Stránka 1 z 2

Pomalé PC (Windows Insider)

Napsal: 17 srp 2020 17:53
od Polda18
Zdravím. Poslední dobou se potýkám s pomalým PC (notebook). Několikrát se mi stalo, že jsem si spletl doménu oblíbené webové stránky, kde mě to přesměrovalo na nějakou podivnou phishing stránku (okamžitě zavřena). Trošku jsem poklidil na Ploše, měla 500 MB (hodně dělalo PDF) :D Podezřívám též virus, nějakou breberku, takže jsem pro jistotu udělal FRST scan. Nutno ještě podotknout, že mám Windows Insider build, takže možná něco bude trošku jinak, než u ostatních uživatelů. Jinak je to kompletně legální Windows.

Logy se sem nevešly (příliš dlouhé), tak jsem využil služeb HasteBin:
FRST.txt = https://hasteb.in/unodopez.yaml
Addition.txt = https://hasteb.in/ovujohir.yaml

Za obarvení se omlouvám, HasteBin to dělá automaticky, není tam kde nastavit syntaxe, respektive nevím, kde se nastavuje. Myslí si, že se jedná o YAML soubory...

Re: Pomalé PC (Windows Insider)

Napsal: 18 srp 2020 03:35
od Conder
Ahoj :)

:arrow: Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/
  • Uloz na plochu a ukonci vsetky programy
  • Spusti AdwCleaner ako spravca
  • Odsuhlas licencne podmienky
  • Klikni na Spustit skenovani a pockaj na dokoncenie
  • V pripade nalezov nechaj vsetky nalezy oznacene a klikni na Karantena (ak nie su ziadne nalezy, tak na Spustit zakladni opravu)
  • V pripade, ze sa detekuje aj "predinstalovany software", tieto programy mozes, ale nemusis zmazat (toto nie su skodlive programy, ale iba zbytocnosti)
  • Potvrd vyzvu, pockaj na dokoncenie a potvrd restartovanie PC
  • Po restartovani PC sa otvori AdwCleaner, klikni na Zobrazit soubor protokolu
  • Otvori sa log, jeho obsah skopiruj a vloz do dalsej odpovede

Re: Pomalé PC (Windows Insider)

Napsal: 18 srp 2020 15:48
od Polda18
Nějaké předinstalované programy od Aceru to detekovalo, ale nemazal jsem. Nikdy to po mě nic nechtělo a běhu počítače to nijak nepřekáželo, spíš si myslím, že se ten software ani nespouštěl. Zároveň se omlouvám za zpoždění, byl jsem v práci, k počítači jsem se dostal až dnes odpoledne, spíše již k večerním hodinám. Tu je log:

Kód: Vybrat vše

# -------------------------------
# Malwarebytes AdwCleaner 8.0.7.0
# -------------------------------
# Build:    07-22-2020
# Database: 2020-07-20.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    08-18-2020
# Duration: 00:00:10
# OS:       Windows 10 Home
# Cleaned:  4
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted       HKLM\Software\Classes\Installer\Features\A38C15B2D5649AE4C9CDE19DE50DA96C
Deleted       HKLM\Software\Classes\Installer\Products\A38C15B2D5649AE4C9CDE19DE50DA96C
Deleted       HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A38C15B2D5649AE4C9CDE19DE50DA96C
Deleted       HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2B51C83A-465D-4EA9-9CDC-1ED95ED09AC6}

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [5842 octets] - [18/08/2020 16:14:36]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Re: Pomalé PC (Windows Insider)

Napsal: 19 srp 2020 15:21
od Polda18
Potřeboval bych další postup. Počítač už se načítá rychleji, ale stále to není ono. Padá mi Minecraft, a jelikož spravuju server, tak je to pro mě dost nepříjemné, poněvadž se nemůžu připojit a pracovat na něm.

Re: Pomalé PC (Windows Insider)

Napsal: 21 srp 2020 23:24
od Conder
Poprosim o obidva nove logy z FRST. Kedze logy ulozene na hasteb.in sa po urcitom obdobi automaticky mazu, poprosim o vlozenie logov priamo na forum - do prispevku (ak sa nezmestia do jedneho prispevku, je mozne ich rozdelit do viacerych prispevkov), pripadne do prilohy (zabalene v RAR alebo ZIP archive).

