
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
problikávání obrazovky noitebooku
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
problikávání obrazovky noitebooku
Zdravím. Posledních pár dní mi na notebooku Acer Aspire E 15 při spuštění TV v notebooku začne problikávat celé okno, kde je pořad spuštěn. Pokud pustím nějaké video na You Tube-dojde k tomu samému. Pokud přepnu na jiný panel, obraz-stránka je v pořádku. Děje se to ve všech prohlížečích (Chrome 77; Mozilla i Edge). Netuším, kde je chyba, a proto prosím o kontrolu, případně nějaké doporučení ...
- Přílohy
-
- Addition.zip
- (21.34 KiB) Staženo 134 x
Re: problikávání obrazovky noitebooku
Ahoj 
Toto zrovna nevyzera na problem sposobeny malwarom, ale skusime na to pozriet a precistit PC. Nevlozil si sice hlavny log FRST, ale k tomu sa tiez dostaneme.
Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/



- Uloz na plochu a ukonci vsetky programy
- Spusti AdwCleaner ako spravca
- Odsuhlas licencne podmienky
- Klikni na Skenovat nyni (Scan now) a pockaj na dokoncenie
- Nechaj zaskrtnute vsetky nalezy
- Klikni na Cisteni a opravy (Clean and Repair) a potvrd restart PC teraz
- Po restartovani PC sa otvori AdwCleaner, klikni na Zobrazit soubor protokolu
- Otvori sa log, jeho obsah sem skopiruj
Absolvent skoly pre novacikov 
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!

E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
Re: problikávání obrazovky noitebooku
Nejsem si jistý, zda to bylo provedeno správně.
-------------------------------
# Malwarebytes AdwCleaner 7.4.1.0
# -------------------------------
# Build: 09-04-2019
# Database: 2019-09-06.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 09-11-2019
# Duration: 00:00:24
# OS: Windows 10 Pro
# Scanned: 35598
# Detected: 0
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
No malicious folders found.
***** [ Files ] *****
No malicious files found.
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
No malicious registry entries found.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries found.
***** [ Chromium URLs ] *****
No malicious Chromium URLs found.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries found.
***** [ Firefox URLs ] *****
No malicious Firefox URLs found.
***** [ Preinstalled Software ] *****
No Preinstalled Software found.
AdwCleaner[S00].txt - [1419 octets] - [09/01/2019 17:17:44]
AdwCleaner[C00].txt - [1547 octets] - [09/01/2019 17:18:19]
AdwCleaner[S01].txt - [2576 octets] - [02/06/2019 22:22:20]
AdwCleaner[C01].txt - [2484 octets] - [02/06/2019 22:22:58]
AdwCleaner[S02].txt - [1515 octets] - [08/06/2019 00:51:39]
AdwCleaner[C02].txt - [1681 octets] - [08/06/2019 00:51:58]
AdwCleaner[S03].txt - [1615 octets] - [08/06/2019 16:17:22]
AdwCleaner[S04].txt - [1676 octets] - [08/06/2019 16:19:32]
AdwCleaner[C04].txt - [1862 octets] - [08/06/2019 16:19:46]
AdwCleaner_Debug.log - [50976 octets] - [09/09/2019 20:44:34]
AdwCleaner[S05].txt - [5123 octets] - [09/09/2019 20:45:12]
AdwCleaner[S06].txt - [5140 octets] - [09/09/2019 22:26:55]
AdwCleaner[C06].txt - [5664 octets] - [09/09/2019 22:27:43]
AdwCleaner[S07].txt - [2120 octets] - [11/09/2019 00:44:54]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S08].txt ##########
-------------------------------
# Malwarebytes AdwCleaner 7.4.1.0
# -------------------------------
# Build: 09-04-2019
# Database: 2019-09-06.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 09-11-2019
# Duration: 00:00:24
# OS: Windows 10 Pro
# Scanned: 35598
# Detected: 0
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
No malicious folders found.
***** [ Files ] *****
No malicious files found.
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
No malicious registry entries found.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries found.
***** [ Chromium URLs ] *****
No malicious Chromium URLs found.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries found.
