VIRY.CZ

Otvor poznamkovy blok (Win+R -> notepad -> enter)

• Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

  Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
  
  Task: {018A7FB1-92C8-45D0-BCC2-6932C28DD4E4} - System32\Tasks\{F486B823-FDA6-474B-BE57-E56C7DAD06C9} => D:\Drivers\Skener\Setup.exe
  Task: {405BF12C-C74F-4045-B39D-B4EE9369EB80} - System32\Tasks\{0DE8AAA4-D5B9-4C6C-B8D0-42318672425B} => D:\Drivers\GeniusColorPage-HR6USB15.exe
  Task: {C0ACFFE6-63A2-4D54-B4F5-705741E2FB06} - System32\Tasks\{3BD960A7-BA29-4593-9F71-46921FF7F40A} => C:\Windows\system32\pcalua.exe -a "D:\Drivers\Skener\driver-genius-colorpage-hr6x\ColorPage-HR6X Slim\setup.exe" -d "D:\Drivers\Skener\driver-genius-colorpage-hr6x\ColorPage-HR6X Slim"
  Task: {DE56A111-C174-4F8F-8143-B7D956F0A5E0} - System32\Tasks\{A16E613C-A29E-478A-B50F-262DDE93A16E} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\OpenOffice.org 3\program\quickstart.exe" -d "C:\Program Files\OpenOffice.org 3\program"
  U3 iswSvc; no ImagePath
  2013-07-14 19:42 - 2013-07-14 19:45 - 145388814 _____ () C:\Users\User\AppData\Local\ACCCx183.zip.aamdownload
  2013-07-14 19:42 - 2013-07-14 19:45 - 000001726 _____ () C:\Users\User\AppData\Local\ACCCx183.zip.aamdownload.aamd
  2013-07-27 16:48 - 2013-07-27 16:57 - 145394418 _____ () C:\Users\User\AppData\Local\ACCCx189.zip.aamdownload
  2013-07-27 16:48 - 2013-07-27 16:56 - 000001726 _____ () C:\Users\User\AppData\Local\ACCCx189.zip.aamdownload.aamd
  ContextMenuHandlers1: [ZLAVShExt] -> {D9872D13-7651-4471-9EEE-F0A00218BEBB} =>  -> No File
  ContextMenuHandlers6: [ZLAVShExt] -> {D9872D13-7651-4471-9EEE-F0A00218BEBB} =>  -> No File
  
  Hosts:
  EmptyTemp:
  End

• Uloz na plochu s nazvom fixlist.txt
• Spusti znovu FRST a klikni na Fix
• Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
• Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj

Vkládám fixlog, ale po restartu se objevilo nějaké chybové hlášení u FRST error a nějaké číslo. Nestačil jsem poznamenat. Snad to proběhlo jak mělo. Dík za další postup.
---------------

Fix result of Farbar Recovery Scan Tool (x86) Version: 26-06-2019
Ran by User (29-06-2019 21:26:32) Run:2
Running from C:\Users\User\Desktop
Loaded Profiles: User (Available Profiles: User)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum

Task: {018A7FB1-92C8-45D0-BCC2-6932C28DD4E4} - System32\Tasks\{F486B823-FDA6-474B-BE57-E56C7DAD06C9} => D:\Drivers\Skener\Setup.exe
Task: {405BF12C-C74F-4045-B39D-B4EE9369EB80} - System32\Tasks\{0DE8AAA4-D5B9-4C6C-B8D0-42318672425B} => D:\Drivers\GeniusColorPage-HR6USB15.exe
Task: {C0ACFFE6-63A2-4D54-B4F5-705741E2FB06} - System32\Tasks\{3BD960A7-BA29-4593-9F71-46921FF7F40A} => C:\Windows\system32\pcalua.exe -a "D:\Drivers\Skener\driver-genius-colorpage-hr6x\ColorPage-HR6X Slim\setup.exe" -d "D:\Drivers\Skener\driver-genius-colorpage-hr6x\ColorPage-HR6X Slim"
Task: {DE56A111-C174-4F8F-8143-B7D956F0A5E0} - System32\Tasks\{A16E613C-A29E-478A-B50F-262DDE93A16E} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\OpenOffice.org 3\program\quickstart.exe" -d "C:\Program Files\OpenOffice.org 3\program"
U3 iswSvc; no ImagePath
2013-07-14 19:42 - 2013-07-14 19:45 - 145388814 _____ () C:\Users\User\AppData\Local\ACCCx183.zip.aamdownload
2013-07-14 19:42 - 2013-07-14 19:45 - 000001726 _____ () C:\Users\User\AppData\Local\ACCCx183.zip.aamdownload.aamd
2013-07-27 16:48 - 2013-07-27 16:57 - 145394418 _____ () C:\Users\User\AppData\Local\ACCCx189.zip.aamdownload
2013-07-27 16:48 - 2013-07-27 16:56 - 000001726 _____ () C:\Users\User\AppData\Local\ACCCx189.zip.aamdownload.aamd
ContextMenuHandlers1: [ZLAVShExt] -> {D9872D13-7651-4471-9EEE-F0A00218BEBB} => -> No File
ContextMenuHandlers6: [ZLAVShExt] -> {D9872D13-7651-4471-9EEE-F0A00218BEBB} => -> No File

Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.

========= Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum =========



Count : 26
Average :
Sum : 8824086
Maximum :
Minimum :
Property : Length


========= End of Powershell: =========

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{018A7FB1-92C8-45D0-BCC2-6932C28DD4E4}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{018A7FB1-92C8-45D0-BCC2-6932C28DD4E4}" => removed successfully.
C:\Windows\System32\Tasks\{F486B823-FDA6-474B-BE57-E56C7DAD06C9} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{F486B823-FDA6-474B-BE57-E56C7DAD06C9}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{405BF12C-C74F-4045-B39D-B4EE9369EB80}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{405BF12C-C74F-4045-B39D-B4EE9369EB80}" => removed successfully.
C:\Windows\System32\Tasks\{0DE8AAA4-D5B9-4C6C-B8D0-42318672425B} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{0DE8AAA4-D5B9-4C6C-B8D0-42318672425B}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C0ACFFE6-63A2-4D54-B4F5-705741E2FB06}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0ACFFE6-63A2-4D54-B4F5-705741E2FB06}" => removed successfully.
C:\Windows\System32\Tasks\{3BD960A7-BA29-4593-9F71-46921FF7F40A} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{3BD960A7-BA29-4593-9F71-46921FF7F40A}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DE56A111-C174-4F8F-8143-B7D956F0A5E0}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DE56A111-C174-4F8F-8143-B7D956F0A5E0}" => removed successfully.
C:\Windows\System32\Tasks\{A16E613C-A29E-478A-B50F-262DDE93A16E} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{A16E613C-A29E-478A-B50F-262DDE93A16E}" => removed successfully.
HKLM\System\CurrentControlSet\Services\iswSvc => removed successfully.
iswSvc => service removed successfully.
C:\Users\User\AppData\Local\ACCCx183.zip.aamdownload => moved successfully
C:\Users\User\AppData\Local\ACCCx183.zip.aamdownload.aamd => moved successfully
C:\Users\User\AppData\Local\ACCCx189.zip.aamdownload => moved successfully
C:\Users\User\AppData\Local\ACCCx189.zip.aamdownload.aamd => moved successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ZLAVShExt => could not remove, key could be protected
HKLM\Software\Classes\CLSID\{D9872D13-7651-4471-9EEE-F0A00218BEBB} => not found
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\ZLAVShExt => could not remove, key could be protected
HKLM\Software\Classes\CLSID\{D9872D13-7651-4471-9EEE-F0A00218BEBB} => not found
Could not move "C:\Windows\System32\Drivers\etc\hosts" => Scheduled to move on reboot.

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 5945703 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 2908883 B
Edge => 0 B
Chrome => 388259 B
Firefox => 212167509 B
Opera => 10969714 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 0 B
LocalService => 0 B
NetworkService => 9434 B
User => 694407 B

RecycleBin => 0 B
EmptyTemp: => 230.3 MB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 29-06-2019 21:36:24)

"C:\Windows\System32\Drivers\etc\hosts" => Could not move.
Could not restore Hosts.

Result of scheduled keys to remove after reboot:

HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ZLAVShExt => could not remove, key could be protected
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\ZLAVShExt => could not remove, key could be protected

==== End of Fixlog 21:36:24 ====

Spusti kontrolu integrity systemovych suborov:

• Otvor Start, napis "cmd" (bez uvodzoviek), klikni pravym tlacitkom mysi na Prikazovy riadok a klikni na Spustit ako spravca
• Skopiruj a spusti prikaz:

  Kód: Vybrat vše

  DISM.exe /Online /Cleanup-image /Restorehealth

• Po dokonceni skopiruj a spusti druhy prikaz:

  Kód: Vybrat vše

  sfc /scannow

• Po dokonceni obidvoch prikazov skopiruj a spusti tento prikaz:

  Kód: Vybrat vše

  findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >> "%userprofile%\desktop\sfcdetails.txt" && copy %windir%\logs\dism\dism.log %userprofile%\desktop\dism.txt

• Na ploche sa vytvoria subory sfcdetails.txt a dism.txt, tieto subory zabal ho do archivu RAR alebo ZIP a posli ako prilohu k dalsiemu prispevku
• Restartuj PC a napis ako sa chova PC

Tiez odporucam doinstalovat vsetky dolezite aktualizacie cez Windows Update.

Posílám zazipované soubory dle instrukcí. Teď budu po 16:00 3 týdny mimo. Další krok udělám pak. Díky za trpělivost. Po tu dobu bude PC používat tatínek. Dám pak vědět jak to funguje. Díky za další postup.

OK, potom sa ozvi, ako to zatial vyzera s PC.

Medzitym este mozes precistit PC cez CCleaner (podla logu je nainstalovany).

Aź tam na chaloupce u druhého PC budu, tak se ozvu. CC Cleaner použijeme vždy než vypneme PC.
Dík za trpělivost.

OK pockam, nie je zaco

Tatínek dnes říkal, že se tam objevilo jakési hlášení, že je slabá baterie,ale PC zatím běží. Datum a čas o.k. Snad to vydrží než tam budu. Nerad by přišel o data. Také to nějak nechtělo zkousnout flešku (že tam je). Mě to o víkendu také nechtělo vzít, ale na podruhé jí to vzalo. Fleška funguje o.k. Občas i externí čtečka chvíli trvá než jí to zaregistruje.
Dík za trpělivost. Pak se ozvu.

OK, potom posli aj nasledujuci log:

Stiahni CrystalDiskInfo: https://crystalmark.info/redirect.php?p ... alDiskInfo

• Rozbal cely archiv na plochu a spusti cez DiskInfo64.exe alebo DiskInfo32.exe
• Hore klikni na Upravy (Edit) -> Kopirovat (Copy)
• Skopiruje sa log, jeho obsah vloz (Ctrl+V) do dalsej odpovedi

Již je to o.k. Budu mít a chatě nový PC.
Omlouvám se za pozdní reakci.

OK