Re: Pomalé PC (Windows Insider)

Napsal: 22 srp 2020 10:38
od Polda18
Tak tu jsou ty logy tedy (tentokrát jako příloha). Omlouvám se, nějak mi nedocvaklo, že jsem si prohlížel jiné vlákno, tak jsem musel FRST stáhnout znovu :D

Re: Pomalé PC (Windows Insider)

Napsal: 23 srp 2020 23:55
od Conder
:arrow: Otvor poznamkovy blok (Win+R -> notepad -> enter)
  • Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

    Kód: Vybrat vše

    Start
    CloseProcesses:
    CreateRestorePoint:
    
    PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
    File: C:\WINDOWS\system32\Drivers\nvdimm.sys
    ExportKey: HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{53966cb1-4d46-4166-bf23-c522403cd495}
    ExportKey: HKLM\System\CurrentControlSet\Services\ScmDisk
    
    HKU\S-1-5-21-1597799451-2203146965-1019131874-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer17win10.msn.com/?pc=ACTE
    SearchScopes: HKU\S-1-5-21-1597799451-2203146965-1019131874-1001 -> DefaultScope {9E2A5EA9-841D-4DC2-A86E-A1A3540C64A1} URL = 
    SearchScopes: HKU\S-1-5-21-1597799451-2203146965-1019131874-1001 -> {52433955-EC57-49F4-A1E8-00093A94994D} URL = 
    2020-08-19 19:27 - 2020-08-19 19:27 - 000000533 _____ C:\DelFix.txt
    ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
    AlternateDataStreams: C:\WINDOWS\system32\Drivers\nkocvbpt.sys:changelist [270]
    FirewallRules: [UDP Query User{9EBEED83-048E-49CD-8E2F-67551A20D648}C:\program files (x86)\java\jre1.8.0_241\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_241\bin\javaw.exe => No File
    FirewallRules: [TCP Query User{0B9DC488-F75C-42E2-ACF9-88214AF47FEF}C:\program files (x86)\java\jre1.8.0_241\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_241\bin\javaw.exe => No File
    FirewallRules: [UDP Query User{C5EB9798-96C1-4E9B-9CAE-A57B7B650869}C:\program files (x86)\common files\oracle\java\javapath_target_81732593\java.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_81732593\java.exe => No File
    FirewallRules: [TCP Query User{0B547E86-FAC9-4CA9-8ED7-1F0151634E10}C:\program files (x86)\common files\oracle\java\javapath_target_81732593\java.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_81732593\java.exe => No File
    FirewallRules: [{E9F7677B-445A-4E63-90CC-36040EF80855}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe => No File
    FirewallRules: [{FFE1597A-6FB8-4BB7-AB33-A6AA3A6BC5DC}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe => No File
    FirewallRules: [UDP Query User{60B86DB3-CF8D-4881-98CE-D3B172FD3B59}C:\program files (x86)\java\jre1.8.0_231\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_231\bin\javaw.exe => No File
    FirewallRules: [TCP Query User{28762C9F-DD82-4FF3-A380-05B8F1D66054}C:\program files (x86)\java\jre1.8.0_231\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_231\bin\javaw.exe => No File
    FirewallRules: [{18A71473-E8C2-413A-902D-4FB7B86F15A2}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe => No File
    FirewallRules: [{698DE6CF-E570-4C79-9028-495B3E3F18CA}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe => No File
    FirewallRules: [{F64D79E1-D4EA-44BF-BB82-7434E794D767}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
    FirewallRules: [{E3432CD9-AE7C-4873-9819-0792A2DD2D9B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
    FirewallRules: [TCP Query User{591A2291-F0D7-4595-8101-6F7CF3354A1B}C:\program files (x86)\common files\oracle\java\javapath_target_72257203\java.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_72257203\java.exe => No File
    FirewallRules: [UDP Query User{BA212997-2E5A-490D-BF60-6F43A5B58C80}C:\program files (x86)\common files\oracle\java\javapath_target_72257203\java.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_72257203\java.exe => No File
    FirewallRules: [TCP Query User{BB5C226C-9A3F-4C75-946F-5E9231106D43}C:\program files\java\jre1.8.0_251\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_251\bin\javaw.exe => No File
    FirewallRules: [UDP Query User{9EEEC13C-9A59-4DC5-8B66-CAE71CF5D474}C:\program files\java\jre1.8.0_251\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_251\bin\javaw.exe => No File
    FirewallRules: [TCP Query User{21251118-9B3C-4172-BA47-4FACAE521657}C:\program files\java\jre1.8.0_251\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_251\bin\java.exe => No File
    FirewallRules: [UDP Query User{B82E9EFD-3604-4D1E-A7A4-A27FACB5B3FC}C:\program files\java\jre1.8.0_251\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_251\bin\java.exe => No File
    
