerator.exe [2012-09-13 01:29]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2011-04-12 609144]
"IntelTBRunOnce"="wscript.exe" [2013-10-12 168960]
"IntelWireless"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2010-12-17 1933584]
"DellStage"="c:\program files (x86)\Dell Stage\Dell Stage\stage_primary.exe" [2012-02-01 2195824]
"NWTRAY"="NWTRAY.EXE" [2012-07-13 38016]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-11-15 171064]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-11-15 399416]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-11-15 441912]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2011-09-08 1424896]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2010-11-03 10228224]
"egui"="d:\programy\NOD32\egui.exe" [2011-01-12 2918656]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll c:\windows\System32\nvinitx.dll c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
uInternet Settings,ProxyOverride = <local>
IE: E&xportovat do aplikace Microsoft Excel - d:\programy\MICROS~1\Office12\EXCEL.EXE/3000
Trusted Zone: dell.com
Trusted Zone: mojebanka.cz\*
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\sign
Trusted Zone: mojebanka.cz\www
Trusted Zone: mojeplatba.cz\www
Trusted Zone: mojebanka.cz\*
TCP: DhcpNameServer = 192.168.1.1 10.0.0.1 81.90.160.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
Celkový čas: 2014-02-16 12:07:37
ComboFix-quarantined-files.txt 2014-02-16 11:07
.
Před spuštěním: Volných bajtů: 11 798 794 240
Po spuštění: Volných bajtů: 12 450 512 896
.
- - End Of File - - 0008A6CCAA852FEFE0ACE531132C521E
Nahoru
Reklama
Top
Uživatelský avatar
Orcus
člen Security týmu
Elite Level 10.5
Elite Level 10.5
Příspěvky: 10645
Registrován: duben 10
Bydliště: Okolo rostou 3 růže =o)
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, pomalé PC

Příspěvekod Orcus » 16 úno 2014 15:09

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok).
Zkopíruj do něj následující celý text označený červeně:

ClearJavaCache::

KillAll::
File::
c:\windows\Tasks\Adobe Flash Player Updater.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1253719010-2860817106-3115264128-1001Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1253719010-2860817106-3115264128-1001UA.job
c:\windows\Tasks\MATLAB R2012a Startup Accelerator.job

RegLock::
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.





Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.


Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe
a když se oba soubory překryjí, skript upusť.
Obrázek

- Automaticky se spustí ComboFix, oprava může trvat i déle než 10 minut. ! Nech ComboFix dokončit svou práci !
- Vlož sem log, který vyběhne v závěru čistícího procesu

Upozornění : Může se stát, že po aplikaci skriptu a restartu počítače Windows nenaběhnou, pak znovu restartuj počítač, mačkej F8 a pak zvol poslední známou funkční konfiguraci.
Láska hřeje, ale uhlí je uhlí. :fire:


Log z HJT vkládejte do HJT sekce. Je-li moc dlouhý, rozděl jej do více zpráv.

Pár rad k bezpečnosti PC.

Po dobu mé nepřítomnosti mě zastupuje memphisto, jaro3 a Diallix

Pokud budete spokojeni , můžete podpořit naše fórum.
Nahoru
zenda
nováček
Příspěvky: 39
Registrován: srpen 13
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, pomalé PC