***** [ Firefox URLs ] *****
No malicious Firefox URLs found.
***** [ Preinstalled Software ] *****
No Preinstalled Software found.
AdwCleaner[S00].txt - [1419 octets] - [09/01/2019 17:17:44]
AdwCleaner[C00].txt - [1547 octets] - [09/01/2019 17:18:19]
AdwCleaner[S01].txt - [2576 octets] - [02/06/2019 22:22:20]
AdwCleaner[C01].txt - [2484 octets] - [02/06/2019 22:22:58]
AdwCleaner[S02].txt - [1515 octets] - [08/06/2019 00:51:39]
AdwCleaner[C02].txt - [1681 octets] - [08/06/2019 00:51:58]
AdwCleaner[S03].txt - [1615 octets] - [08/06/2019 16:17:22]
AdwCleaner[S04].txt - [1676 octets] - [08/06/2019 16:19:32]
AdwCleaner[C04].txt - [1862 octets] - [08/06/2019 16:19:46]
AdwCleaner_Debug.log - [50976 octets] - [09/09/2019 20:44:34]
AdwCleaner[S05].txt - [5123 octets] - [09/09/2019 20:45:12]
AdwCleaner[S06].txt - [5140 octets] - [09/09/2019 22:26:55]
AdwCleaner[C06].txt - [5664 octets] - [09/09/2019 22:27:43]
AdwCleaner[S07].txt - [2120 octets] - [11/09/2019 00:44:54]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S08].txt ##########
Re: problikávání obrazovky noitebooku

Absolvent skoly pre novacikov 
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!

E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
Re: problikávání obrazovky noitebooku

- Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:
Kód: Vybrat vše
Start CloseProcesses: CreateRestorePoint: PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum CMD: type "C:\Program Files\Npcap\CheckStatus.bat" CMD: type "C:\Users\ruda6\AppData\Roaming\CPTW.dat" CMD: type "C:\Users\ruda6\AppData\Roaming\{B0E80E49-57AF-758F-AE9B-C68B46701F6B}" CMD: type "C:\Users\ruda6\AppData\Local\temp.bat" HKU\S-1-5-21-267884743-2030251231-2907502807-1001\...\MountPoints2: {c7d85400-dbe7-11e7-8776-94e97978fbde} - "E:\WD Drive Unlock.exe" autoplay=true Task: {024EF3F2-0C1F-4B2A-A740-022267F46FA3} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat Task: {2CD39BA4-A204-40A8-93A8-7FC973C2DD66} - System32\Tasks\CrystalDiskInfo => C:\Users\ruda6\Downloads\DiskInfo64.exe Task: {976C2481-603A-43FC-B954-F85ED601FD03} - \Microsoft\Windows\PLA\RPTB6BC.tmp -> No File <==== ATTENTION Task: {ABD5159D-36CD-41F7-AE79-B1DE2B200E1A} - \BraveSoftwareUpdateTaskMachineCore -> No File <==== ATTENTION Task: {E5B31FCA-5E55-420A-A17A-F3AB40954D5C} - \BraveSoftwareUpdateTaskMachineUA -> No File <==== ATTENTION FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=3 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [No File] FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=9 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [No File] CHR StartupUrls: Default -> "hxxps://www.google.cz/?pli=1","hxxps://www.seznam.cz/","hxxp://www.centrum.cz/" S2 brave; "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc [X] S3 bravem; "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /medsvc [X] S2 CCDMonitorService; "C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe" [X] S2 EpsonCustomerResearchParticipation; "C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe" [X] S3 QALSvc; "C:\Program Files\Acer\Acer Quick Access\QALSvc.exe" [X] S3 QASvc; "C:\Program Files\Acer\Acer Quick Access\QASvc.exe" [X] U4 npcap_wifi; no ImagePath U4 npf_wifi; no ImagePath 2017-12-10 13:09 - 2017-12-10 13:09 - 000000078 _____ () C:\Users\ruda6\AppData\Roaming\CPTW.dat 2018-08-21 17:05 - 2018-08-21 17:05 - 000000716 ____H () C:\Users\ruda6\AppData\Roaming\{B0E80E49-57AF-758F-AE9B-C68B46701F6B} 2019-02-25 11:51 - 2019-05-24 16:58 - 000000280 _____ () C:\Users\ruda6\AppData\Local\temp.bat 2019-07-06 00:28 - 2019-07-06 00:30 - 000000000 _____ () C:\Users\ruda6\AppData\Local\{8064110B-6B81-4AA7-9604-47065F031302} CustomCLSID: HKU\S-1-5-21-267884743-2030251231-2907502807-1001_Classes\CLSID\{930e604a-cc01-4d06-8d7a-5a07914f3afb}\localserver32 -> "C:\Program Files\TechSmith\Camtasia 2019\CamtasiaStudio.exe" -ToastActivated => No File ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File Hosts: EmptyTemp: End
- Uloz na plochu s nazvom fixlist.txt
- Spusti znovu FRST a klikni na Fix
- Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
- Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj
Absolvent skoly pre novacikov 
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!

