Po prechode na Windows 11 je pocitac zalagovany

[Lukas666]

Zdravím,

po upgrade z windows 10 na 11 je operacny system "zalagovany", hlavne si to vsimam na windows animaciach, vela z nich (dropdowny, vyskakujuce notifkacie, otvaranie priecinkou a podobne) nejdu hladko ale trhavo... a taktiez pri hrani CS 1.6, kde sice netgraph v hre ukazuje 100fps, ale na pohlad to vyzera ako by hra sla na 30fps.

Tiez sa mi na 11 nedari spojzadnit notebooky mikrofon. A taktiez mi po upgrade zacala vyskakovat tato chyba: https://www.intel.com/content/www/us/en ... emory.html ale to som dnes vyrieisl nainstalovanim aktualnejsieho ovladaca podla instrukcii a vyzera, ze to zmizlo.

Zatial som vacsinu animacii vypol a skusal nainstalovat najnovsi ovladac grafickej karty, ale nepomohlo nic z toho (amimacie teda nesekaju, kedze su vypnute, ale 1.6ka je stale trhava). Notebook ma sice uz par rokov, ale myslim, ze na Windows 11 by vykon mal mat dostatocny - jedna sa o model Dell G5 5587.

V prilohe posielam logy z RSIT. Vopred vdaka za pozretie.

[Rudy]

Zdravím!
Přidejte ještě log Addition. Je v souboru addition.txt v C:\Users\Zigulo\Desktop\Nový priečinok . Děkuji.

[Lukas666]

Zdravím,
v prilohe prikladám log z Addition, nech sa paci.

Addition.rar

(18 KiB) Staženo 70 x

[Rudy]

OK. Teď spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

[Lukas666]

Hotovo, prikladam log:

# -------------------------------
# Malwarebytes AdwCleaner 8.3.1.0
# -------------------------------
# Build: 11-18-2021
# Database: 2022-02-03.4 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 03-13-2022
# Duration: 00:00:14
# OS: Windows 10 Home
# Cleaned: 30
# Awaiting reboot:4
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Users\Lukas\AppData\Roaming\DRPSu

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\drp.su
Deleted HKCU\Software\drpsu
Deleted HKLM\Software\Classes\TypeLib\{C661BE9A-11D8-47DD-A980-6494B09F3AF3}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{C661BE9A-11D8-47DD-A980-6494B09F3AF3}
Deleted HKLM\Software\Wow6432Node\drpsu

***** [ Chromium (and derivatives) ] *****

Deleted paddiapjbnmknhhobfcjnnmhgihnpgne

***** [ Chromium URLs ] *****

Deleted initialpage123
Deleted initialpage123
Deleted initialpage123
Deleted initialpage123
Deleted initialpage123
Deleted initialpage123

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

Deleted Preinstalled.DellCommand|PowerManager Folder C:\Program Files\DELL\COMMANDPOWERMANAGER
Deleted Preinstalled.DellCommand|PowerManager Folder C:\ProgramData\DELL\COMMANDPOWERMANAGER
Deleted Preinstalled.DellCommand|PowerManager Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{18469ED8-8C36-4CF7-BD43-0FC9B1931AF8}
Deleted Preinstalled.DellSupportAssistAgent Folder C:\Program Files\DELL\SAREMEDIATION\AGENT
Deleted Preinstalled.DellSupportAssistAgent Folder C:\Program Files\DELL\SAREMEDIATION\AUDIT
Deleted Preinstalled.DellSupportAssistAgent Folder C:\ProgramData\DELL\SAREMEDIATION\PLUGIN
Deleted Preinstalled.DellSupportAssistAgent Folder C:\ProgramData\SUPPORTASSIST\CLIENT\TECHNICIANTOOLKIT
Deleted Preinstalled.DellUpdateforWindows10 Folder C:\Program Files (x86)\DELL\UPDATE
Deleted Preinstalled.DellUpdateforWindows10 Folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DELL\UPDATE
Deleted Preinstalled.SmartByte Folder C:\Program Files\RIVET NETWORKS
Deleted Preinstalled.SmartByte Registry HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{68A4AB7C-4DA8-4036-84D9-6638A1D4D66C}
Deleted Preinstalled.SmartByte Registry HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SmartByte Telemetry
Deleted Preinstalled.SmartByte Task C:\Windows\System32\Tasks\SMARTBYTE TELEMETRY
Needs Reboot Preinstalled.DellSupportAssistAgent Folder C:\Program Files\DELL\SAREMEDIATION\PLUGIN
Needs Reboot Preinstalled.DellSupportAssistAgent Folder C:\Program Files\DELL\SUPPORTASSISTAGENT
Needs Reboot Preinstalled.DellUpdateforWindows10 Folder C:\Program Files (x86)\DELL\UPDATESERVICE
Needs Reboot Preinstalled.DellUpdateforWindows10 Folder C:\ProgramData\DELL\UPDATESERVICE


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

***** Reboot Required to Complete *****


***** [ Folders ] *****

Cleaning failed C:\Program Files (x86)\DELL\UPDATESERVICE
Cleaning failed C:\Program Files\DELL\SAREMEDIATION\PLUGIN
Cleaning failed C:\Program Files\DELL\SUPPORTASSISTAGENT
Cleaning failed C:\ProgramData\DELL\UPDATESERVICE

*************************

AdwCleaner[S00].txt - [6013 octets] - [07/06/2020 16:48:10]
AdwCleaner[C00].txt - [6192 octets] - [07/06/2020 16:51:05]
AdwCleaner[S01].txt - [2144 octets] - [28/11/2020 13:59:46]
AdwCleaner[C01].txt - [1869 octets] - [28/11/2020 14:00:14]
AdwCleaner[S02].txt - [4053 octets] - [13/03/2022 10:05:25]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C02].txt ##########

[Rudy]

Dejte nové logy FRST+Addition.