Příspěvekod zenda » 16 úno 2014 18:28

ComboFix

ComboFix 14-02-14.01 - Ivan 16.02.2014 18:05:07.5.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4003.2295 [GMT 1:00]
Spuštěný z: c:\users\Ivan\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Ivan\Desktop\CFScript.txt
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
FILE ::
"c:\windows\Tasks\Adobe Flash Player Updater.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1253719010-2860817106-3115264128-1001Core.job"
"c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1253719010-2860817106-3115264128-1001UA.job"
"c:\windows\Tasks\MATLAB R2012a Startup Accelerator.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\PCDr\6422\AddOnDownloaded\1b8965d5-1ace-460f-9f9d-51d4c6c7c534.dll
c:\programdata\PCDr\6422\AddOnDownloaded\236515c7-c29a-41e6-873d-b9e2673e11c3.dll
c:\programdata\PCDr\6422\AddOnDownloaded\2b605d7d-d0d9-4054-adbf-4b49c7319932.dll
c:\programdata\PCDr\6422\AddOnDownloaded\46396106-fa11-4329-87bf-ed5a85069e89.dll
c:\programdata\PCDr\6422\AddOnDownloaded\46f8f9b8-a6d9-4ac9-a82f-2c79e2a75546.dll
c:\programdata\PCDr\6422\AddOnDownloaded\4f436db1-def5-4137-a084-15125ef65010.dll
c:\programdata\PCDr\6422\AddOnDownloaded\5dc25d30-0116-4ea0-9e12-f329c60c603b.dll
c:\programdata\PCDr\6422\AddOnDownloaded\667e2f17-0031-40e7-a376-b390959abbb8.dll
c:\programdata\PCDr\6422\AddOnDownloaded\6ff7e11c-29c5-4891-bc9e-fae289e9c9fe.dll
c:\programdata\PCDr\6422\AddOnDownloaded\7bc69e73-3dda-484f-af68-bb19598a4b32.dll
c:\programdata\PCDr\6422\AddOnDownloaded\9c39bb99-9a2d-442b-9a53-fc7bd3d32368.dll
c:\programdata\PCDr\6422\AddOnDownloaded\9c91892f-68c1-49f2-9c84-27a2e4701c64.dll
c:\programdata\PCDr\6422\AddOnDownloaded\a5fe6876-4636-4d79-8440-3ce56e4f4416.dll
c:\programdata\PCDr\6422\AddOnDownloaded\a9d9bdb2-283c-48d2-b6ea-df9f6bc83b04.dll
c:\programdata\PCDr\6422\AddOnDownloaded\ade7fb72-009e-483b-8dbb-a94667c9efee.dll
c:\programdata\PCDr\6422\AddOnDownloaded\b1cd2350-1a70-4fd2-9b75-98208aace99a.dll
c:\programdata\PCDr\6422\AddOnDownloaded\cdf86821-bbfe-4586-8cae-bf998bb8d498.dll
c:\programdata\PCDr\6422\AddOnDownloaded\e6166583-b575-4093-a3ca-d9c4587d4bb7.dll
c:\programdata\PCDr\6422\AddOnDownloaded\fdae1379-f1f4-49e3-a1cc-0a3d1c8ae2a5.dll
c:\programdata\PCDr\6422\AddOnDownloaded\ffa288d5-37d2-4036-812e-1b7722ec86ed.dll
c:\windows\Tasks\Adobe Flash Player Updater.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1253719010-2860817106-3115264128-1001Core.job
c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1253719010-2860817106-3115264128-1001UA.job
c:\windows\Tasks\MATLAB R2012a Startup Accelerator.job
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-01-16 do 2014-02-16 )))))))))))))))))))))))))))))))
.
.
2014-02-16 17:15 . 2014-02-16 17:15 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2014-02-16 17:15 . 2014-02-16 17:15 -------- d-----w- c:\users\Public\AppData\Local\temp
2014-02-16 17:15 . 2014-02-16 17:15 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-02-15 11:31 . 2014-02-15 11:31 -------- d-----w- c:\users\Ivan\AppData\Local\Adobe
2014-02-15 05:56 . 2013-12-04 03:28 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{6D073193-3615-4CDC-BDB7-987E6CCB0753}\mpengine.dll
2014-02-13 18:28 . 2014-02-13 18:28 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2014-02-13 18:28 . 2013-04-04 13:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-02-13 18:27 . 2013-11-26 23:29 5693440 ----a-w- c:\windows\SysWow64\mstscax.dll
2014-02-13 18:27 . 2013-11-26 22:49 6573056 ----a-w- c:\windows\system32\mstscax.dll
2014-02-13 18:24 . 2014-02-15 11:34 -------- d-----w- C:\AdwCleaner
2014-02-13 11:40 . 2013-12-21 09:53 548864 ----a-w- c:\windows\system32\vbscript.dll
2014-02-13 11:39 . 2014-02-06 09:25 4244480 ----a-w- c:\windows\SysWow64\jscript9.dll
2014-02-13 11:39 . 2014-02-06 10:11 5768704 ----a-w- c:\windows\system32\jscript9.dll
2014-02-13 11:39 . 2013-12-24 23:09 1987584 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2014-02-13 11:39 . 2013-12-24 22:48 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2014-02-13 11:39 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2014-02-13 11:39 . 2013-11-22 22:48 3928064 ----a-w- c:\windows\system32\d2d1.dll
2014-02-03 14:04 . 2014-02-03 14:04 -------- d-sh--w- c:\users\Ivan\AppData\Roaming\Common
2014-02-03 14:04 . 2014-02-10 09:20 -------- d-----w- c:\users\Ivan\AppData\Roaming\DisplayFusion
2014-02-03 14:04 . 2014-02-03 14:04 -------- d-----w- c:\programdata\Binary Fortress Software
2014-02-03 13:49 . 2013-11-26 11:40 376768 ----a-w- c:\windows\system32\drivers\netio.sys
2014-02-03 12:52 . 2014-02-03 14:04 -------- d-----w- c:\users\Ivan\AppData\Roaming\Binary Fortress Software
2014-02-03 12:50 . 2014-02-03 14:07 -------- d-----w- c:\program files (x86)\DisplayFusion
2014-01-25 16:17 . 2014-01-25 16:17 -------- d-----w- c:\users\Ivan\AppData\Local\Foxit Reader
2014-01-23 04:54 . 2013-12-18 20:09 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-01-21 21:43 . 2014-01-21 21:43 -------- d-----w- c:\users\Public\Davar3
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-13 11:45 . 2012-09-12 15:13 88567024 ----a-w- c:\windows\system32\MRT.exe
2014-02-05 10:37 . 2012-10-19 05:25 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-02-05 10:37 . 2012-10-19 05:25 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-12-18 13:43 . 2013-12-18 13:43 18286416 ----a-w- c:\windows\system32\nvwgf2umx.dll
2013-12-18 13:43 . 2013-12-18 13:43 15855568 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2013-12-18 13:43 . 2011-06-13 00:00 1435504 ----a-w- c:\windows\system32\nvumdshimx.dll
2013-12-18 13:43 . 2011-06-13 00:00 1241376 ----a-w- c:\windows\SysWow64\nvumdshim.dll
2013-12-18 13:42 . 2013-12-18 13:42 9480328 ----a-w- c:\windows\SysWow64\nvopencl.dll
2013-12-18 13:42 . 2013-12-18 13:42 32544 ----a-w- c:\windows\system32\drivers\nvpciflt.sys
2013-12-18 13:42 . 2013-12-18 13:42 11374520 ----a-w- c:\windows\system32\nvopencl.dll
2013-12-18 13:42 . 2013-12-18 13:42 317472 ----a-w- c:\windows\system32\nvoglshim64.dll
2013-12-18 13:42 . 2013-12-18 13:42 30344480 ----a-w- c:\windows\system32\nvoglv64.dll
2013-12-18 13:42 . 2013-12-18 13:42 266984 ----a-w- c:\windows\SysWow64\nvoglshim32.dll
2013-12-18 13:42 . 2013-12-18 13:42 22933792 ----a-w- c:\windows\SysWow64\nvoglv32.dll
2013-12-18 13:42 . 2013-12-18 13:42 655136 ----a-w- c:\windows\system32\NvIFR64.dll
2013-12-18 13:42 . 2013-12-18 13:42 560416 ----a-w- c:\windows\SysWow64\NvIFR.dll
2013-12-18 13:42 . 2013-12-18 13:42 300320 ----a-w- c:\windows\system32\drivers\nvkflt.sys
2013-12-18 13:42 . 2013-12-18 13:42 168616 ----a-w- c:\windows\system32\nvinitx.dll
2013-12-18 13:42 . 2013-12-18 13:42 12572960 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2013-12-18 13:42 . 2011-06-13 00:00 141336 ----a-w- c:\windows\SysWow64\nvinit.dll
2013-12-18 13:42 . 2013-12-18 13:42 696096 ----a-w- c:\windows\system32\NvFBC64.dll
2013-12-18 13:42 . 2013-12-18 13:42 599840 ----a-w- c:\windows\SysWow64\NvFBC.dll
2013-12-18 13:42 . 2013-12-18 13:42 1511712 ----a-w- c:\windows\system32\nvdispgenco6433165.dll
2013-12-18 13:42 . 2013-12-18 13:42 1884448 ----a-w- c:\windows\system32\nvdispco6433165.dll
2013-12-18 13:42 . 2013-12-18 13:42 18199872 ----a-w- c:\windows\system32\nvd3dumx.dll
2013-12-18 13:42 . 2011-06-13 00:00 15212336 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2013-12-18 13:42 . 2013-12-18 13:42 9524088 ----a-w- c:\windows\SysWow64\nvcuda.dll
2013-12-18 13:42 . 2013-12-18 13:42 3131680 ----a-w- c:\windows\system32\nvcuvid.dll
2013-12-18 13:42 . 2013-12-18 13:42 3124512 ----a-w- c:\windows\system32\nvcuvenc.dll
2013-12-18 13:42 . 2013-12-18 13:42 2946848 ----a-w- c:\windows\SysWow64\nvcuvid.dll
2013-12-18 13:42 . 2013-12-18 13:42 2747168 ----a-w- c:\windows\SysWow64\nvcuvenc.dll
2013-12-18 13:42 . 2013-12-18 13:42 11426568 ----a-w- c:\windows\system32\nvcuda.dll
2013-12-18 13:42 . 2013-12-18 13:42 17560352 ----a-w- c:\windows\SysWow64\nvcompiler.dll
2013-12-18 13:42 . 2013-12-18 13:42 25257248 ----a-w- c:\windows\system32\nvcompiler.dll
2013-12-18 13:42 . 2011-06-13 00:00 3067560 ----a-w- c:\windows\system32\nvapi64.dll
2013-12-18 13:42 . 2011-06-13 00:00 2695200 ----a-w- c:\windows\SysWow64\nvapi.dll
2013-12-18 05:13 . 2010-11-21 03:27 270496 ------w- c:\windows\system32\MpSigStub.exe