E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
Re: problikávání obrazovky noitebooku
Fix result of Farbar Recovery Scan Tool (x64) Version: 08-09-2019
Ran by ruda6 (12-09-2019 19:38:03) Run:4
Running from C:\Users\ruda6\Desktop
Loaded Profiles: ruda6 (Available Profiles: ruda6 & DevToolsUser)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
CMD: type "C:\Program Files\Npcap\CheckStatus.bat"
CMD: type "C:\Users\ruda6\AppData\Roaming\CPTW.dat"
CMD: type "C:\Users\ruda6\AppData\Roaming\{B0E80E49-57AF-758F-AE9B-C68B46701F6B}"
CMD: type "C:\Users\ruda6\AppData\Local\temp.bat"
HKU\S-1-5-21-267884743-2030251231-2907502807-1001\...\MountPoints2: {c7d85400-dbe7-11e7-8776-94e97978fbde} - "E:\WD Drive Unlock.exe" autoplay=true
Task: {024EF3F2-0C1F-4B2A-A740-022267F46FA3} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat
Task: {2CD39BA4-A204-40A8-93A8-7FC973C2DD66} - System32\Tasks\CrystalDiskInfo => C:\Users\ruda6\Downloads\DiskInfo64.exe
Task: {976C2481-603A-43FC-B954-F85ED601FD03} - \Microsoft\Windows\PLA\RPTB6BC.tmp -> No File <==== ATTENTION
Task: {ABD5159D-36CD-41F7-AE79-B1DE2B200E1A} - \BraveSoftwareUpdateTaskMachineCore -> No File <==== ATTENTION
Task: {E5B31FCA-5E55-420A-A17A-F3AB40954D5C} - \BraveSoftwareUpdateTaskMachineUA -> No File <==== ATTENTION
FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=3 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [No File]
FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=9 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [No File]
CHR StartupUrls: Default -> "hxxps://www.google.cz/?pli=1","hxxps://www.sezn ... entrum.cz/"
S2 brave; "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc [X]
S3 bravem; "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /medsvc [X]
S2 CCDMonitorService; "C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe" [X]
S2 EpsonCustomerResearchParticipation; "C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe" [X]
S3 QALSvc; "C:\Program Files\Acer\Acer Quick Access\QALSvc.exe" [X]
S3 QASvc; "C:\Program Files\Acer\Acer Quick Access\QASvc.exe" [X]
U4 npcap_wifi; no ImagePath
U4 npf_wifi; no ImagePath
2017-12-10 13:09 - 2017-12-10 13:09 - 000000078 _____ () C:\Users\ruda6\AppData\Roaming\CPTW.dat
2018-08-21 17:05 - 2018-08-21 17:05 - 000000716 ____H () C:\Users\ruda6\AppData\Roaming\{B0E80E49-57AF-758F-AE9B-C68B46701F6B}
2019-02-25 11:51 - 2019-05-24 16:58 - 000000280 _____ () C:\Users\ruda6\AppData\Local\temp.bat
2019-07-06 00:28 - 2019-07-06 00:30 - 000000000 _____ () C:\Users\ruda6\AppData\Local\{8064110B-6B81-4AA7-9604-47065F031302}
CustomCLSID: HKU\S-1-5-21-267884743-2030251231-2907502807-1001_Classes\CLSID\{930e604a-cc01-4d06-8d7a-5a07914f3afb}\localserver32 -> "C:\Program Files\TechSmith\Camtasia 2019\CamtasiaStudio.exe" -ToastActivated => No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Hosts:
EmptyTemp:
End
*****************
Processes closed successfully.
