VIRY.CZ

Dobrý den, při zapnutí PC na mě vyškočí hlášky, že při spouštění souboru winscomrssrv.dll a StartUpCheckLibrary.dll došlo k problému.
V příloze zasílám logy z AdwCleaner a FRST.
Windows 10

Zdravím!
V ADW Cleaneru dejte odstranit. Restartujte a pak otevřte poznámkový blok a zkopírujte do něj:

Start

Close Processes:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
Task: {08142B07-83EA-458A-9266-29151A74B30E} - System32\Tasks\Microsoft\Windows\WDI\SrvHost => rundll32.exe winscomrssrv.dll,SrvMainHost <==== ATTENTION
Task: {33EE36F5-A261-4124-ACEA-3D3A1E3A47D5} - System32\Tasks\Microsoft\Windows\Windows Error Reporting\winrmsrv => winrmsrv.exe <==== ATTENTION
Task: {525C2A59-A083-418F-89C4-6923085E9661} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-07-01] (Google LLC -> Google LLC)
Task: {588BACE6-2FF5-4245-B5E4-CA9923F98ED0} - System32\Tasks\Microsoft\Windows\Wininet\Winlogui => winlogui.exe <==== ATTENTION
Task: {C0484F82-0EFE-4BC1-82FC-F477611B5E0A} - System32\Tasks\Microsoft\Windows\Application Experience\StartupCheckLibrary => rundll32.exe StartupCheckLibrary.dll,DllMainRunLibrary <==== ATTENTION
Task: {CD4BFE33-F127-4A8F-91AC-6BA29D9BF0D4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-07-01] (Google LLC -> Google LLC)C:\Windows\system32\setup4.2.6.tmpC:\Windows\system32\setup4.2.6.tmp
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
FirewallRules: [TCP Query User{E9DA815B-8008-4E5A-9990-FD6EB4211EFF}C:\users\mvada\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mvada\appdata\roaming\spotify\spotify.exe => No File
FirewallRules: [UDP Query User{56F8FAF3-6854-4337-8BA9-7D8484728637}C:\users\mvada\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mvada\appdata\roaming\spotify\spotify.exe => No File
FirewallRules: [{66F109CA-7C00-449A-BAF7-1D8A9BFFFD43}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe => No File
FirewallRules: [{E1528E08-84BC-45F2-98A3-6D2E811C77A6}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe => No File

EmptyTemp:
End

Uložte do C:\Users\mvada\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 29-08-2020
Ran by mvada (31-08-2020 14:47:29) Run:2
Running from C:\Users\mvada\Downloads
Loaded Profiles: mvada
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

Close Processes:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
Task: {08142B07-83EA-458A-9266-29151A74B30E} - System32\Tasks\Microsoft\Windows\WDI\SrvHost => rundll32.exe winscomrssrv.dll,SrvMainHost <==== ATTENTION
Task: {33EE36F5-A261-4124-ACEA-3D3A1E3A47D5} - System32\Tasks\Microsoft\Windows\Windows Error Reporting\winrmsrv => winrmsrv.exe <==== ATTENTION
Task: {525C2A59-A083-418F-89C4-6923085E9661} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-07-01] (Google LLC -> Google LLC)
Task: {588BACE6-2FF5-4245-B5E4-CA9923F98ED0} - System32\Tasks\Microsoft\Windows\Wininet\Winlogui => winlogui.exe <==== ATTENTION
Task: {C0484F82-0EFE-4BC1-82FC-F477611B5E0A} - System32\Tasks\Microsoft\Windows\Application Experience\StartupCheckLibrary => rundll32.exe StartupCheckLibrary.dll,DllMainRunLibrary <==== ATTENTION
Task: {CD4BFE33-F127-4A8F-91AC-6BA29D9BF0D4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-07-01] (Google LLC -> Google LLC)C:\Windows\system32\setup4.2.6.tmpC:\Windows\system32\setup4.2.6.tmp
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
FirewallRules: [TCP Query User{E9DA815B-8008-4E5A-9990-FD6EB4211EFF}C:\users\mvada\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mvada\appdata\roaming\spotify\spotify.exe => No File
FirewallRules: [UDP Query User{56F8FAF3-6854-4337-8BA9-7D8484728637}C:\users\mvada\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mvada\appdata\roaming\spotify\spotify.exe => No File
FirewallRules: [{66F109CA-7C00-449A-BAF7-1D8A9BFFFD43}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe => No File
FirewallRules: [{E1528E08-84BC-45F2-98A3-6D2E811C77A6}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe => No File

EmptyTemp:
End
*****************

Processes closed successfully.
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched" => removed successfully
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{08142B07-83EA-458A-9266-29151A74B30E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{08142B07-83EA-458A-9266-29151A74B30E}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Windows\WDI\SrvHost => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\WDI\SrvHost" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{33EE36F5-A261-4124-ACEA-3D3A1E3A47D5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{33EE36F5-A261-4124-ACEA-3D3A1E3A47D5}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Windows\Windows Error Reporting\winrmsrv => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Windows Error Reporting\winrmsrv" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{525C2A59-A083-418F-89C4-6923085E9661}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{525C2A59-A083-418F-89C4-6923085E9661}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{588BACE6-2FF5-4245-B5E4-CA9923F98ED0}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{588BACE6-2FF5-4245-B5E4-CA9923F98ED0}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Windows\Wininet\Winlogui => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Wininet\Winlogui" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C0484F82-0EFE-4BC1-82FC-F477611B5E0A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0484F82-0EFE-4BC1-82FC-F477611B5E0A}" => removed successfully
C:\Windows\System32\Tasks\Microsoft\Windows\Application Experience\StartupCheckLibrary => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Application Experience\StartupCheckLibrary" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CD4BFE33-F127-4A8F-91AC-6BA29D9BF0D4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CD4BFE33-F127-4A8F-91AC-6BA29D9BF0D4}" => removed successfully
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 => removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
"HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}" => removed successfully
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\Offline Files => removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Offline Files => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E9DA815B-8008-4E5A-9990-FD6EB4211EFF}C:\users\mvada\appdata\roaming\spotify\spotify.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{56F8FAF3-6854-4337-8BA9-7D8484728637}C:\users\mvada\appdata\roaming\spotify\spotify.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{66F109CA-7C00-449A-BAF7-1D8A9BFFFD43}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E1528E08-84BC-45F2-98A3-6D2E811C77A6}" => removed successfully

=========== EmptyTemp: ==========

BITS transfer queue => 8151040 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 14746551 B
Java, Flash, Steam htmlcache => 64991381 B
Windows/system/drivers => 350733 B
Edge => 3435760 B
Chrome => 380181193 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 4608 B
NetworkService => 4608 B
mvada => 188211 B

RecycleBin => 201628 B
EmptyTemp: => 450.4 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 14:47:35 ====

OK. Nastala nějaká změna?

Chybová hláška zmizela. Děkuju mockrát !

To jsem rád a nemáte zač!