2013-11-27 01:42 . 2014-01-15 07:15 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2013-11-27 01:42 . 2014-01-15 07:15 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2013-11-27 01:42 . 2014-01-15 07:15 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2013-11-27 01:42 . 2014-01-15 07:15 53248 ----a-w- c:\windows\system32\drivers\usbehci.sys
2013-11-27 01:42 . 2014-01-15 07:15 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2013-11-27 01:42 . 2014-01-15 07:15 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2013-11-27 01:42 . 2014-01-15 07:15 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
2013-11-26 10:32 . 2014-01-15 07:15 3156480 ----a-w- c:\windows\system32\win32k.sys
2013-11-23 18:26 . 2013-12-30 18:55 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-11-23 17:47 . 2013-12-30 18:55 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-11-19 05:27 . 2013-11-19 05:27 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-11-19 05:27 . 2013-11-19 05:27 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-11-19 05:27 . 2013-11-19 05:27 942592 ----a-w- c:\windows\system32\jsIntl.dll
2013-11-19 05:27 . 2013-11-19 05:27 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-11-19 05:27 . 2013-11-19 05:27 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-11-19 05:27 . 2013-11-19 05:27 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-11-19 05:27 . 2013-11-19 05:27 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-11-19 05:27 . 2013-11-19 05:27 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2013-11-19 05:27 . 2013-11-19 05:27 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-11-19 05:27 . 2013-11-19 05:27 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2013-11-19 05:27 . 2013-11-19 05:27 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-11-19 05:27 . 2013-11-19 05:27 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-11-19 05:27 . 2013-11-19 05:27 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-11-19 05:27 . 2013-11-19 05:27 34816 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-11-19 05:27 . 2013-11-19 05:27 337408 ----a-w- c:\windows\SysWow64\html.iec
2013-11-19 05:27 . 2013-11-19 05:27 247808 ----a-w- c:\windows\system32\msls31.dll
2013-11-19 05:27 . 2013-11-19 05:27 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-11-19 05:27 . 2013-11-19 05:27 235008 ----a-w- c:\windows\system32\elshyph.dll
2013-11-19 05:27 . 2013-11-19 05:27 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2013-11-19 05:27 . 2013-11-19 05:27 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-11-19 05:27 . 2013-11-19 05:27 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2013-11-19 05:27 . 2013-11-19 05:27 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2013-11-19 05:27 . 2013-11-19 05:27 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2013-11-19 05:27 . 2013-11-19 05:27 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-11-19 05:27 . 2013-11-19 05:27 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-11-19 05:27 . 2013-11-19 05:27 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-11-19 05:27 . 2013-11-19 05:27 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-11-19 05:27 . 2013-11-19 05:27 84992 ----a-w- c:\windows\system32\mshtmled.dll
2013-11-19 05:27 . 2013-11-19 05:27 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2013-11-19 05:27 . 2013-11-19 05:27 81408 ----a-w- c:\windows\system32\icardie.dll
2013-11-19 05:27 . 2013-11-19 05:27 774144 ----a-w- c:\windows\system32\jscript.dll
2013-11-19 05:27 . 2013-11-19 05:27 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-11-19 05:27 . 2013-11-19 05:27 62464 ----a-w- c:\windows\system32\pngfilt.dll
2013-11-19 05:27 . 2013-11-19 05:27 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2013-11-19 05:27 . 2013-11-19 05:27 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-11-19 05:27 . 2013-11-19 05:27 48128 ----a-w- c:\windows\system32\imgutil.dll
2013-11-19 05:27 . 2013-11-19 05:27 453120 ----a-w- c:\windows\system32\dxtmsft.dll
2013-11-19 05:27 . 2013-11-19 05:27 413696 ----a-w- c:\windows\system32\html.iec
2013-11-19 05:27 . 2013-11-19 05:27 40448 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2013-11-19 05:27 . 2013-11-19 05:27 30208 ----a-w- c:\windows\system32\licmgr10.dll
2013-11-19 05:27 . 2013-11-19 05:27 296960 ----a-w- c:\windows\system32\dxtrans.dll