Restore point was successfully created.
========= Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum =========
Count : 17
Average :
Sum : 1636281
Maximum :
Minimum :
Property : Length
========= End of Powershell: =========
========= type "C:\Program Files\Npcap\CheckStatus.bat" =========
Syst‚m nem…§e nal‚zt uvedenou cestu.
========= End of CMD: =========
========= type "C:\Users\ruda6\AppData\Roaming\CPTW.dat" =========
La/6R7d6R5o= 6E/LkC3KbjDzrGFmPzzJnqESL/OgdDoe 6E/LkC3KbjDzrGFmPzzJnqESL/OgdDoe
========= End of CMD: =========
========= type "C:\Users\ruda6\AppData\Roaming\{B0E80E49-57AF-758F-AE9B-C68B46701F6B}" =========
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
========= End of CMD: =========
========= type "C:\Users\ruda6\AppData\Local\temp.bat" =========
setlocal ENABLEDELAYEDEXPANSION
Set Process=purevpn_setup
:ppp
tasklist | Find /i "%Process%.exe" || (goto Else)
:THEN
goto ppp
:ELSE
%systemdrive%
cd %programfiles%
cd purevpn
if exist purevpn.exe start purevpn.exe
cd C:\Users\ruda6\AppData\Local
del temp.bat
Exit
========= End of CMD: =========
HKU\S-1-5-21-267884743-2030251231-2907502807-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c7d85400-dbe7-11e7-8776-94e97978fbde} => removed successfully
HKLM\Software\Classes\CLSID\{c7d85400-dbe7-11e7-8776-94e97978fbde} => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{024EF3F2-0C1F-4B2A-A740-022267F46FA3}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{024EF3F2-0C1F-4B2A-A740-022267F46FA3}" => removed successfully
C:\WINDOWS\System32\Tasks\npcapwatchdog => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\npcapwatchdog" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2CD39BA4-A204-40A8-93A8-7FC973C2DD66}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2CD39BA4-A204-40A8-93A8-7FC973C2DD66}" => removed successfully
C:\WINDOWS\System32\Tasks\CrystalDiskInfo => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CrystalDiskInfo" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{976C2481-603A-43FC-B954-F85ED601FD03}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{976C2481-603A-43FC-B954-F85ED601FD03}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\PLA\RPTB6BC.tmp" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{ABD5159D-36CD-41F7-AE79-B1DE2B200E1A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ABD5159D-36CD-41F7-AE79-B1DE2B200E1A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BraveSoftwareUpdateTaskMachineCore" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E5B31FCA-5E55-420A-A17A-F3AB40954D5C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E5B31FCA-5E55-420A-A17A-F3AB40954D5C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BraveSoftwareUpdateTaskMachineUA" => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@tools.brave.com/BraveSoftware Update;version=3 => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@tools.brave.com/BraveSoftware Update;version=9 => removed successfully
"Chrome StartupUrls" => removed successfully
HKLM\System\CurrentControlSet\Services\brave => removed successfully
brave => service removed successfully
HKLM\System\CurrentControlSet\Services\bravem => removed successfully
bravem => service removed successfully
HKLM\System\CurrentControlSet\Services\CCDMonitorService => removed successfully
CCDMonitorService => service removed successfully
HKLM\System\CurrentControlSet\Services\EpsonCustomerResearchParticipation => removed successfully
EpsonCustomerResearchParticipation => service removed successfully
HKLM\System\CurrentControlSet\Services\QALSvc => removed successfully
QALSvc => service removed successfully
HKLM\System\CurrentControlSet\Services\QASvc => removed successfully
QASvc => service removed successfully
HKLM\System\CurrentControlSet\Services\npcap_wifi => removed successfully
npcap_wifi => service removed successfully
HKLM\System\CurrentControlSet\Services\npf_wifi => removed successfully