    Hosts:
    EmptyTemp:
    End
  • Uloz na plochu s nazvom fixlist.txt
  • Spusti znovu FRST a klikni na Fix
  • Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
  • Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj

Re: Pomalé PC (Windows Insider)

Napsal: 24 srp 2020 16:30
od Polda18
Done:

Kód: Vybrat vše

Fix result of Farbar Recovery Scan Tool (x64) Version: 23-08-2020
Ran by Marek Poláček (24-08-2020 15:31:16) Run:1
Running from C:\Users\Marek Poláček\Desktop
Loaded Profiles: Marek Poláček
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
File: C:\WINDOWS\system32\Drivers\nvdimm.sys
ExportKey: HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{53966cb1-4d46-4166-bf23-c522403cd495}
ExportKey: HKLM\System\CurrentControlSet\Services\ScmDisk

HKU\S-1-5-21-1597799451-2203146965-1019131874-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer17win10.msn.com/?pc=ACTE
SearchScopes: HKU\S-1-5-21-1597799451-2203146965-1019131874-1001 -> DefaultScope {9E2A5EA9-841D-4DC2-A86E-A1A3540C64A1} URL = 
SearchScopes: HKU\S-1-5-21-1597799451-2203146965-1019131874-1001 -> {52433955-EC57-49F4-A1E8-00093A94994D} URL = 
2020-08-19 19:27 - 2020-08-19 19:27 - 000000533 _____ C:\DelFix.txt
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
AlternateDataStreams: C:\WINDOWS\system32\Drivers\nkocvbpt.sys:changelist [270]
FirewallRules: [UDP Query User{9EBEED83-048E-49CD-8E2F-67551A20D648}C:\program files (x86)\java\jre1.8.0_241\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_241\bin\javaw.exe => No File
FirewallRules: [TCP Query User{0B9DC488-F75C-42E2-ACF9-88214AF47FEF}C:\program files (x86)\java\jre1.8.0_241\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_241\bin\javaw.exe => No File
FirewallRules: [UDP Query User{C5EB9798-96C1-4E9B-9CAE-A57B7B650869}C:\program files (x86)\common files\oracle\java\javapath_target_81732593\java.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_81732593\java.exe => No File
FirewallRules: [TCP Query User{0B547E86-FAC9-4CA9-8ED7-1F0151634E10}C:\program files (x86)\common files\oracle\java\javapath_target_81732593\java.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_81732593\java.exe => No File
FirewallRules: [{E9F7677B-445A-4E63-90CC-36040EF80855}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe => No File
FirewallRules: [{FFE1597A-6FB8-4BB7-AB33-A6AA3A6BC5DC}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe => No File
FirewallRules: [UDP Query User{60B86DB3-CF8D-4881-98CE-D3B172FD3B59}C:\program files (x86)\java\jre1.8.0_231\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_231\bin\javaw.exe => No File
FirewallRules: [TCP Query User{28762C9F-DD82-4FF3-A380-05B8F1D66054}C:\program files (x86)\java\jre1.8.0_231\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_231\bin\javaw.exe => No File
FirewallRules: [{18A71473-E8C2-413A-902D-4FB7B86F15A2}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe => No File
FirewallRules: [{698DE6CF-E570-4C79-9028-495B3E3F18CA}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe => No File
FirewallRules: [{F64D79E1-D4EA-44BF-BB82-7434E794D767}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{E3432CD9-AE7C-4873-9819-0792A2DD2D9B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [TCP Query User{591A2291-F0D7-4595-8101-6F7CF3354A1B}C:\program files (x86)\common files\oracle\java\javapath_target_72257203\java.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_72257203\java.exe => No File
FirewallRules: [UDP Query User{BA212997-2E5A-490D-BF60-6F43A5B58C80}C:\program files (x86)\common files\oracle\java\javapath_target_72257203\java.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_72257203\java.exe => No File
FirewallRules: [TCP Query User{BB5C226C-9A3F-4C75-946F-5E9231106D43}C:\program files\java\jre1.8.0_251\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_251\bin\javaw.exe => No File
FirewallRules: [UDP Query User{9EEEC13C-9A59-4DC5-8B66-CAE71CF5D474}C:\program files\java\jre1.8.0_251\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_251\bin\javaw.exe => No File
FirewallRules: [TCP Query User{21251118-9B3C-4172-BA47-4FACAE521657}C:\program files\java\jre1.8.0_251\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_251\bin\java.exe => No File
FirewallRules: [UDP Query User{B82E9EFD-3604-4D1E-A7A4-A27FACB5B3FC}C:\program files\java\jre1.8.0_251\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_251\bin\java.exe => No File

Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.

========= Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum =========



Count    : 56
Average  : 
Sum      : 4670520
Maximum  : 
Minimum  : 
Property : Length




========= End of Powershell: =========


========================= File: C:\WINDOWS\system32\Drivers\nvdimm.sys ========================

C:\WINDOWS\system32\Drivers\nvdimm.sys
Catalog: C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Common-Drivers-merged-Package~31bf3856ad364e35~amd64~~10.0.20197.1000.cat
File is digitally signed
MD5: 98FFAA7E2183CFA3D13A4DD10D0FD41D
Creation and modification date: 2020-08-19 10:22 - 2020-08-19 10:22
Size: 000196896
Attributes: ----A
Company Name: Microsoft Windows -> Microsoft Corporation
Internal Name: nvdimm.sys
Original Name: nvdimm.sys
Product: Microsoft® Windows® Operating System
Description: NVDIMM device driver
File Version: 10.0.20197.1000 (WinBuild.160101.0800)
Product Version: 10.0.20197.1000
Copyright: © Microsoft Corporation. All rights reserved.
VirusTotal: https://www.virustotal.com/gui/file/b5b5ece6877b2a78b68cbacd7c3bbf684cf5f4ed787db2c3fe32b8e79dce2f0d/detection/f-b5b5ece6877b2a78b68cbacd7c3bbf684cf5f4ed787db2c3fe32b8e79dce2f0d-1598132858

====== End of File: ======

================== ExportKey: ===================

[HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{53966cb1-4d46-4166-bf23-c522403cd495}]
""="ScmDisk"

=== End of ExportKey ===
================== ExportKey: ===================

"HKLM\System\CurrentControlSet\Services\ScmDisk" => not found

=== End of ExportKey ===
HKU\S-1-5-21-1597799451-2203146965-1019131874-1001\Software\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => value restored successfully
"HKU\S-1-5-21-1597799451-2203146965-1019131874-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
HKU\S-1-5-21-1597799451-2203146965-1019131874-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{52433955-EC57-49F4-A1E8-00093A94994D} => removed successfully
C:\DelFix.txt => moved successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
C:\WINDOWS\system32\Drivers\nkocvbpt.sys => ":changelist" ADS removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{9EBEED83-048E-49CD-8E2F-67551A20D648}C:\program files (x86)\java\jre1.8.0_241\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0B9DC488-F75C-42E2-ACF9-88214AF47FEF}C:\program files (x86)\java\jre1.8.0_241\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{C5EB9798-96C1-4E9B-9CAE-A57B7B650869}C:\program files (x86)\common files\oracle\java\javapath_target_81732593\java.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0B547E86-FAC9-4CA9-8ED7-1F0151634E10}C:\program files (x86)\common files\oracle\java\javapath_target_81732593\java.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E9F7677B-445A-4E63-90CC-36040EF80855}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FFE1597A-6FB8-4BB7-AB33-A6AA3A6BC5DC}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{60B86DB3-CF8D-4881-98CE-D3B172FD3B59}C:\program files (x86)\java\jre1.8.0_231\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{28762C9F-DD82-4FF3-A380-05B8F1D66054}C:\program files (x86)\java\jre1.8.0_231\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{18A71473-E8C2-413A-902D-4FB7B86F15A2}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{698DE6CF-E570-4C79-9028-495B3E3F18CA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F64D79E1-D4EA-44BF-BB82-7434E794D767}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E3432CD9-AE7C-4873-9819-0792A2DD2D9B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{591A2291-F0D7-4595-8101-6F7CF3354A1B}C:\program files (x86)\common files\oracle\java\javapath_target_72257203\java.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{BA212997-2E5A-490D-BF60-6F43A5B58C80}C:\program files (x86)\common files\oracle\java\javapath_target_72257203\java.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{BB5C226C-9A3F-4C75-946F-5E9231106D43}C:\program files\java\jre1.8.0_251\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{9EEEC13C-9A59-4DC5-8B66-CAE71CF5D474}C:\program files\java\jre1.8.0_251\bin\javaw.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{21251118-9B3C-4172-BA47-4FACAE521657}C:\program files\java\jre1.8.0_251\bin\java.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{B82E9EFD-3604-4D1E-A7A4-A27FACB5B3FC}C:\program files\java\jre1.8.0_251\bin\java.exe" => removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 10772480 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 9467040 B
Java, Flash, Steam htmlcache => 223293573 B
Windows/system/drivers => 1838627 B
Edge => 49178 B
Chrome => 422063518 B
Firefox => 39457694 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 6656 B
Users => 6656 B
ProgramData => 6656 B
Public => 6656 B
systemprofile => 6656 B
systemprofile32 => 6656 B
LocalService => 6656 B
NetworkService => 6656 B
Marek Poláček => 11687654 B
nx => 11687654 B

RecycleBin => 0 B
EmptyTemp: => 696.5 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 15:35:00 ====

Re: Pomalé PC (Windows Insider)

Napsal: 26 srp 2020 03:46
od Conder
Ako to momentalne vyzera s PC? Nastala nejaka zmena alebo su este nejake problemy?

