svchost.exe - zatěžuje procesor téměř na 100% + HJT Vyřešeno

[Damned]

Ha!! Tušil jsem, že tam bude, šmejd jeden!

Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Custom Scans/Fixes do okénka vlož následující text, zobrazený zeleně:

Kód: Vybrat vše

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "SluneÄŤnice"
FF - prefs.js..keyword.URL: "http://search.sweetim.com/search.asp?src=2&q="
[2009.11.23 19:13:28 | 000,002,059 | ---- | M] () -- C:\Documents and Settings\Wally\Data aplikací\Mozilla\Firefox\Profiles\9zeciz8h.default\searchplugins\daemon-search.xml
[2010.03.13 23:30:46 | 000,000,944 | ---- | M] () -- C:\Documents and Settings\Wally\Data aplikací\Mozilla\Firefox\Profiles\9zeciz8h.default\searchplugins\icqplugin.xml
[2009.01.26 15:45:55 | 000,003,915 | ---- | M] () -- C:\Documents and Settings\Wally\Data aplikací\Mozilla\Firefox\Profiles\9zeciz8h.default\searchplugins\sweetim.xml

:Files
C:\WINDOWS\*.tmp
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\system32\*.tmp.dll
C:\WINDOWS\system32\SET*.tmp
C:\Recycler
C:\$RECYCLE.BIN
C:\Documents and Settings\NetworkService\Data aplikací\rbuwzv.dat
C:\Windows\tasks\SA.DAT

:Reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

:Commands
[purity]
[emptytemp]
[emptyflash]
[start explorer]
[Reboot]


Poté klikni nahoře na Run Fix. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.

[Reklama]

[Wally.]

All processes killed
========== OTL ==========
No active process named explorer.exe was found!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Prefs.js: "ICQ Search" removed from browser.search.defaultenginename
Prefs.js: "SluneÄŤnice" removed from browser.search.selectedEngine
Prefs.js: "http://search.sweetim.com/search.asp?src=2&q=" removed from keyword.URL
C:\Documents and Settings\Wally\Data aplikací\Mozilla\Firefox\Profiles\9zeciz8h.default\searchplugins\daemon-search.xml moved successfully.
C:\Documents and Settings\Wally\Data aplikací\Mozilla\Firefox\Profiles\9zeciz8h.default\searchplugins\icqplugin.xml moved successfully.
C:\Documents and Settings\Wally\Data aplikací\Mozilla\Firefox\Profiles\9zeciz8h.default\searchplugins\sweetim.xml moved successfully.
========== FILES ==========
C:\WINDOWS\SET3.tmp moved successfully.
C:\WINDOWS\SET4.tmp moved successfully.
C:\WINDOWS\SET8.tmp moved successfully.
C:\WINDOWS\System32\CONFIG.TMP moved successfully.
File\Folder C:\WINDOWS\system32\*.tmp.dll not found.
File\Folder C:\WINDOWS\system32\SET*.tmp not found.
File\Folder C:\Recycler not found.
File\Folder C:\$RECYCLE.BIN not found.
C:\Documents and Settings\NetworkService\Data aplikací\rbuwzv.dat moved successfully.
C:\Windows\tasks\SA.DAT moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus\ deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Wally
->Temp folder emptied: 27877 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->FireFox cache emptied: 47889718 bytes
->Flash cache emptied: 49275 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 46,00 mb


[EMPTYFLASH]

User: All Users

User: Default User

User: LocalService

User: NetworkService

User: Wally
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.1.37.1 log created on 03142010_204901

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

[Wally.]

a mimochodem mám vyřídit obdiv od mé přítelkyně, která cituji "se klaní před tvým uměním, inteligencí, bystrostí a intelektem"

[Damned]

Ať to nepřehání, nebo jí chytnou záda

1. Vypni si Body obnovení
2. Smaž složku C:\_OTL
3. Vysyp Košík
4. Zapni si Body obnovení.

5.Stáhni si SystemLook nebo: SystemLook na Plochu.
Spusť ho a do políčka vlož tento text:

Kód: Vybrat vše

:filefind
*rbuwzv*

:regfind
rbuwzv



A zmáčkni "Look". Po kontrole se ti na Ploše objeví SystemLook.txt. Zkopíruj ho sem.

[Wally.]

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 21:22 on 14/03/2010 by Wally (Administrator - Elevation successful)

========== filefind ==========

Searching for "*rbuwzv*"
No files found.

========== regfind ==========

Searching for "rbuwzv"
No data found.

-=End Of File=-

[Damned]

Stáhni si ToolsCleaner2 (by de A.Rothstein & Dj Quiou) na Plochu a spusť ho.

Klikni na Pt. Restauration (obnova) a poté na OK.
Klikni na Corbeille (koš) a poté na OK.
Klikni na Fichiers temp (temp složky) a poté na OK.
Klikni na Recherche (hledání) a nech Cleaner pracovat. Může se během čištění zastavit , ale nech ho pokračovat.
Když program skončí , klikni na Suppression (odstranění) a odstraň nalezené.
Zavři a smaž program.

Pozdrav přítelkyni.

Kdyby se něco zase objevilo, tak se zastav.
Označ topic za vyřešený (zelená fajfka) a měj se.

[Wally.]

všechno uděláno

vzkaz jsem vyřídil

Díky moc...