npf_wifi => service removed successfully
C:\Users\ruda6\AppData\Roaming\CPTW.dat => moved successfully
C:\Users\ruda6\AppData\Roaming\{B0E80E49-57AF-758F-AE9B-C68B46701F6B} => moved successfully
C:\Users\ruda6\AppData\Local\temp.bat => moved successfully
C:\Users\ruda6\AppData\Local\{8064110B-6B81-4AA7-9604-47065F031302} => moved successfully
HKU\S-1-5-21-267884743-2030251231-2907502807-1001_Classes\CLSID\{930e604a-cc01-4d06-8d7a-5a07914f3afb} => removed successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => not found
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
=========== EmptyTemp: ==========
BITS transfer queue => 11821056 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 20093868 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 4724195 B
Edge => 11488640 B
Chrome => 352408 B
Firefox => 23278039 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 19754 B
LocalService => 0 B
NetworkService => 0 B
NetworkService => 0 B
ruda6 => 14240093 B
rudyk => 0 B
DevToolsUser => 0 B
defaultuser100000 => 7168 B
RecycleBin => 3643814 B
EmptyTemp: => 85.5 MB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 19:39:24 ====
Ran by ruda6 (12-09-2019 19:38:03) Run:4
Running from C:\Users\ruda6\Desktop
Loaded Profiles: ruda6 (Available Profiles: ruda6 & DevToolsUser)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
CMD: type "C:\Program Files\Npcap\CheckStatus.bat"
CMD: type "C:\Users\ruda6\AppData\Roaming\CPTW.dat"
CMD: type "C:\Users\ruda6\AppData\Roaming\{B0E80E49-57AF-758F-AE9B-C68B46701F6B}"
CMD: type "C:\Users\ruda6\AppData\Local\temp.bat"
HKU\S-1-5-21-267884743-2030251231-2907502807-1001\...\MountPoints2: {c7d85400-dbe7-11e7-8776-94e97978fbde} - "E:\WD Drive Unlock.exe" autoplay=true
Task: {024EF3F2-0C1F-4B2A-A740-022267F46FA3} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat
Task: {2CD39BA4-A204-40A8-93A8-7FC973C2DD66} - System32\Tasks\CrystalDiskInfo => C:\Users\ruda6\Downloads\DiskInfo64.exe
Task: {976C2481-603A-43FC-B954-F85ED601FD03} - \Microsoft\Windows\PLA\RPTB6BC.tmp -> No File <==== ATTENTION
Task: {ABD5159D-36CD-41F7-AE79-B1DE2B200E1A} - \BraveSoftwareUpdateTaskMachineCore -> No File <==== ATTENTION
Task: {E5B31FCA-5E55-420A-A17A-F3AB40954D5C} - \BraveSoftwareUpdateTaskMachineUA -> No File <==== ATTENTION
FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=3 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [No File]
FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=9 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [No File]
CHR StartupUrls: Default -> "hxxps://www.google.cz/?pli=1","hxxps://www.sezn ... entrum.cz/"
S2 brave; "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /svc [X]
S3 bravem; "C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe" /medsvc [X]
S2 CCDMonitorService; "C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe" [X]
S2 EpsonCustomerResearchParticipation; "C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe" [X]
S3 QALSvc; "C:\Program Files\Acer\Acer Quick Access\QALSvc.exe" [X]
S3 QASvc; "C:\Program Files\Acer\Acer Quick Access\QASvc.exe" [X]
U4 npcap_wifi; no ImagePath
U4 npf_wifi; no ImagePath
2017-12-10 13:09 - 2017-12-10 13:09 - 000000078 _____ () C:\Users\ruda6\AppData\Roaming\CPTW.dat
2018-08-21 17:05 - 2018-08-21 17:05 - 000000716 ____H () C:\Users\ruda6\AppData\Roaming\{B0E80E49-57AF-758F-AE9B-C68B46701F6B}
2019-02-25 11:51 - 2019-05-24 16:58 - 000000280 _____ () C:\Users\ruda6\AppData\Local\temp.bat
2019-07-06 00:28 - 2019-07-06 00:30 - 000000000 _____ () C:\Users\ruda6\AppData\Local\{8064110B-6B81-4AA7-9604-47065F031302}
CustomCLSID: HKU\S-1-5-21-267884743-2030251231-2907502807-1001_Classes\CLSID\{930e604a-cc01-4d06-8d7a-5a07914f3afb}\localserver32 -> "C:\Program Files\TechSmith\Camtasia 2019\CamtasiaStudio.exe" -ToastActivated => No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Hosts:
EmptyTemp:
End
*****************
Processes closed successfully.
