Laptop bardzo zwolnił

Dla specjalistów Bezpieczeństwo
#1

Witam, komputer od dwoch dni zwolnil i to konkretnie, po wlaczeniu musze odczekac okolo 5-6 minut zanim cokolwiek  zrobie. Bardzo prosze o sprawdzenie logow i pomoc.

 

http://www.wklej.org/id/1527444/

 

FRST: http://www.wklej.org/id/1527566/

 

Addition: http://www.wklej.org/id/1527574/

 

Wklejone:)

 

Dodam rowniez ze zaczyna sie scinac na okolo 30sek co jakis czas.

#2

Nowe logi-http://forum.dobreprogramy.pl/nowy-log-obowi%C4%85zkowy-farbar-recovery-scan-tool-t478727/

#3

Pobierz i uruchom AdwCleaner https://toolslib.net/downloads/finish/1/ Kliknij Szukaj i później Usuń.Otwórz Notatnik i wklej:

HKU\S-1-5-21-349099443-1392178443-2378836476-1000\...\MountPoints2: F - F:\autorun.exe
HKU\S-1-5-21-349099443-1392178443-2378836476-1000\...\MountPoints2: G - G:\CDCheck.exe
HKU\S-1-5-21-349099443-1392178443-2378836476-1000\...\MountPoints2: H - H:\cdstart.exe
HKU\S-1-5-21-349099443-1392178443-2378836476-1000\...\MountPoints2: {28ac00f9-3cdf-11e1-a60b-00235a817462} - F:\AutoRun.exe
HKU\S-1-5-21-349099443-1392178443-2378836476-1000\...\MountPoints2: {38478fa5-3c7a-11e1-aa8b-00235a817462} - F:\AutoRun.exe
HKU\S-1-5-21-349099443-1392178443-2378836476-1000\...\MountPoints2: {93538f40-d955-11e1-96a7-806e6f6e6963} - F:\autorun.exe
HKU\S-1-5-21-349099443-1392178443-2378836476-1000\...\MountPoints2: {9cbe42a9-3c7b-11e1-92d5-00235a817462} - F:\AutoRun.exe
HKU\S-1-5-21-349099443-1392178443-2378836476-1000\...\MountPoints2: {b53706c0-ae29-11e1-ab64-806e6f6e6963} - F:\_AUTORUN\AUTORUN.EXE
ShellIconOverlayIdentifiers: 00avast - {472083B0-C522-11CF-8763-00608CC02F24} = No File
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=dsts=1408302803from=smtuid=ST9160821AS_5MA6DPVEXXXX5MA6DPVEq={searchTerms}
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - Backup.Old.DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5}
SearchScopes: HKLM - {692691F4-5156-927F-54C5-73A49372A3AB} URL = http://search.certified-toolbar.com?si=41460bs=truetid=592q={searchTerms}
SearchScopes: HKLM - 䕻䅅㈶ㅆⵂ㍅䐱㐭㡄ⵅ㘸㝃ㄭ㙅䘵䌲䈴㌹紵 URL = http://search.toggle.com/?lang=plq={searchTerms}
SearchScopes: HKCU - DefaultScope {652B3000-3215-4AEC-98DB-DCE95075D216} URL = http://search.yahoo.com/search?fr=chr-greentree_ieei=utf-8ilc=12type=402027p={searchTerms}
SearchScopes: HKCU - Backup.Old.DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://search.v9.com/web/?q={searchTerms}
SearchScopes: HKCU - {08D84BD1-FA41-4317-99C2-1273FF4BF46A} URL = http://isearch.avg.com/search?cid={6E2A6ECA-75C2-4948-9E0C-2A47247424BA}mid=db429b97d60747d0a675d16a1c659d91-2fe8a624e11da41d5d3eea22817e1b9cea8cdd0elang=plds=xn011pr=sad=2012-11-24 10:32:44v=14.2.0.1pid=avgsg=sap=dspq={searchTerms}
SearchScopes: HKCU - {509E9502-F086-4B7C-A6D9-CF680B7F1493} URL = http://websearch.ask.com/redirect?client=ietb=ORJo=src=kwq={searchTerms}locale=apn_ptnrs=U3apn_dtid=OSJ000YYPLapn_uid=BDCB743D-4C95-4803-9D95-BA0B5D72939Bapn_sauid=B2CBA04E-6787-4793-8A90-5A7E37CBF1CA
SearchScopes: HKCU - {652B3000-3215-4AEC-98DB-DCE95075D216} URL = http://search.yahoo.com/search?fr=chr-greentree_ieei=utf-8ilc=12type=402027p={searchTerms}
SearchScopes: HKCU - {692691F4-5156-927F-54C5-73A49372A3AB} URL = https://isearch.avg.com/search?cid={A3019B4E-90BD-4279-BB71-56FFF12FA684}mid=db429b97d60747d0a675d16a1c659d91-2fe8a624e11da41d5d3eea22817e1b9cea8cdd0elang=plds=xn011pr=sad=2012-09-23 11:54:07v=13.0.0.7sap=dspq={searchTerms}
SearchScopes: HKCU - 䕻䅅㈶ㅆⵂ㍅䐱㐭㡄ⵅ㘸㝃ㄭ㙅䘵䌲䈴㌹紵 URL =
CHR HKLM\...\Chrome\Extension: [baijaldhbkjdpemhknoamamblpidgafh] - C:\ProgramData\DownloadnSave\baijaldhbkjdpemhknoamamblpidgafh.crx []
CHR HKLM\...\Chrome\Extension: [bbgfaefccdalpfjkbahchnddjkjlljmi] - C:\ProgramData\Bcool\bbgfaefccdalpfjkbahchnddjkjlljmi.crx []
CHR HKLM\...\Chrome\Extension: [fknfdieimobmimhdkfkheeejenmdjhoe] - C:\Program Files\pandasecuritytb\chrome-newtab-search.crx []
CHR HKLM\...\Chrome\Extension: [jcpbbbapaiahneeinklkepfjemkkhhhj] - C:\ProgramData\ADDICT-THING\jcpbbbapaiahneeinklkepfjemkkhhhj.crx []
CHR HKLM\...\Chrome\Extension: [lplkhpnlifhiipjkhkanlgnigepkgipb] - C:\ProgramData\Download and Sa\lplkhpnlifhiipjkhkanlgnigepkgipb.crx []
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [37664 2013-05-28] (AVG Technologies)
S3 EagleXNt; \\C:\Windows\system32\drivers\EagleXNt.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 WinRing0_1_2_0; \\C:\Program Files\IObit\Game Booster 3\Driver\WinRing0.sys [X]
2014-10-23 11:43 - 2014-10-23 11:43 - 00000000 ____ D () C:\ProgramData\Doctor Web
2014-10-23 11:41 - 2014-10-23 12:09 - 00000000 ____ D () C:\Users\Admin\Doctor Web
EmptyTemp:

