při zapnutí (win 10 home) se mi zobrazují chybové hlášky:
![Obrázek](https://i.postimg.cc/2bJkwmYD/Pozn-mka-2020-02-01-110936.png)
Windows defender mlčí. Předem děkuju za pomoc.
Moderátor: Moderátoři
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-1110381321-1557120915-2113291184-1001\...\Policies\Explorer: []
Startup: C:\Users\voidt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ZenMate.bat [2018-10-21] () [File not signed]
Task: {2D7E0983-FAB3-4BBB-9920-FDE77DC4E0D4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-06-16] (Google Inc -> Google Inc.)
Task: {48F29EA9-89B9-451F-8C34-CCAF24616615} - System32\Tasks\Microsoft\Windows\Application Experience\StartupCheckLibrary => rundll32.exe StartupCheckLibrary.dll,DllMainRunLibrary <==== ATTENTION
Task: {FB3221D0-7938-4C7A-B10A-E9C729D1DBAE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-06-16] (Google Inc -> Google Inc.)
C:\Users\voidt\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`20hfm [0]
AlternateDataStreams: C:\Users\voidt\AppData\Local\Temp:com.affinity.photo.1 [240]
AlternateDataStreams: C:\Users\voidt\AppData\Local\Temp:com.affinity.publisher.1 [240]
FirewallRules: [{D55E2EBA-D34D-42EF-B52B-6A6134C6348F}] => (Block) %ProgramFiles%\Autodesk\AutoCAD 2017\acad.exe No File
FirewallRules: [{5DA86D75-BB70-4B71-9E54-B50413936349}] => (Block) %ProgramFiles%\Autodesk\AutoCAD 2017\acad.exe No File
FirewallRules: [{B18619BC-ED11-47F4-B840-735F4D52A87B}] => (Block) %ProgramFiles% (x86)\Frostpunk The Last Autumn\Frostpunk.exe No File
FirewallRules: [{0A7D0CE3-139C-4331-B264-56A07325FAC0}] => (Block) %ProgramFiles% (x86)\Frostpunk The Last Autumn\Frostpunk.exe No File
EmptyTemp:
End
Kód: Vybrat vše
Fix result of Farbar Recovery Scan Tool (x64) Version: 27-01-2020
Ran by voidt (01-02-2020 15:26:08) Run:1
Running from C:\Users\voidt\Desktop
Loaded Profiles: voidt (Available Profiles: voidt)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-1110381321-1557120915-2113291184-1001\...\Policies\Explorer: []
Startup: C:\Users\voidt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ZenMate.bat [2018-10-21] () [File not signed]
Task: {2D7E0983-FAB3-4BBB-9920-FDE77DC4E0D4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-06-16] (Google Inc -> Google Inc.)
Task: {48F29EA9-89B9-451F-8C34-CCAF24616615} - System32\Tasks\Microsoft\Windows\Application Experience\StartupCheckLibrary => rundll32.exe StartupCheckLibrary.dll,DllMainRunLibrary <==== ATTENTION
Task: {FB3221D0-7938-4C7A-B10A-E9C729D1DBAE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-06-16] (Google Inc -> Google Inc.)
C:\Users\voidt\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`20hfm [0]
AlternateDataStreams: C:\Users\voidt\AppData\Local\Temp:com.affinity.photo.1 [240]
AlternateDataStreams: C:\Users\voidt\AppData\Local\Temp:com.affinity.publisher.1 [240]
FirewallRules: [{D55E2EBA-D34D-42EF-B52B-6A6134C6348F}] => (Block) %ProgramFiles%\Autodesk\AutoCAD 2017\acad.exe No File
FirewallRules: [{5DA86D75-BB70-4B71-9E54-B50413936349}] => (Block) %ProgramFiles%\Autodesk\AutoCAD 2017\acad.exe No File
FirewallRules: [{B18619BC-ED11-47F4-B840-735F4D52A87B}] => (Block) %ProgramFiles% (x86)\Frostpunk The Last Autumn\Frostpunk.exe No File
FirewallRules: [{0A7D0CE3-139C-4331-B264-56A07325FAC0}] => (Block) %ProgramFiles% (x86)\Frostpunk The Last Autumn\Frostpunk.exe No File
EmptyTemp:
End
*****************
Processes closed successfully.
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\" => removed successfully
"HKU\S-1-5-21-1110381321-1557120915-2113291184-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\" => removed successfully
C:\Users\voidt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ZenMate.bat => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2D7E0983-FAB3-4BBB-9920-FDE77DC4E0D4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2D7E0983-FAB3-4BBB-9920-FDE77DC4E0D4}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{48F29EA9-89B9-451F-8C34-CCAF24616615}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{48F29EA9-89B9-451F-8C34-CCAF24616615}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Application Experience\StartupCheckLibrary => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Application Experience\StartupCheckLibrary" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FB3221D0-7938-4C7A-B10A-E9C729D1DBAE}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FB3221D0-7938-4C7A-B10A-E9C729D1DBAE}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
C:\Users\voidt\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
C:\ProgramData\Reprise => ":wupeogjxlctlfudivq`qsp`20hfm" ADS removed successfully
C:\Users\voidt\AppData\Local\Temp => ":com.affinity.photo.1" ADS removed successfully
C:\Users\voidt\AppData\Local\Temp => ":com.affinity.publisher.1" ADS removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D55E2EBA-D34D-42EF-B52B-6A6134C6348F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5DA86D75-BB70-4B71-9E54-B50413936349}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B18619BC-ED11-47F4-B840-735F4D52A87B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0A7D0CE3-139C-4331-B264-56A07325FAC0}" => removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 10510336 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 11709023 B
Java, Flash, Steam htmlcache => 387280516 B
Windows/system/drivers => 6185114 B
Edge => 30402 B
Chrome => 549740548 B
Firefox => 1113025685 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 26345296 B
voidt => 238612698 B
RecycleBin => 1753037 B
EmptyTemp: => 2.2 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 15:27:40 ====
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
Task: {F6FAF9D4-72F6-4FA1-9CC0-B1A80A18A146} - System32\Tasks\Microsoft\Windows\WDI\SrvHost => rundll32.exe winscomrssrv.dll,SrvMainHost <==== ATTENTION
EmptyTemp:
End
Kód: Vybrat vše
Fix result of Farbar Recovery Scan Tool (x64) Version: 02-02-2020
Ran by voidt (02-02-2020 15:23:58) Run:2
Running from C:\Users\voidt\Desktop
Loaded Profiles: voidt (Available Profiles: voidt)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
Task: {F6FAF9D4-72F6-4FA1-9CC0-B1A80A18A146} - System32\Tasks\Microsoft\Windows\WDI\SrvHost => rundll32.exe winscomrssrv.dll,SrvMainHost <==== ATTENTION
EmptyTemp:
End
*****************
Processes closed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F6FAF9D4-72F6-4FA1-9CC0-B1A80A18A146}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F6FAF9D4-72F6-4FA1-9CC0-B1A80A18A146}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\WDI\SrvHost => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\WDI\SrvHost" => removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 10510336 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 14783201 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 356514 B
Edge => 0 B
Chrome => 0 B
Firefox => 316680122 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 4238 B
voidt => 74561181 B
RecycleBin => 22255 B
EmptyTemp: => 397.6 MB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 15:24:31 ====