Restore point was successfully created.
========= Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum =========
Count : 17
Average :
Sum : 1636281
Maximum :
Minimum :
Property : Length
========= End of Powershell: =========
========= type "C:\Program Files\Npcap\CheckStatus.bat" =========
Syst‚m nem…§e nal‚zt uvedenou cestu.
========= End of CMD: =========
========= type "C:\Users\ruda6\AppData\Roaming\CPTW.dat" =========
La/6R7d6R5o= 6E/LkC3KbjDzrGFmPzzJnqESL/OgdDoe 6E/LkC3KbjDzrGFmPzzJnqESL/OgdDoe
========= End of CMD: =========
========= type "C:\Users\ruda6\AppData\Roaming\{B0E80E49-57AF-758F-AE9B-C68B46701F6B}" =========
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
========= End of CMD: =========
========= type "C:\Users\ruda6\AppData\Local\temp.bat" =========
setlocal ENABLEDELAYEDEXPANSION
Set Process=purevpn_setup
:ppp
tasklist | Find /i "%Process%.exe" || (goto Else)
:THEN
goto ppp
:ELSE
%systemdrive%
cd %programfiles%
cd purevpn
if exist purevpn.exe start purevpn.exe
cd C:\Users\ruda6\AppData\Local
del temp.bat
Exit
========= End of CMD: =========
HKU\S-1-5-21-267884743-2030251231-2907502807-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c7d85400-dbe7-11e7-8776-94e97978fbde} => removed successfully
HKLM\Software\Classes\CLSID\{c7d85400-dbe7-11e7-8776-94e97978fbde} => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{024EF3F2-0C1F-4B2A-A740-022267F46FA3}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{024EF3F2-0C1F-4B2A-A740-022267F46FA3}" => removed successfully
C:\WINDOWS\System32\Tasks\npcapwatchdog => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\npcapwatchdog" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2CD39BA4-A204-40A8-93A8-7FC973C2DD66}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2CD39BA4-A204-40A8-93A8-7FC973C2DD66}" => removed successfully
C:\WINDOWS\System32\Tasks\CrystalDiskInfo => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CrystalDiskInfo" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{976C2481-603A-43FC-B954-F85ED601FD03}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{976C2481-603A-43FC-B954-F85ED601FD03}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\PLA\RPTB6BC.tmp" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{ABD5159D-36CD-41F7-AE79-B1DE2B200E1A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ABD5159D-36CD-41F7-AE79-B1DE2B200E1A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BraveSoftwareUpdateTaskMachineCore" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E5B31FCA-5E55-420A-A17A-F3AB40954D5C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E5B31FCA-5E55-420A-A17A-F3AB40954D5C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BraveSoftwareUpdateTaskMachineUA" => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@tools.brave.com/BraveSoftware Update;version=3 => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@tools.brave.com/BraveSoftware Update;version=9 => removed successfully
"Chrome StartupUrls" => removed successfully
HKLM\System\CurrentControlSet\Services\brave => removed successfully
brave => service removed successfully
HKLM\System\CurrentControlSet\Services\bravem => removed successfully
bravem => service removed successfully
HKLM\System\CurrentControlSet\Services\CCDMonitorService => removed successfully
CCDMonitorService => service removed successfully
HKLM\System\CurrentControlSet\Services\EpsonCustomerResearchParticipation => removed successfully
EpsonCustomerResearchParticipation => service removed successfully
HKLM\System\CurrentControlSet\Services\QALSvc => removed successfully
QALSvc => service removed successfully
HKLM\System\CurrentControlSet\Services\QASvc => removed successfully
QASvc => service removed successfully
HKLM\System\CurrentControlSet\Services\npcap_wifi => removed successfully
