Komputer strasznie zwolnil w przeciagu kilku godzin

Dla specjalistów Bezpieczeństwo
#1

Czesc!

Czy moglby ktos sprawdzic moje logi bo mi komputer okrutnie zwolnil dzisiaj. Moze to zludzenie tylko ale wydaje sie jakby zwalnial coraz bardziej z kazda godzina…

 

Tutaj logi

 

OTL 

http://wklejto.pl/211758

 

FRST

http://wklejto.pl/211759

 

Addition

http://wklejto.pl/211760

 

Shortcut

http://wklejto.pl/211761

 

Dziekuje za jakakolwiek pomoc!

#2

Odinstaluj Spybot - Search & Destroy,WSE_Astromenda.Otwórz Notatnik i wklej:

Task: {D0EB5A88-4D21-42C3-8D7E-AEB4A2BC2A4E} - System32\Tasks\WSE_Astromenda = C:\Users\Atticus\AppData\Roaming\WSE_Astromenda\UpdateProc\UpdateTask.exe [2014-09-01] ()
Task: C:\Windows\Tasks\WSE_Astromenda.job = C:\Users\Atticus\AppData\Roaming\WSE_AS~1\UPDATE~1\UPDATE~1.EXE ==== ATTENTION
AlternateDataStreams: C:\Users\Atticus\AppData\Local\Temp:MNoVg9OMbWhgjApZB
HKU\S-1-5-21-1868328947-3643027639-2992795578-1001\...\Run: [BRS] = C:\Program Files\WSE_Astromenda\BRS\brs.exe [1072128 2014-09-01] ()
HKU\S-1-5-21-1868328947-3643027639-2992795578-1001\...\Run: [SpybotSD TeaTimer] = C:\Program Files\Spybot - Search Destroy\TeaTimer.exe [2144088 2009-01-27] (Safer Networking Limited)
HKU\S-1-5-21-1868328947-3643027639-2992795578-1001\...\RunOnce: [WSE_Astromenda] = wscript /E:vbscript /B "C:\Users\Atticus\AppData\Roaming\WSE_Astromenda\UpdateProc\bkup.dat"
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://astromenda.com/?f=1a=ast_ir_14_36_chcd=2XzuyEtN2Y1L1Qzu0CyEyEyCtCzy0B0BtA0D0AzzzytCtAyCtN0D0Tzu0SzyyByEtN1L2XzutAtFtDtFtCtDtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyEzyyDtCtA0C0FyEtG0C0ByCtDtGyBtB0AzytG0D0F0AyCtGtC0A0CtD0FyB0A0BtA0D0A0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCzyyD0AzytByBtAtGyCyD0BtCtGyEtDtB0CtG0AyC0FzytGtD0D0F0DtAtC0FyD0DzzyB0B2Qcr=647776902ir=
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://astromenda.com/results.php?f=4q={searchTerms}a=ast_ir_14_36_chcd=2XzuyEtN2Y1L1Qzu0CyEyEyCtCzy0B0BtA0D0AzzzytCtAyCtN0D0Tzu0SzyyByEtN1L2XzutAtFtDtFtCtDtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyEzyyDtCtA0C0FyEtG0C0ByCtDtGyBtB0AzytG0D0F0AyCtGtC0A0CtD0FyB0A0BtA0D0A0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCzyyD0AzytByBtAtGyCyD0BtCtGyEtDtB0CtG0AyC0FzytGtD0D0F0DtAtC0FyD0DzzyB0B2Qcr=647776902ir=
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://astromenda.com/results.php?f=4q={searchTerms}a=ast_ir_14_36_chcd=2XzuyEtN2Y1L1Qzu0CyEyEyCtCzy0B0BtA0D0AzzzytCtAyCtN0D0Tzu0SzyyByEtN1L2XzutAtFtDtFtCtDtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyEzyyDtCtA0C0FyEtG0C0ByCtDtGyBtB0AzytG0D0F0AyCtGtC0A0CtD0FyB0A0BtA0D0A0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCzyyD0AzytByBtAtGyCyD0BtCtGyEtDtB0CtG0AyC0FzytGtD0D0F0DtAtC0FyD0DzzyB0B2Qcr=647776902ir=
