Remciol
Nowy
Liczba postów: 7
|
Komputer włącza się 10-20 minut.
Witam, mam komputer od 2 lat, od jakiegoś roku mam problem z rozruchem komputera. Gdy go włączam wszystkie procesy związane z włączaniem przebiegają sprawnie, następnie bardzo długo jest napis 'Zapraszamy' (5 minut), następnie pojawia się czarny ekran, tak przez 5 minut, a potem przechodzi do pulpitu, i zanim mi się pulpit załaduje to mija kolejne 5 minut, łącznie około 20tu minut. Nie wiem czym to jest spowodowane.
Specyfikacja mojego komputera:
Procesor: AMD Phenom II X4 965 3,40 Ghz
Ram: 8 GB
System 64 bitowy
Gdzieś na forum przeczytałem żeby zeskanować komputer programem RSIT w celu uzyskania informacji, log ten przedstawia się następująco:
Kod:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Remik at 2015-03-24 13: 16: 25
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 9 GB (13%) free of 70 GB
Total RAM: 8154 MB (71% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13: 16: 29, on 2015-03-24
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal
Running processes:
C: \Program Files\AVAST Software\Avast\AvastUI.exe
C: \Program Files (x86)\Google\Chrome\Application\chrome.exe
C: \Program Files (x86)\Google\Chrome\Application\chrome.exe
C: \Program Files (x86)\Google\Chrome\Application\chrome.exe
C: \Program Files (x86)\Google\Chrome\Application\chrome.exe
C: \Program Files (x86)\Google\Chrome\Application\chrome.exe
C: \Program Files (x86)\Google\Chrome\Application\chrome.exe
C: \Program Files (x86)\Google\Chrome\Application\chrome.exe
C: \Program Files (x86)\Google\Chrome\Application\chrome.exe
D: \Pobieranie z Chrome\RSIT.exe
C: \Program Files (x86)\trend micro\Remik.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about: blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http: //go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about: blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about: blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http: //isearch.omiga-plus.com/web/?type=ds&ts=1419445834&from=cor&uid=WDCXWD5002AALX-00J37A0_WD-WMAYUL16806268062&q={searchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http: //isearch.omiga-plus.com/web/?type=ds&ts=1419445834&from=cor&uid=WDCXWD5002AALX-00J37A0_WD-WMAYUL16806268062&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about: blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C: \Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - (no file)
F2 - REG: system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C: \Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C: \PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C: \Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C: \Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocnik logowania za pomocą konta Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C: \Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C: \PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C: \Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C: \Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "C: \Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C: \Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKLM\..\RunOnce: [SymInstallStub] C: \Windows\SysWOW64\Adobe\Shockwave 12\SymInstallStub.exe /partnerid=adobe /productlist=nss /staging=false /delay=5 /launchedby=3
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C: \Windows\System32\mctadmin.exe (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C: \Windows\System32\mctadmin.exe (User 'USŁUGA SIECIOWA')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res: //C: \Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res: //D: \PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Wyślij &do programu OneNote - res: //D: \PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C: \Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C: \Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C: \Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C: \Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c: \program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c: \program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O15 - Trusted Zone: http: //*.aeriagames.com