npcap_wifi => service removed successfully
HKLM\System\CurrentControlSet\Services\npf_wifi => removed successfully
npf_wifi => service removed successfully
C:\Users\ruda6\AppData\Roaming\CPTW.dat => moved successfully
C:\Users\ruda6\AppData\Roaming\{B0E80E49-57AF-758F-AE9B-C68B46701F6B} => moved successfully
C:\Users\ruda6\AppData\Local\temp.bat => moved successfully
C:\Users\ruda6\AppData\Local\{8064110B-6B81-4AA7-9604-47065F031302} => moved successfully
HKU\S-1-5-21-267884743-2030251231-2907502807-1001_Classes\CLSID\{930e604a-cc01-4d06-8d7a-5a07914f3afb} => removed successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => not found
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
=========== EmptyTemp: ==========
BITS transfer queue => 11821056 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 20093868 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 4724195 B
Edge => 11488640 B
Chrome => 352408 B
Firefox => 23278039 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 19754 B
LocalService => 0 B
NetworkService => 0 B
NetworkService => 0 B
ruda6 => 14240093 B
rudyk => 0 B
DevToolsUser => 0 B
defaultuser100000 => 7168 B
RecycleBin => 3643814 B
EmptyTemp: => 85.5 MB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 19:39:24 ====
Re: problikávání obrazovky noitebooku


- Otvor Start, napis "cmd" (bez uvodzoviek), klikni pravym tlacitkom mysi na Prikazovy riadok a klikni na Spustit ako spravca
- Skopiruj a spusti prikaz:
Kód: Vybrat vše
DISM.exe /Online /Cleanup-image /Restorehealth
- Po dokonceni skopiruj a spusti druhy prikaz:
Kód: Vybrat vše
sfc /scannow
- Po dokonceni obidvoch prikazov skopiruj a spusti tento prikaz:
Kód: Vybrat vše
findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >> "%userprofile%\desktop\sfcdetails.txt" && copy %windir%\logs\dism\dism.log %userprofile%\desktop\dism.txt
- Na ploche sa vytvoria subory sfcdetails.txt a dism.txt, tieto subory zabal ho do archivu RAR alebo ZIP a posli ako prilohu k dalsiemu prispevku
- Restartuj PC a napis ako sa chova PC
Absolvent skoly pre novacikov 
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!

E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
Re: problikávání obrazovky noitebooku
přík. 1 + 2
(c) 2019 Microsoft Corporation. Všechna práva vyhrazena.
C:\WINDOWS\system32>DISM.exe /Online /Cleanup-image /Restorehealth
Deployment Image Servicing and Management tool
Version: 10.0.18362.1
Image Version: 10.0.18362.10019
[==========================100.0%==========================]
C:\WINDOWS\system32>sfc /scannow
Beginning system scan. This process will take some time.
Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection did not find any integrity violations.
(c) 2019 Microsoft Corporation. Všechna práva vyhrazena.
C:\WINDOWS\system32>DISM.exe /Online /Cleanup-image /Restorehealth
Deployment Image Servicing and Management tool
Version: 10.0.18362.1
Image Version: 10.0.18362.10019
[==========================100.0%==========================]
C:\WINDOWS\system32>sfc /scannow
Beginning system scan. This process will take some time.
Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection did not find any integrity violations.
- Přílohy
-
- sfcdetails.zip
- (9.94 KiB) Staženo 130 x
Re: problikávání obrazovky noitebooku
Blikání nepřestalo. Ze snímku to však není patrné. Nahrál jsem krátké video cca. 12 MB, ale touto cestou to asi nejde odeslat.
Re: problikávání obrazovky noitebooku
Sděl mi prosím kontakt a já tam pošlu to krátké video s nahraným chováním monitoru.
Re: problikávání obrazovky noitebooku
Mozes ho poslat na e-mail v popise, alebo ho mozes nahrat na nejake webove ulozisko a poslat odkaz na stiahnutie.
Absolvent skoly pre novacikov 
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!

E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!