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#4

W  polu kodowanie mam cos wybrac? (chodzi o zapisanie fixlist.txt w folderze FRST) bo pisze ze zostanie utracona czesc kodu.

#5

Nie zapisujesz fixlist.txt w folderze FRST tylko w folderze gdzie jest FRST czyli C:\Users\Admin\Downloads

#6

prosze:   http://wklej.org/id/1528267/

#7

Otwórz Notatnik i wklej:

HKU\S-1-5-21-349099443-1392178443-2378836476-1000\...\MountPoints2: F - F:\autorun.exe
HKU\S-1-5-21-349099443-1392178443-2378836476-1000\...\MountPoints2: G - G:\CDCheck.exe
HKU\S-1-5-21-349099443-1392178443-2378836476-1000\...\MountPoints2: H - H:\cdstart.exe
ShellIconOverlayIdentifiers: [00avast] - {472083B0-C522-11CF-8763-00608CC02F24} = No File
CHR HKU\S-1-5-21-349099443-1392178443-2378836476-1000\SOFTWARE\Policies\Google: Policy restriction ======= ATTENTION
SearchScopes: HKU\S-1-5-21-349099443-1392178443-2378836476-1000 - DefaultScope {652B3000-3215-4AEC-98DB-DCE95075D216} URL = http://search.yahoo.com/search?fr=chr-greentree_ieei=utf-8ilc=12type=402027p={searchTerms}
SearchScopes: HKU\S-1-5-21-349099443-1392178443-2378836476-1000 - {652B3000-3215-4AEC-98DB-DCE95075D216} URL = http://search.yahoo.com/search?fr=chr-greentree_ieei=utf-8ilc=12type=402027p={searchTerms}
BHO: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - No File
2014-11-19 10:01 - 2014-11-19 10:06 - 00000000 ____ D () C:\AdwCleaner

Plik zapisz pod nazwą fixlist.txt i umieść obok FRST w tym samym folderze.

#8

Super, o niebo lepiej dziala:)

 

Dziekuje bardzo za poswiecony czas i pomoc.