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http: //fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C: \PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C: \Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C: \Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C: \Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C: \Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C: \Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C: \Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Autodesk Content Service - Autodesk, Inc. - C: \Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: avast! Antivirus - AVAST Software - C: \Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C: \Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C: \Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C: \Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Usługa Google Update (gupdate) (gupdate) - Google Inc. - C: \Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Usługa Google Update (gupdatem) (gupdatem) - Google Inc. - C: \Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C: \Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C: \Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C: \Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C: \Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C: \Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C: \Windows\system32\lsass.exe (file missing)
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C: \Windows\system32\GameMon.des.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C: \Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C: \Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C: \Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C: \Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C: \Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C: \Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C: \Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C: \Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C: \Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: UI Assistant Service - Unknown owner - C: \Program Files (x86)\blueconnect\AssistantServices.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C: \Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Update Faster Light - Unknown owner - C: \Program Files (x86)\Faster Light\updateFasterLight.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C: \Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C: \Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C: \Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C: \Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C: \Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C: \Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10743 bytes
======Scheduled tasks folder======
C: \Windows\tasks\avast! Emergency Update.job - C: \Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C: \Windows\tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job - C: \Windows\TEMP\{84A298C5-02DA-4EC7-8033-C230F3CCD2AD}.exe --uninstall=1
C: \Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job - C: \Windows\TEMP\{C8FD8911-23EE-45D2-BED5-F458EDFFEBFD}.exe --uninstall=1
C: \Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3955949626-2034052818-4075005931-1000Core.job - C: \Users\Remik\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
C: \Windows\tasks\GoogleUpdateTaskMachineCore1cf8e0bc175db89.job - C: \Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C: \Windows\tasks\GoogleUpdateTaskMachineCore1cfed9721f4610b.job - C: \Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C: \Windows\tasks\GoogleUpdateTaskMachineCore1cfff394434aaa.job - C: \Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C: \Windows\tasks\GoogleUpdateTaskMachineCore1d040b46633b925.job - C: \Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C: \Windows\tasks\GoogleUpdateTaskMachineUA.job - C: \Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C: \Windows\tasks\MegaCloud Backup.job - C: \Users\Remik\AppData\Roaming\MegaCloudBackup\MegaCloudBackup.exe /scheduler
C: \Windows\tasks\Norton Product Installer.job - C: \Windows\SysWOW64\Adobe\Shockwave 12\SymInstallStub.exe /partnerid=adobe /productlist=nss /staging=false /delay=0 /launchedby=2