2013-11-19 05:27 . 2013-11-19 05:27 263376 ----a-w- c:\windows\system32\iedkcs32.dll
2013-11-19 05:27 . 2013-11-19 05:27 243200 ----a-w- c:\windows\system32\webcheck.dll
2013-11-19 05:27 . 2013-11-19 05:27 235520 ----a-w- c:\windows\system32\url.dll
2013-11-19 05:27 . 2013-11-19 05:27 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-11-19 05:27 . 2013-11-19 05:27 147968 ----a-w- c:\windows\system32\occache.dll
2013-11-19 05:27 . 2013-11-19 05:27 143872 ----a-w- c:\windows\system32\wextract.exe
2013-11-19 05:27 . 2013-11-19 05:27 13824 ----a-w- c:\windows\system32\mshta.exe
2013-11-19 05:27 . 2013-11-19 05:27 135680 ----a-w- c:\windows\system32\iepeers.dll
2013-11-19 05:27 . 2013-11-19 05:27 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-11-19 05:27 . 2013-11-19 05:27 105984 ----a-w- c:\windows\system32\iesysprep.dll
2013-11-19 05:27 . 2013-11-19 05:27 101376 ----a-w- c:\windows\system32\inseng.dll
2013-11-19 05:26 . 2013-11-19 05:26 859648 ----a-w- c:\windows\system32\tdh.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sony PC Companion"="c:\program files (x86)\Sony\Sony PC Companion\PCCompanion.exe" [2013-10-31 449760]
"DAEMON Tools Lite"="d:\programy\DAEMON Tools Lite\DTLite.exe" [2013-03-14 3672640]
"DisplayFusion"="c:\program files (x86)\DisplayFusion\DisplayFusion.exe" [2013-11-27 7952224]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll c:\windows\SysWOW64\nvinit.dll c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AccuWeatherWidget]
2012-02-01 09:50 968048 ----a-w- c:\program files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dell Registration]
2010-08-23 18:43 3926528 ----a-w- c:\program files (x86)\System Registration\prodreg.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dell Webcam Central]
2010-08-19 23:06 487562 ----a-w- c:\program files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Desktop Disc Tool]
2010-11-17 15:35 514544 ----a-w- c:\program files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAStorIcon]
2010-11-06 04:54 283160 ----a-w- c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NUSB3MON]
2010-11-17 17:53 113288 ----a-w- c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray]
2010-11-25 10:33 240112 ----a-w- c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2013-07-02 08:16 254336 ----a-w- c:\program files (x86)\Common Files\Java\Java Update\jusched.exe
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [x]
R3 btmaudio;Intel Bluetooth Audio Service;c:\windows\system32\drivers\btmaud.sys;c:\windows\SYSNATIVE\drivers\btmaud.sys [x]
R3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys;c:\windows\SYSNATIVE\DRIVERS\btmaux.sys [x]
R3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys;c:\windows\SYSNATIVE\DRIVERS\btmhsf.sys [x]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x]
R3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys;c:\windows\SYSNATIVE\DRIVERS\iBtFltCoex.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 s1039bus;Sony Ericsson Device 1039 driver (WDM);c:\windows\system32\DRIVERS\s1039bus.sys;c:\windows\SYSNATIVE\DRIVERS\s1039bus.sys [x]
R3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1039mdfl.sys;c:\windows\SYSNATIVE\DRIVERS\s1039mdfl.sys [x]
R3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1039mdm.sys;c:\windows\SYSNATIVE\DRIVERS\s1039mdm.sys [x]
R3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1039mgmt.sys;c:\windows\SYSNATIVE\DRIVERS\s1039mgmt.sys [x]
R3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1039nd5.sys;c:\windows\SYSNATIVE\DRIVERS\s1039nd5.sys [x]
R3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1039obex.sys;c:\windows\SYSNATIVE\DRIVERS\s1039obex.sys [x]
R3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1039unic.sys;c:\windows\SYSNATIVE\DRIVERS\s1039unic.sys [x]
R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 NCFilter;Novell UNC Filter - Filter;c:\windows\system32\DRIVERS\NCFilter.sys;c:\windows\SYSNATIVE\DRIVERS\NCFilter.sys [x]
S0 NCRecognizer;Novell UNC Filter - Recognizer;c:\windows\system32\DRIVERS\NCRecognizer.sys;c:\windows\SYSNATIVE\DRIVERS\NCRecognizer.sys [x]
S0 NCUncFilter;Novell UNC Filter - UNC Filter;c:\windows\system32\DRIVERS\NCUncFilter.sys;c:\windows\SYSNATIVE\DRIVERS\NCUncFilter.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 nvkflt;nvkflt;c:\windows\system32\DRIVERS\nvkflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvkflt.sys [x]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe;c:\program files\IDT\WDM\AESTSr64.exe [x]
S2 Autodesk Content Service;Autodesk Content Service;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [x]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [x]
S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [x]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 DisplayFusionService;DisplayFusionService;c:\program files (x86)\DisplayFusion\DisplayFusionService.exe;c:\program files (x86)\DisplayFusion\DisplayFusionService.exe [x]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;d:\programy\NOD32\x86\ekrn.exe;d:\programy\NOD32\x86\ekrn.exe [x]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfpr.sys [x]
S2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 NCFSD;Novell Client File System Redirector;c:\program files\Novell\Client\XTier\Drivers\ncfsd.sys;c:\program files\Novell\Client\XTier\Drivers\ncfsd.sys [x]
S2 NCIOCTL;Novell Xplat IoCtl Driver;c:\program files\Novell\Client\XTier\Drivers\ncioctl.sys;c:\program files\Novell\Client\XTier\Drivers\ncioctl.sys [x]
S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 XTSvcMgr;Novell XTier Service Manager;c:\program files\Novell\Client\XTier\Services\XTSvcMgr.exe;c:\program files\Novell\Client\XTier\Services\XTSvcMgr.exe [x]
S3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [x]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys;c:\windows\SYSNATIVE\DRIVERS\CtClsFlt.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 wdkmd;Intel WiDi KMD;c:\windows\system32\DRIVERS\WDKMD.sys;c:\windows\SYSNATIVE\DRIVERS\WDKMD.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*Deregistered* - nciom
*Deregistered* - ncp
*Deregistered* - ncpl
*Deregistered* - niam
*Deregistered* - nipctl
*Deregistered* - nscm
*Deregistered* - nsns
*Deregistered* - nsvccost
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2011-04-12 609144]
"IntelTBRunOnce"="wscript.exe" [2013-10-12 168960]
"IntelWireless"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2010-12-17 1933584]
"DellStage"="c:\program files (x86)\Dell Stage\Dell Stage\stage_primary.exe" [2012-02-01 2195824]
"NWTRAY"="NWTRAY.EXE" [2012-07-13 38016]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-11-15 171064]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-11-15 399416]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-11-15 441912]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2011-09-08 1424896]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2010-11-03 10228224]
"egui"="d:\programy\NOD32\egui.exe" [2011-01-12 2918656]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll c:\windows\System32\nvinitx.dll c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
uInternet Settings,ProxyOverride = <local>
IE: E&xportovat do aplikace Microsoft Excel - d:\programy\MICROS~1\Office12\EXCEL.EXE/3000
Trusted Zone: dell.com
Trusted Zone: mojebanka.cz\*
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\sign
Trusted Zone: mojebanka.cz\www
Trusted Zone: mojeplatba.cz\www
Trusted Zone: mojebanka.cz\*
TCP: DhcpNameServer = 147.32.127.214 195.113.144.194
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
c:\program files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
c:\program files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
c:\program files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
c:\program files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
c:\program files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
.
**************************************************************************
.
Celkový čas: 2014-02-16 18:27:07 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-02-16 17:26
ComboFix2.txt 2014-02-16 11:07
.
Před spuštěním: Volných bajtů: 12 215 336 960
Po spuštění: Volných bajtů: 12 002 947 072
.
- - End Of File - - E7E6FE7894439B4149F14D4F7F5F5FC3
Nahoru
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43295
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, pomalé PC