[Lukas666]

Nove logy z FRST:

Logy nove.rar

(30.47 KiB) Staženo 74 x

[Rudy]

Ještě poprosím o log Addition. Ten v archivu není.

[Lukas666]

Hmm.. stiahol som si ten archiv z fora a mne tam ukazuje obidve logy, ale kazdopadne, posielam este raz samostatne Addition, nech sa paci.

Addition new.rar

(17.09 KiB) Staženo 75 x

A vlastne aj ked som si stiahol archiv z uvodneho prispevku, tak mi tam zobrazuje obidva logy, no predtym ste tiez reagovali, ze mam poslat este addition, ktory je v zlozke "C:\Users\Zigulo\Desktop\Nový priečinok" ... co ale nie je zlozka z mojho PC. Nemohlo sa nejakym nedopatrenim stat, ze ste pozereli log / archiv niekoho ineho?

[Rudy]

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
C:\Program Files (x86)\Microsoft\BingBar
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDF
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - No File
ShellExecuteHooks-x32: - UPB:{B5A7F190-DDA6-4420-B3BA-52453494E6CD} - No File [ ]
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
S3 MFE_RR; \??\C:\Users\Zigulo\AppData\Local\Temp\mfe_rr.sys [X]
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\Users\Zigulo\AppData\Local\Temp

EmptyTemp:
End

Uložte do C:\Users\Zigulo\Desktop\Nový priečinok jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Poznámka: Jste nepozorný, do 2. archivu jste dal opět frst.txt, takže mazání nebude kompletní!!!

[Lukas666]

U mna sa ale takyto priecinok "C:\Users\Zigulo\Desktop\Nový priečinok" a ani uzivatel z menom "Zigulo" nenachadza. Ani v ziadnom z prilozenych logov, ktore sam dal, takyto uzivatel nefiguruje. Vid foto z mojho PC:

screenshot.png (44.15 KiB) Zobrazeno 840 x

[Rudy]

Vždyt jste ho z něj spouštěl:

?Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-10-2014 01
Ran by Zigulo (administrator) on ZIGULO-HP on 01-11-2014 11:47:43
Running from C:\Users\Zigulo\Desktop\Nový priečinok
Loaded Profile: Zigulo (Available profiles: Zigulo)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Slovenčina (Slovensko)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

[Lukas666]

Toto je z logu nejakeho ineho uzivatela, mozno z tohto vlakna? https://forum.viry.cz/viewtopic.php?f=1 ... o#p1355679 .. ked pozriete na ten cas, tak je log z roku 2014 zpraveny na OS Windows 7

[Rudy]

Omlouvám se. Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKU\S-1-5-21-152176594-3405707176-703294341-1001\...\Policies\Explorer: []
HKU\S-1-5-21-152176594-3405707176-703294341-1001\...\MountPoints2: {b521847f-98b4-11e8-8e74-b46bfcd9d32e} - "E:\setup.exe"
Task: {46878194-7C57-4B51-83A6-A6D08CCB1B20} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-07-06] (Google Inc -> Google Inc.)
Task: {76AEC8A3-E2B4-436F-A794-4C72CFBC3A24} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-07-06] (Google Inc -> Google Inc.)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (No File)
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
SearchScopes: HKU\S-1-5-21-152176594-3405707176-703294341-1001 -> DefaultScope {72BD9F8D-069D-47A4-A27B-7F607029E828} URL =
SearchScopes: HKU\S-1-5-21-152176594-3405707176-703294341-1001 -> {72BD9F8D-069D-47A4-A27B-7F607029E828} URL =
FirewallRules: [UDP Query User{25BDA846-4488-43DC-A669-3A2D235C77F4}C:\users\lukas\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\lukas\appdata\roaming\spotify\spotify.exe => No File
FirewallRules: [TCP Query User{46CFC1E5-3982-42F1-944F-080A53D09C9B}C:\users\lukas\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\lukas\appdata\roaming\spotify\spotify.exe => No File
FirewallRules: [TCP Query User{D407569E-518A-4724-B31D-4172E903A694}C:\users\lukas\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\lukas\appdata\roaming\spotify\spotify.exe => No File
FirewallRules: [UDP Query User{8214A656-7E37-42FC-94DE-4B4BFD43CF55}C:\users\lukas\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\lukas\appdata\roaming\spotify\spotify.exe => No File
FirewallRules: [{71B85501-A932-4A32-9860-A8F731B6109F}] => (Allow) C:\Users\Lukas\AppData\Roaming\DRPSu\Alice\cloud.exe => No File

EmptyTemp:
End

Uložte do D:\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[Lukas666]

Hotovo:

Fix result of Farbar Recovery Scan Tool (x64) Version: 13-03-2022
Ran by Lukas (19-03-2022 19:03:12) Run:2
Running from D:\Downloads
Loaded Profiles: Lukas
Boot Mode: Normal
==============================================

fixlist content:
*****************

*****************


==== End of Fixlog 19:03:12 ====