Dllhost, COM surrogate - wysokie użycie dysku (100%)

Cytat:

Task: {33EBE57C-CEFE-49FA-8118-86D127CF133E} - \52b564ab-781e-4778-a177-1900e81a8a69-1 -> No File <==== ATTENTION
Task: {52D67A50-0120-4515-8C91-AAC25CAAB23B} - \52b564ab-781e-4778-a177-1900e81a8a69-5_user -> No File <==== ATTENTION
Task: {6DE2D599-BB62-4906-BB3C-737B2D69C7A0} - System32\Tasks\HYUN => C:\Users\Kasia\AppData\Roaming\HYUN.exe <==== ATTENTION
Task: {6E3DB6F8-1183-4383-96DA-773C4DC13997} - \52b564ab-781e-4778-a177-1900e81a8a69-4 -> No File <==== ATTENTION
Task: {7EE31CC6-94F3-49E2-96E2-9877DCB9EE3A} - \52b564ab-781e-4778-a177-1900e81a8a69-11 -> No File <==== ATTENTION
Task: {7F270531-C0BE-4C22-9026-6455327B37E4} - \52b564ab-781e-4778-a177-1900e81a8a69-5 -> No File <==== ATTENTION
Task: {8543BFB8-81B3-40DA-884D-C2500B6A7B7F} - \52b564ab-781e-4778-a177-1900e81a8a69-2 -> No File <==== ATTENTION
Task: {8DCD0B5F-550F-44FF-BF9A-26D4F2F96AE4} - \52b564ab-781e-4778-a177-1900e81a8a69-6 -> No File <==== ATTENTION
Task: {96F31E90-CF1A-4AE9-9207-6EF21066001A} - System32\Tasks\060184C3-9766-46a0-B258-F4518A0B2633 => Cscript.exe "C:\ProgramData\Baidu Security\Duplicaterecord.js" <==== ATTENTION
Task: {B132D7FB-7A41-4405-9664-39040DB32CB4} - System32\Tasks\XJPNSX => C:\Users\Kasia\AppData\Roaming\XJPNSX.exe <==== ATTENTION
Task: {D010780F-BC1F-41BD-84CB-BF3E4BC15856} - System32\Tasks\Security Center Update - 2306700357 => C:\Users\Kasia\AppData\Roaming\Dosius\ibpiuvh.exe <==== ATTENTION
Task: {D33471A3-538A-4E30-84B0-D7D44F56A233} - \52b564ab-781e-4778-a177-1900e81a8a69-7 -> No File <==== ATTENTION
Task: {ED4602F8-F985-477C-BC80-9B52A3E36D99} - \52b564ab-781e-4778-a177-1900e81a8a69-3 -> No File <==== ATTENTION
Task: C:\WINDOWS\Tasks\HYUN.job => C:\Users\Kasia\AppData\Roaming\HYUN.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\XJPNSX.job => C:\Users\Kasia\AppData\Roaming\XJPNSX.exe <==== ATTENTION
Startup: C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\auditpol.lnk [2014-09-07]
ShortcutTarget: auditpol.lnk -> C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\IEUpdate\auditpol.exe (No File)
Startup: C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iscsicli.lnk [2014-10-28]
ShortcutTarget: iscsicli.lnk -> C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\IEUpdate\iscsicli.exe (No File)
Startup: C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\pcaui.lnk [2014-10-17]
ShortcutTarget: pcaui.lnk -> C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\IEUpdate\pcaui.exe (No File)
Startup: C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\shrpubw.lnk [2014-10-12]
ShortcutTarget: shrpubw.lnk -> C:\Users\Kasia\AppData\Roaming\Microsoft\Windows\IEUpdate\shrpubw.exe (No File)
ShellIconOverlayIdentifiers: [1SecureIconsProvider] -> {FC9D8189-520A-4417-AED7-9EAC810C6FBA} => C:\ProgramData\Microsoft\Secure\Icons\SecureIconsProvider.dll No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-4286887730-1492350271-2724356993-1002 -> {360D2864-5DBA-4042-85BF-70750DAD2BCC} URL =
Toolbar: HKU\S-1-5-21-4286887730-1492350271-2724356993-1002 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files (x86)\Yahoo!\Shared\npYState.dll [No File]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [not found]
S3 SBIOSIO; \??\C:\Users\Kasia\AppData\Local\Temp\__Samsung_Update\SBIOSIO64.sys [X]
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [X]
2015-08-15 20:54 - 2014-09-07 16:41 - 00001364 _____ C:\WINDOWS\Tasks\XJPNSX.job
2015-08-15 20:54 - 2014-09-07 16:38 - 00001360 _____ C:\WINDOWS\Tasks\HYUN.job
EmptyTemp: