Kontrola logu a BIOSu

[Rudy]

Pokud byla v systému chyba, mohlo se to stát. Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKU\S-1-5-21-93754314-3111490570-4120607304-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\danie\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)
HKU\S-1-5-21-93754314-3111490570-4120607304-1001\...\RunOnce: [Uninstall 23.081.0416.0001] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\danie\AppData\Local\Microsoft\OneDrive\23.081.0416.0001" [0 2025-03-23] () <==== ATTENTION [zero byte File/Folder]
Task: {C7FCDE46-F8B6-4BB7-AA32-DFF92C6B74DC} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {45CF73C8-9A94-47C5-8E45-347738A58FC5} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
U3 aspnet_state; no ImagePath
U3 aswArDisk; no ImagePath
C:\DumpStack.log.tmp
FirewallRules: [{E2A1351D-0889-4B15-9E99-C999AD04A423}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24295.401.3195.9406_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{6ABBADD3-57FA-4516-8FB3-F6D501CBB91A}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24295.401.3195.9406_x64__8wekyb3d8bbwe\msteams.exe => No File

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
McAffee tam ovšem máte stále. Pokud ho chcete odstranit, použijte odinstalátor: https://www.asus.com/cz/support/faq/1034198/ (Metoda B). Také je možné ho vypnout a systém sám by měl přejít na Avast. Dále doporučuji zapnout System restore. Pak budete moci případně vrátit systém časouvě zpět. Ušetříte si tím reinstal.

[danek]

Tak jsem odinstaloval McAffee tím instalátorem a provedl jsem ty změny pomocí FRST a toho kódu. Níže je log. Taky jsem musel zapnout ochranu systému, byla vypnutá. Ve vlastnostech systému v části ochrana systému mám ale v nastavení ochrany uvedeny tři jednotky- Dada (D:), Windows (C:), a pak ještě nějaký adresáž \\?\Volume(nějaká kombinace písmen, pomlček a číslic). Ten třetí nevím, co je.

Taky mi tam chybí nějaké Windows aplikace, musel jsem znovu nainstalovat poznámkový blok a nemám tam výstřižky.

Níže je ten log:

Fix result of Farbar Recovery Scan Tool (x64) Version: 24-03-2025
Ran by Dan (24-03-2025 22:03:26) Run:15
Running from C:\Users\danie\Desktop
Loaded Profiles: Dan & Dan2
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKU\S-1-5-21-93754314-3111490570-4120607304-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\danie\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)
HKU\S-1-5-21-93754314-3111490570-4120607304-1001\...\RunOnce: [Uninstall 23.081.0416.0001] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\danie\AppData\Local\Microsoft\OneDrive\23.081.0416.0001" [0 2025-03-23] () <==== ATTENTION [zero byte File/Folder]
Task: {C7FCDE46-F8B6-4BB7-AA32-DFF92C6B74DC} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {45CF73C8-9A94-47C5-8E45-347738A58FC5} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
U3 aspnet_state; no ImagePath
U3 aswArDisk; no ImagePath
C:\DumpStack.log.tmp
FirewallRules: [{E2A1351D-0889-4B15-9E99-C999AD04A423}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24295.401.3195.9406_x64__8wekyb3d8bbwe\msteams.exe => No File
FirewallRules: [{6ABBADD3-57FA-4516-8FB3-F6D501CBB91A}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24295.401.3195.9406_x64__8wekyb3d8bbwe\msteams.exe => No File

EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{C885AA15-1764-4293-B82A-0586ADD46B35} => removed successfully
"HKU\S-1-5-21-93754314-3111490570-4120607304-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Delete Cached Standalone Update Binary" => not found
"HKU\S-1-5-21-93754314-3111490570-4120607304-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Uninstall 23.081.0416.0001" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C7FCDE46-F8B6-4BB7-AA32-DFF92C6B74DC}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C7FCDE46-F8B6-4BB7-AA32-DFF92C6B74DC}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Location\Notifications => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Location\Notifications" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{45CF73C8-9A94-47C5-8E45-347738A58FC5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{45CF73C8-9A94-47C5-8E45-347738A58FC5}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => removed successfully
HKLM\System\CurrentControlSet\Services\aspnet_state => removed successfully
aspnet_state => service removed successfully
HKLM\System\CurrentControlSet\Services\aswArDisk => removed successfully
aswArDisk => service removed successfully
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E2A1351D-0889-4B15-9E99-C999AD04A423}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6ABBADD3-57FA-4516-8FB3-F6D501CBB91A}" => removed successfully

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 17958533 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 41211592 B
Edge => 0 B
Chrome => 215439096 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 1697276 B
systemprofile32 => 1697276 B
LocalService => 1712766 B
NetworkService => 1716138 B
danie => 167998475 B
defaultuser100000 => 167998475 B
Dan2 => 168011553 B

RecycleBin => 4314417620 B
EmptyTemp: => 4.8 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 24-03-2025 22:05:28)

C:\DumpStack.log.tmp => Could not move

==== End of Fixlog 22:05:28 ====

[Rudy]

Vše bylo smazáno. Nevbím, proč vám zmizely ty aplikace, FRST to neudělal takový příkaz nedostal. Log je již OK.

[danek]

Zdravím,

ano, děkuji moc za pomoc. Vypadá to, že to teď funguje.

Ty aplikace zmizely po reinstalaci Windows do továrního nastavení, ne v důsledku FRST. Nedávno jsem jedno tovární nastavení dělal a taky jsem musel znovu nainstalovat poznámkový blok.

Ještě jednou děkuji a přeji hezký zbytek dne.

[Rudy]

Asi nějaký extra poznámkový blok. Jinak je součástí OS. Hezký den a nemáte zač!