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://astromenda.com/results.php?f=4q={searchTerms}a=ast_ir_14_36_chcd=2XzuyEtN2Y1L1Qzu0CyEyEyCtCzy0B0BtA0D0AzzzytCtAyCtN0D0Tzu0SzyyByEtN1L2XzutAtFtDtFtCtDtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyEzyyDtCtA0C0FyEtG0C0ByCtDtGyBtB0AzytG0D0F0AyCtGtC0A0CtD0FyB0A0BtA0D0A0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCzyyD0AzytByBtAtGyCyD0BtCtGyEtDtB0CtG0AyC0FzytGtD0D0F0DtAtC0FyD0DzzyB0B2Qcr=647776902ir=
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://astromenda.com/results.php?f=4q={searchTerms}a=ast_ir_14_36_chcd=2XzuyEtN2Y1L1Qzu0CyEyEyCtCzy0B0BtA0D0AzzzytCtAyCtN0D0Tzu0SzyyByEtN1L2XzutAtFtDtFtCtDtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyEzyyDtCtA0C0FyEtG0C0ByCtDtGyBtB0AzytG0D0F0AyCtGtC0A0CtD0FyB0A0BtA0D0A0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCzyyD0AzytByBtAtGyCyD0BtCtGyEtDtB0CtG0AyC0FzytGtD0D0F0DtAtC0FyD0DzzyB0B2Qcr=647776902ir=
BHO: Spybot-SD IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search Destroy\SDHelper.dll (Safer Networking Limited)
R1 {5eeb83d0-96ea-4249-942c-beead6847053}Gw; C:\Windows\System32\drivers\{5eeb83d0-96ea-4249-942c-beead6847053}Gw.sys [52376 2014-08-30] (StdLib)
R1 {5eeb83d0-96ea-4249-942c-beead6847053}w; C:\Windows\System32\drivers\{5eeb83d0-96ea-4249-942c-beead6847053}w.sys [39064 2014-09-13] (StdLib)
2014-09-14 09:52 - 2014-09-14 10:16 - 00000000 ____ D () C:\ProgramData\Spybot - Search Destroy
2014-09-14 09:52 - 2014-09-14 09:52 - 00001220 _____ () C:\Users\Atticus\Desktop\Spybot - Search Destroy.lnk
2014-09-14 09:52 - 2014-09-14 09:52 - 00000000 ____ D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search Destroy
2014-09-14 09:52 - 2014-09-14 09:52 - 00000000 ____ D () C:\Program Files\Spybot - Search Destroy
2014-09-14 09:50 - 2014-09-14 09:51 - 16409960 _____ (Safer Networking Limited ) C:\Users\Atticus\Downloads\spybotsd162.exe
2014-09-13 18:34 - 2014-09-13 06:56 - 00039064 _____ (StdLib) C:\Windows\system32\Drivers\{5eeb83d0-96ea-4249-942c-beead6847053}w.sys
2014-09-07 08:43 - 2014-09-07 08:43 - 00000000 ____ D () C:\Users\Atticus\AppData\Local\Astromenda
2014-09-04 18:14 - 2014-09-04 18:14 - 00000000 ____ D () C:\Users\Atticus\AppData\Roaming\Astromenda
2014-09-01 11:45 - 2014-08-30 23:13 - 00052376 _____ (StdLib) C:\Windows\system32\Drivers\{5eeb83d0-96ea-4249-942c-beead6847053}Gw.sys
2014-09-01 11:43 - 2014-09-27 09:43 - 00000314 _____ () C:\Windows\Tasks\WSE_Astromenda.job
2014-09-01 11:43 - 2014-09-01 11:43 - 00000000 ____ D () C:\Users\Atticus\AppData\Roaming\WSE_Astromenda
2014-09-01 11:43 - 2014-09-01 11:43 - 00000000 ____ D () C:\Program Files\WSE_Astromenda
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.