C: \Windows\tasks\Norton Product InstallerIdle.job - C: \Windows\SysWOW64\Adobe\Shockwave 12\SymInstallStub.exe /partnerid=adobe /productlist=nss /staging=false /delay=0 /launchedby=4
C: \Windows\tasks\Opera N.job - C: \Program Files (x86)\Opera\launcher.exe
C: \Windows\tasks\ROC_JAN2013_TB_rmv.job - C: \Program Files (x86)\AVG Secure Search\PostInstall\ROC.exe --uninstall=1
C: \Windows\tasks\RunOW.job - C: \Program Files (x86)\Overwolf\OverwolfLauncher.exe
=========Mozilla firefox=========
ProfilePath - C: \Users\Remik\AppData\Roaming\Mozilla\Firefox\Profiles\edcpdnl2.default
"wrc@avast.com"=C: \Program Files\AVAST Software\Avast\WebRep\FF
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.189 Plugin
"Path"=C: \Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C: \Windows\SysWOW64\Adobe\Director\np32dsw_1212152.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C: \Program Files (x86)\Google\Picasa3\npPicasa3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.7.2]
"Description"=Java™ Deployment Toolkit
"Path"=C: \Windows\SysWOW64\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C: \Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C: \PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C: \PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C: \Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@ncsoft.com/Plugin]
"Description"=NCSOFT login launcher module for FireFox and Chrome
"Path"=C: \Program Files (x86)\plaync\NCPlugin\npncllm3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C: \Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C: \Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=D: \Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll
C: \Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
C: \Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C: \Program Files (x86)\Mozilla Firefox\searchplugins\
allegro-pl.xml
fbc-pl.xml
google.xml
merlin-pl.xml
pwn-pl.xml
wikipedia-pl.xml
wp-pl.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C: \Pro [2013-09-02 6583664]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C: \PRO [2013-09-02 6583664]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C: \Pro [2013-09-02 6583664]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C: \Pro [2013-09-02 6583664]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocnik logowania za pomocą konta Microsoft - C: \Pro [2013-09-02 6583664]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C: \PRO [2013-09-02 6583664]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C: \Pro [2013-09-02 6583664]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C: \Pro [2013-09-02 6583664]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast"=C: \Pro [2013-09-02 6583664]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C: \Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SymInstallStub"=C: \Windows\SysWOW64\Adobe\Shockwave 12\SymInstallStub.exe [2014-06-24 358752]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C: \PRO [2013-09-02 6583664]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoRecentDocsNetHood"=1
"NoDriveTypeAutoRun"=145
""=
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"msacm.vorbis"=vorbis.acm
"VIDC.FPS1"=frapsvid.dll
======File associations======
.js - edit - C: \Windows\System32\Notepad.exe %1
.js - open - C: \Windows\System32\WScript.exe "%1" %*
.scr - open - C: \Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -
======List of files/folders created in the last 1 month======
2015-03-24 13: 16: 26 ----D---- C: \Program Files (x86)\trend micro
2015-03-24 13: 16: 25 ----D---- C: \rsit
2015-03-24 11: 47: 26 ----ASH---- C: \pagefile.sys
2015-03-24 01: 21: 18 ----SHD---- C: \Config.Msi
2015-03-18 20: 26: 30 ----D---- C: \Users\Remik\AppData\Roaming\Dropbox
2015-03-17 08: 58: 23 ----D---- C: \Users\Remik\AppData\Roaming\Just Aion Launcher
2015-02-25 21: 27: 39 ----D---- C: \Users\Remik\AppData\Roaming\OpenOffice
======List of files/folders modified in the last 1 month======
2015-03-24 13: 16: 28 ----D---- C: \Windows\Temp
2015-03-24 13: 16: 26 ----RD---- C: \Program Files (x86)
2015-03-24 13: 15: 07 ----D---- C: \Windows\pss
2015-03-24 12: 18: 30 ----D---- C: \Users\Remik\AppData\Roaming\Curse Client
2015-03-24 11: 49: 42 ----SHD---- C: \System Volume Information
2015-03-24 11: 47: 19 ----D---- C: \Windows\SysWOW64
2015-03-24 11: 47: 19 ----D---- C: \Windows\System32
2015-03-24 01: 47: 37 ----D---- C: \lisa
2015-03-24 01: 47: 19 ----D---- C: \Users\Remik\AppData\Roaming\uTorrent
2015-03-24 01: 36: 12 ----D---- C: \Windows\Tasks
2015-03-24 01: 35: 44 ----D---- C: \Windows\winsxs
2015-03-24 01: 35: 08 ----D---- C: \Windows\inf
2015-03-24 01: 30: 06 ----HD---- C: \Program Files (x86)\InstallShield Installation Information
2015-03-24 01: 29: 23 ----SHD---- C: \Windows\Installer
2015-03-24 01: 29: 23 ----HD---- C: \ProgramData
2015-03-24 01: 29: 06 ----RD---- C: \Program Files
2015-03-24 01: 26: 57 ----RSD---- C: \Windows\assembly
2015-03-24 01: 25: 05 ----D---- C: \Program Files (x86)\Google
2015-03-24 01: 23: 19 ----D---- C: \Program Files (x86)\LooksBuilder
2015-03-24 01: 22: 25 ----D---- C: \Program Files (x86)\GameforgeLive
2015-03-24 01: 21: 26 ----D---- C: \ProgramData\Apple
2015-03-24 01: 21: 26 ----D---- C: \Program Files (x86)\Common Files\Apple
2015-03-24 01: 20: 42 ----D---- C: \ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-03-24 01: 19: 38 ----D---- C: \Program Files (x86)\Common Files\Adobe
2015-03-24 01: 13: 34 ----D---- C: \ProgramData\Samsung
2015-03-24 01: 13: 18 ----D---- C: \Windows
2015-03-24 01: 07: 26 ----D---- C: \Windows\Help
2015-03-21 20: 06: 55 ----D---- C: \Program Files (x86)\Battle.net
2015-03-20 22: 19: 30 ----D---- C: \Windows\Minidump
2015-02-26 17: 17: 42 ----SD---- C: \Users\Remik\AppData\Roaming\Microsoft
2015-02-25 21: 25: 44 ----RSD---- C: \Windows\Fonts
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 amd_sata;amd_sata; C: \Windows\system32\DRIVERS\amd_sata.sys []
R0 amd_xata;amd_xata; C: \Windows\system32\DRIVERS\amd_xata.sys []
R0 aswRvrt;aswRvrt; C: \Windows\SysWOW64\drivers\aswRvrt.sys []
R0 aswVmm;aswVmm; C: \Windows\SysWOW64\drivers\aswVmm.sys []
R0 JRAID;JRAID; C: \Windows\system32\DRIVERS\jraid.sys []
R0 pciide;pciide; C: \Windows\system32\drivers\pciide.sys []
R0 rdyboost;ReadyBoost; C: \Windows\System32\drivers\rdyboost.sys []
R0 sptd;sptd; C: \Windows\System32\Drivers\sptd.sys []
R1 aswRdr;aswRdr; C: \Windows\System32\Drivers\aswrdr2.sys []
R1 aswSnx;aswSnx; C: \Windows\SysWOW64\drivers\aswSnx.sys []
R1 aswSP;aswSP; C: \Windows\SysWOW64\drivers\aswSP.sys []
R1 aswTdi;avast! Network Shield Support; C: \Windows\SysWOW64\drivers\aswTdi.sys []
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C: \Windows\system32\drivers\csc.sys []
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C: \Windows\system32\DRIVERS\dtsoftbus01.sys []
R1 vwififlt;Virtual WiFi Filter Driver; C: \Windows\system32\DRIVERS\vwififlt.sys []
R2 AODDriver4.1;AODDriver4.1; \?\C: \Pro [2013-09-02 6583664]
R2 aswFsBlk;aswFsBlk; C: \Windows\SysWOW64\drivers\aswFsBlk.sys []
R2 aswMonFlt;aswMonFlt; \?\C: \Windows\system32\drivers\aswMonFlt.sys []
R3 amdiox64;AMD IO Driver; C: \Windows\system32\DRIVERS\amdiox64.sys []
R3 amdkmdag;amdkmdag; C: \Windows\system32\DRIVERS\atikmdag.sys []
R3 amdkmdap;amdkmdap; C: \Windows\system32\DRIVERS\atikmpag.sys []
R3 asmthub3;ASMedia USB3 Hub Service; C: \Windows\system32\DRIVERS\asmthub3.sys []
R3 asmtxhci;ASMEDIA XHCI Service; C: \Windows\system32\DRIVERS\asmtxhci.sys []
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C: \Windows\system32\drivers\AtihdW76.sys []
R3 hamachi;Hamachi Network Interface; C: \Windows\system32\DRIVERS\hamachi.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C: \Windows\system32\drivers\RTKVHD64.sys []
R3 RTL8167;Realtek 8167 NT Driver; C: \Windows\system32\DRIVERS\Rt64win7.sys []
S3 1394hub;1394 Enabled Hub; C: \Windows\System32\svchost.exe [2009-07-14 20992]
S3 ALSysIO;ALSysIO; \?\C: \Users\Remik\AppData\Local\Temp\ALSysIO64.sys []
S3 dk;dk; \?\D: \AeriaGames\DKOnline\avital\dkol64.sys []
S3 dmvsc;dmvsc; C: \Windows\system32\drivers\dmvsc.sys []
S3 EagleX64;EagleX64; \?\C: \Windows\system32\drivers\EagleX64.sys []
S3 massfilter;ZTE Mass Storage Filter Driver; C: \Windows\system32\drivers\massfilter.sys []
S3 netr7364;Sterownik karty RT73 USB Wireless LAN dla systemu Vista; C: \Windows\system32\DRIVERS\netr7364.sys []