Příspěvekod jaro3 » 17 úno 2014 10:25

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.



Vlož nový log z HJT + info o problémech.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
zenda
nováček
Příspěvky: 39
Registrován: srpen 13
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, pomalé PC

Příspěvekod zenda » 17 úno 2014 10:57

aswMBR

aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2014-02-17 10:52:48
-----------------------------
10:52:48.369 OS Version: Windows x64 6.1.7601 Service Pack 1
10:52:48.369 Number of processors: 8 586 0x2A07
10:52:48.369 ComputerName: IVAN-PC UserName: Ivan
10:52:49.071 Initialize success
10:52:55.225 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
10:52:55.240 Disk 0 Vendor: WDC_WD64 01.0 Size: 610480MB BusType: 3
10:52:55.350 Disk 0 MBR read successfully
10:52:55.350 Disk 0 MBR scan
10:52:55.350 Disk 0 Windows 7 default MBR code
10:52:55.365 Disk 0 Partition 1 00 DE Dell Utility MSDOS5.0 94 MB offset 16065
10:52:55.381 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 14999 MB offset 208896
10:52:55.381 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 51250 MB offset 30926848
10:52:55.396 Disk 0 Partition - 00 0F Extended LBA 544128 MB offset 135886848
10:52:55.428 Disk 0 Partition 4 00 07 HPFS/NTFS NTFS 51250 MB offset 135888896
10:52:55.428 Disk 0 Partition - 00 05 Extended 492877 MB offset 240848896
10:52:55.443 Disk 0 Partition 5 00 07 HPFS/NTFS NTFS 492876 MB offset 240850944
10:52:55.474 Disk 0 scanning C:\windows\system32\drivers
10:53:02.401 Service scanning
10:53:56.860 Modules scanning
10:53:56.860 Disk 0 trace - called modules:
10:53:56.876 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys iaStor.sys sptd.sys hal.dll
10:53:56.892 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004a7b790]
10:53:56.892 3 CLASSPNP.SYS[fffff880015d143f] -> nt!IofCallDriver -> [0xfffffa800481de40]
10:53:56.892 5 ACPI.sys[fffff880011a37a1] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8004821050]
10:53:56.892 Scan finished successfully
10:54:04.239 Disk 0 MBR has been saved successfully to "C:\Users\Ivan\Desktop\MBR.dat"
10:54:04.239 The log file has been saved successfully to "C:\Users\Ivan\Desktop\aswMBR.txt"


HJT

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:54:57, on 17.2.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16518)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
C:\Program Files (x86)\DisplayFusion\DisplayFusionHookAppWIN6032.exe
C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
D:\Programy\Opera\opera.exe
C:\Users\Ivan\Desktop\hijackthis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Programy\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [DisplayFusion] "C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe"
O4 - HKUS\S-1-5-21-1253719010-2860817106-3115264128-1000\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1253719010-2860817106-3115264128-1000\..\Run: [AVG-Secure-Search-Update_JUNE2013_TB] "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe" /PROMPT /CMPID=JUNE2013_TB (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1253719010-2860817106-3115264128-1000\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\Programy\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programy\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programy\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Programy\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.dell.com
O16 - DPF: {8CFCF42C-1C64-47D6-AEEC-F9D001832ED3} (DellSystem.Scanner) - http://xserv.dell.com/DellDriverScanner/DellSystem.CAB
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll C:\WINDOWS\SysWOW64\nvinit.dll C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Autodesk Content Service - Unknown owner - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: DisplayFusionService - Binary Fortress Software - C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - D:\Programy\NOD32\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - D:\Programy\NOD32\x86\ekrn.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: RoxMediaDB12OEM - Sonic Solutions - c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe
O23 - Service: Roxio Hard Drive Watcher 12 (RoxWatch12) - Sonic Solutions - c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.0 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Novell XTier Service Manager (XTSvcMgr) - Unknown owner - C:\Program Files (x86)\Novell\Client\XTier\Services\XTSvcMgr.exe (file missing)

--
End of file - 11342 bytes







Počítač je rychlejší, ale včera se mi stalo, že se spustil proces dllhost.exe a začal brát hrozně RAM. Když jsem počítač vypnul a zapnul tak už to bylo ok.
Nahoru
Uživatelský avatar
Orcus
člen Security týmu
Elite Level 10.5
Elite Level 10.5
Příspěvky: 10645
Registrován: duben 10
Bydliště: Okolo rostou 3 růže =o)
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, pomalé PC

Příspěvekod Orcus » 17 úno 2014 19:45

Definuj "hodně ram" - byla na víc jak 90%? Pamět je od toho, aby se používala. :smile:
Láska hřeje, ale uhlí je uhlí. :fire:


Log z HJT vkládejte do HJT sekce. Je-li moc dlouhý, rozděl jej do více zpráv.

Pár rad k bezpečnosti PC.