Poprosim este o obidva nove logy z FRST (moznost Scan), ale s tym, ze este pred spustenim skenu vo FRST zrus oznacenie moznosti Registers, Services, Drivers, Processes, Internet (zvysne moznosti ponechaj tak, ako su prednastavene). Logy zrejme budu dlhsie, takze ich mozes opat zabalit do archivu a poslat ako prilohu (alebo rozdelit do viacerych prispevkov).

Re: Pomalé PC (Windows Insider)

Napsal: 26 srp 2020 19:38
od Polda18
No už běží tedy rychleji a trvá to kratší dobu, než se načte vše potřebné, ale i tak to občas laguje, když hraju (teď například naposledy to lagovalo, když jsem hrál Minecraft), a občas jsou nějaké záseky.

Logy v příloze.

Re: Pomalé PC (Windows Insider)

Napsal: 27 srp 2020 03:16
od Conder
:arrow: Co sa tyka tych zasekov, vyskytuju sa aj pri beznom pouzivani (napr. pri pouzivani prehliadaca)? Zasekne sa iba konkretny program alebo aj cely system aj s kurzorom?

:arrow: Spusti kontrolu integrity systemovych suborov:
  • Otvor Start, napis "cmd" (bez uvodzoviek), klikni pravym tlacitkom mysi na Prikazovy riadok a klikni na Spustit ako spravca
  • Skopiruj a spusti prikaz:

    Kód: Vybrat vše

    DISM.exe /Online /Cleanup-image /Restorehealth
  • Po dokonceni skopiruj a spusti druhy prikaz:

    Kód: Vybrat vše

    sfc /scannow
  • Po dokonceni obidvoch prikazov skopiruj a spusti tento prikaz:

    Kód: Vybrat vše

    findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >> "%userprofile%\desktop\sfcdetails.txt" && copy %windir%\logs\dism\dism.log %userprofile%\desktop\dism.txt
  • Na ploche sa vytvoria subory sfcdetails.txt a dism.txt, tieto subory zabal ho do archivu RAR alebo ZIP a posli ako prilohu k dalsiemu prispevku
  • Restartuj PC a napis ako sa chova PC

Re: Pomalé PC (Windows Insider)

Napsal: 27 srp 2020 15:15
od Polda18
Občas se to seká i při běžném používání (v prohlížeči při přehrávání videí na YouTube, najednou se obraz zastaví, a pak zrychleně přejde na aktuální pozici přehrávání). Neseká se celý systém, už vůbec ne s kurzorem, za což jsem rád.

Logy v příloze. Po restartu dopíšu podrobnosti.

Re: Pomalé PC (Windows Insider)

Napsal: 28 srp 2020 16:50
od Polda18
Zatím to vypadá v pohodě. Kdyžtak pak znovu písnu, kdyby to zase začalo nějak blbnout :) Uklidíme? :)

Re: Pomalé PC (Windows Insider)

Napsal: 30 srp 2020 15:34
od Polda18
Tak po nějaké době znovu píšu. Počítač je opět pomalejší, dokonce se zasekává už i Windows a posledně jsem měl BSOD, když jsem dělal něco na Minecraft serveru ve hře.

Jestli to takto půjde dál, budu muset opět provést tovární nastavení :(

Re: Pomalé PC (Windows Insider)

Napsal: 31 srp 2020 23:48
od Conder
:arrow: Otvor poznamkovy blok (Win+R -> notepad -> enter)
  • Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

    Kód: Vybrat vše

    Start
    Folder: C:\WIndows\Minidump
    Zip: C:\WIndows\Minidump
    End
  • Uloz na plochu s nazvom fixlist.txt
  • Spusti znovu FRST a klikni na Fix
  • Klikni na OK
  • Otvori sa fixlog, jeho obsah skopiruj do dalsieho prispevku
:arrow: Na ploche by sa mal vytvorit ZIP archiv s aktualnym datumom a casom v nazve, posli ho ako priohu k dalsiemu prispevku.