S3 NLNdisMP;NLNdisMP; C: \Windows\system32\DRIVERS\nlndis.sys []
S3 NLNdisPT;NetLimiter Ndis Protocol Service; C: \Windows\system32\DRIVERS\nlndis.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C: \Windows\System32\drivers\rdpdr.sys []
S3 s3cap;s3cap; C: \Windows\system32\drivers\vms3cap.sys []
S3 slb;slb; \?\D: \AeriaGames\ScarletBlade\avital\scarlb64.sys []
S3 storvsc;storvsc; C: \Windows\system32\drivers\storvsc.sys []
S3 TsUsbFlt;TsUsbFlt; C: \Windows\system32\drivers\tsusbflt.sys []
S3 TsUsbGD;Remote Desktop Generic USB Device; C: \Windows\system32\drivers\TsUsbGD.sys []
S3 usb_rndisx;Karta USB RNDIS; C: \Windows\system32\DRIVERS\usb8023x.sys []
S3 vmbus;vmbus; C: \Windows\system32\drivers\vmbus.sys []
S3 VMBusHID;VMBusHID; C: \Windows\system32\drivers\VMBusHID.sys []
S3 WinUsb;SAMSUNG Android USB Driver; C: \Windows\system32\DRIVERS\WinUsb.sys []
S3 ZTEusbmdm6k;ZTE Proprietary USB Driver; C: \Windows\system32\DRIVERS\ZTEusbmdm6k.sys []
S3 ZTEusbnmea;ZTE NMEA Port; C: \Windows\system32\DRIVERS\ZTEusbnmea.sys []
S3 ZTEusbser6k;ZTE Diagnostic Port; C: \Windows\system32\DRIVERS\ZTEusbser6k.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AMD External Events Utility;AMD External Events Utility; C: \Windows\system32\atiesrxx.exe []
R2 AMD FUEL Service;AMD FUEL Service; C: \Pro [2013-09-02 6583664]
R2 Autodesk Content Service;Autodesk Content Service; C: \Pro [2013-09-02 6583664]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C: \Windows\System32\svchost.exe [2009-07-14 20992]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C: \Pro [2013-09-02 6583664]
R2 LMIGuardianSvc;LMIGuardianSvc; C: \Pro [2013-09-02 6583664]
R2 PnkBstrA;PnkBstrA; C: \Windows\system32\PnkBstrA.exe [2013-01-31 76888]
R2 UI Assistant Service;UI Assistant Service; C: \Pro [2013-09-02 6583664]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C: \Pro [2013-09-02 6583664]
R3 osppsvc;Office Software Protection Platform; C: \Pro [2013-09-02 6583664]
S2 Apple Mobile Device;Apple Mobile Device; C: \Pro [2013-09-02 6583664]
S2 avast! Antivirus;avast! Antivirus; C: \Pro [2013-09-02 6583664]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C: \Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C: \Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Usługa Google Update (gupdate); C: \Pro [2013-09-02 6583664]
S2 SkypeUpdate;Skype Updater; C: \Pro [2013-09-02 6583664]
S2 Update Faster Light;Update Faster Light; C: \Pro [2013-09-02 6583664]
S3 AppMgmt;@appmgmts.dll,-3250; C: \Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;„Usługa stanu ASP.NET; C: \Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C: \Pro [2013-09-02 6583664]
S3 gupdatem;Usługa Google Update (gupdatem); C: \Pro [2013-09-02 6583664]
S3 gusvc;Google Updater Service; C: \Pro [2013-09-02 6583664]
S3 IDriverT;InstallDriver Table Manager; C: \Pro [2013-09-02 6583664]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; D: \Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 51456888]
S3 npggsvc;nProtect GameGuard Service; C: \Windows\system32\GameMon.des [2013-10-30 5284208]
S3 ose64;Office 64 Source Engine; C: \Pro [2013-09-02 6583664]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C: \Windows\System32\svchost.exe [2009-07-14 20992]
S3 Steam Client Service;Steam Client Service; C: \Pro [2013-09-02 6583664]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C: \Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C: \Windows\System32\svchost.exe [2009-07-14 20992]
S4 NetMsmqActivator;@C: \Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C: \Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C: \Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C: \Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C: \Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C: \Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 WindowsMangerProtect;WindowsMangerProtect Service; C: \Pro [2013-09-02 6583664]
-----------------EOF-----------------
Przeprowadziłem skan programem Malwarebytes, wykryło mi 250 plików które usunąłem. Nie wiem czy to ma znaczenie, ale średnio raz na miesiąc mam blue screena, czasem częściej, czasem rzadziej. Generalnie na kompie mam porządek, nie mam zawalonych dysków. Proszę o pomoc!
|
Post: #1