Po dobu mé nepřítomnosti mě zastupuje memphisto, jaro3 a Diallix

Pokud budete spokojeni , můžete podpořit naše fórum.
Nahoru
zenda
nováček
Příspěvky: 39
Registrován: srpen 13
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, pomalé PC

Příspěvekod zenda » 17 úno 2014 20:36

Když jsem chtěl otevřít složku Počítač, tak se nechtěla načíst, čekal jsem asi 2 minuty a pak jsem se koukal do procesů, protože dost hučeli větráky. Proces dllhost.exe měl 0.6 GB z celkových 4 GB a stále se navyšoval. Tento problém se mi stával již dříve (před rokem), jenže potom jsem to čistil a od té doby to nedělalo. Takže jsem počítač vypnul a zapnul a vše bylo ok. Přiznám se že nevím jestli by využil paměť na 90%, tak dlouho jsem ho nenechal.
Nahoru
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43295
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, pomalé PC

Příspěvekod jaro3 » 18 úno 2014 09:40

Odinstaluj:
AVG Secure Search

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

O4 - HKUS\S-1-5-21-1253719010-2860817106-3115264128-1000\..\Run: [AVG-Secure-Search-Update_JUNE2013_TB] "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe" /PROMPT /CMPID=JUNE2013_TB (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1253719010-2860817106-3115264128-1000\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')


Stáhni si z některého odkazu SystemLook
SystemLook (32-bit)
http://jpshortstuff.247fixes.com/SystemLook.exe

SystemLook (64-bit)
http://jpshortstuff.247fixes.com/SystemLook_x64.exe

a ulož si ho na plochu.

Poklepej na stažený SystemLook , zkopíruj do hlavního text. okna tento následující text:

Kód: Vybrat vše

:filefind
dllhost.exe.*

Klikni na Look ke startu skenu. Když program skončí objeví se v poznámkovém bloku zpráva skenu. Zkopíruj sem celý jeho obsah. Log se také nachází na ploše pod názvem SystemLook.txt.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
zenda
nováček
Příspěvky: 39
Registrován: srpen 13
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, pomalé PC

Příspěvekod zenda » 18 úno 2014 21:31

AVG Secure Search vůbec nainstalovaný nemám ani když jsem ho zkoušel hledat tak se nic nenašlo.

SystemLook


SystemLook 30.07.11 by jpshortstuff
Log created at 21:27 on 18/02/2014 by Ivan
Administrator - Elevation successful

========== filefind ==========

Searching for "dllhost.exe.*"
C:\WINDOWS\System32\dllhost.exe --a---- 9728 bytes [23:59 13/07/2009] [01:39 14/07/2009] A8EDB86FC2A4D6D1285E4C70384AC35A
C:\WINDOWS\SysWOW64\dllhost.exe --a---- 7168 bytes [23:43 13/07/2009] [01:14 14/07/2009] A63DC5C2EA944E6657203E0C8EDEAF61
C:\WINDOWS\winsxs\amd64_microsoft-windows-com-surrogate_31bf3856ad364e35_6.1.7600.16385_none_a018e05d0d33081d\dllhost.exe --a---- 9728 bytes [23:59 13/07/2009] [01:39 14/07/2009] A8EDB86FC2A4D6D1285E4C70384AC35A
C:\WINDOWS\winsxs\x86_microsoft-windows-com-surrogate_31bf3856ad364e35_6.1.7600.16385_none_43fa44d954d596e7\dllhost.exe --a---- 7168 bytes [23:43 13/07/2009] [01:14 14/07/2009] A63DC5C2EA944E6657203E0C8EDEAF61

-= EOF =-
Nahoru
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43295
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, pomalé PC

Příspěvekod jaro3 » 19 úno 2014 09:51

V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému

Toto otestuj na Virustotal
C:\WINDOWS\System32\dllhost.exe
C:\WINDOWS\SysWOW64\dllhost.exe

Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/43 , nebo 1/43. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.

Nebo na:
http://www.virscan.org/
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
zenda
nováček
Příspěvky: 39
Registrován: srpen 13
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, pomalé PC

Příspěvekod zenda » 19 úno 2014 21:49

Result tam bohužel nebyl, ale žádný vir to nenašlo bylo to 0/50.
Nahoru
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43295
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu, pomalé PC

Příspěvekod jaro3 » 20 úno 2014 10:09

Prosím stáhni příslušnou verzi programu pro Tvůj systém 32-bit/64-bit FarbarRecovery Scan Tool (FrSt)
32bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/81/
64bit.:
http://www.bleepingcomputer.com/downloa ... ool/dl/82/
a ulož jej na plochu. ,pak spusť FrSt.
Potvrď způsob užití.
Neměň žádné z výchozích nastavení a klikni na položku „Scan“ („Skenovat“) .Když je skenování dokončeno, ukážou se dva logy = FRST.txt a Addition.txt a uloží se na ploše.Prosím zkopíruj sem celý jejich obsah.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
Zamčeno

Zpět na “HiJackThis”

Kdo je online

Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 66 hostů