VIRY.CZ

Dobrý den,
rád bych poprosil o kntrolu logu. PC se mi při hře nepravidelně vypíná. Nezdá se mi, že by to bylo přehříváním a asi před měsícem jsem to čistil od prachu i vevnitř....

V příloze posílám logy z FRST a HJT.

Předem moc děkuji

Zdravím!
V těchto případech je to častěji hw problém. Nicméně zkusíme PC vyčistit. Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Dobrý den,
děkuji za radu. Tak snad s něco vyčistilo, děkuji.

# -------------------------------
# Malwarebytes AdwCleaner 8.0.5.0
# -------------------------------
# Build: 05-25-2020
# Database: 2020-05-26.2 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 05-31-2020
# Duration: 00:00:03
# OS: Windows 10 Home
# Cleaned: 33
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Program Files (x86)\Seznam.cz
Deleted C:\Users\SnejQ\AppData\Roaming\DriverAgentPlus
Deleted C:\Users\SnejQ\AppData\Roaming\Seznam.cz

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\Conduit
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|cz.seznam.software.szndesktop
Deleted HKCU\Software\PRODUCTSETUP
Deleted HKCU\Software\Seznam.cz
Deleted HKCU\Software\csastats
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|seznam-listicka-distribuce
Deleted HKLM\Software\Wow6432Node\Conduit

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

Deleted Preinstalled.LenovoCCSDK Folder C:\Program Files (x86)\LENOVO\CCSDK
Deleted Preinstalled.LenovoCCSDK Folder C:\ProgramData\LENOVO\CCSDK
Deleted Preinstalled.LenovoCCSDK Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{67827BB6-4B05-6181-921A-E49FC484E859}
Deleted Preinstalled.LenovoIMController Folder C:\ProgramData\LENOVO\IMCONTROLLER
Deleted Preinstalled.LenovoIMController Folder C:\Users\SnejQ\AppData\Local\LENOVO\IMCONTROLLER
Deleted Preinstalled.LenovoIMController Folder C:\Windows\LENOVO\IMCONTROLLER
Deleted Preinstalled.LenovoIMController Folder C:\Windows\System32\Tasks\LENOVO\IMCONTROLLER
Deleted Preinstalled.LenovoIMController Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\Lenovo Dependency Package_is1
Deleted Preinstalled.LenovoPhotoMaster Registry HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|PhotoMasterImportAgent
Deleted Preinstalled.LenovoREACHit Folder C:\Program Files (x86)\LENOVO\REACHIT
Deleted Preinstalled.LenovoREACHit Folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LENOVO\REACHIT
Deleted Preinstalled.LenovoREACHit Folder C:\Users\SnejQ\AppData\Local\LENOVO\REACHIT
Deleted Preinstalled.LenovoREACHit Registry HKLM\Software\Classes\CLSID\{2B3256D4-49AA-11D1-8429-0050AE509033}
Deleted Preinstalled.LenovoREACHit Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved|{2B3256D4-49AA-11D1-8429-0050AE509033}
Deleted Preinstalled.LenovoREACHit Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{4532E4C5-C84D-4040-A044-ECFCC5C6995B}
Deleted Preinstalled.LenovoSHAREit Folder C:\Program Files (x86)\LENOVO\SHAREIT
Deleted Preinstalled.LenovoSHAREit Folder C:\Users\SnejQ\AppData\Local\LENOVO\SHAREIT
Deleted Preinstalled.LenovoSHAREit Registry HKLM\Software\Classes\CLSID\{430BD134-576D-4E75-87CD-0F5C6221A82B}
Deleted Preinstalled.LenovoSHAREit Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\SHAREit_is1
Deleted Preinstalled.LenovoSolutionCenter Folder C:\Program Files\LENOVO\LENOVO SOLUTION CENTER
Deleted Preinstalled.LenovoSolutionCenter Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{558E50EE-5E2D-479A-A455-8A826191583B}
Deleted Preinstalled.LenovoUtility Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|LenovoUtility
Deleted Preinstalled.LenovoUtility Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Run|LenovoUtility


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [4549 octets] - [31/05/2020 09:21:26]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Dejte nové logy FRST+Addition.

OK, posílám v příloze.

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-2535104074-2805541861-1108262570-1001\...\MountPoints2: {8dac3966-a8fd-11e8-af4b-54ee759e7a30} - "I:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2535104074-2805541861-1108262570-1001\...\MountPoints2: {9ac7630d-0580-11ea-af72-54ee759e7a30} - "J:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2535104074-2805541861-1108262570-1001\...\MountPoints2: {9ac763f2-0580-11ea-af72-54ee759e7a30} - "J:\HiSuiteDownLoader.exe"
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {1F14706C-5CBC-40A7-B943-8DBF2DB558A2} - \Lenovo\ImController\TimeBasedEvents\0cf0124b-65bd-4f00-b683-c91bc70917b3 -> No File <==== ATTENTION
Task: {28D06DD0-4F63-48AD-B545-42C05FD0194F} - System32\Tasks\{FBCB72B9-E7B1-40EA-A1F7-7CD902D22DBD} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Ubisoft\Assassin's Creed II\AssassinsCreedII.exe" -d "C:\Program Files (x86)\Ubisoft\Assassin's Creed II"
Task: {3D8C8FF1-BE3F-47E5-BE1F-EF0A12FB50A7} - \Lenovo\ImController\TimeBasedEvents\f8377f21-4145-4174-be86-96b146bb826a -> No File <==== ATTENTION
Task: {502341FF-A71E-4697-B8D6-8900261180DE} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {56795175-B014-4497-8A78-30F88E70ABF5} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> No File <==== ATTENTION
Task: {99D6D515-9616-4CC9-8EE4-FD7DFAF34C79} - \Lenovo\ImController\TimeBasedEvents\77899ac4-9dbb-4a2b-8146-d91dd3ab523d -> No File <==== ATTENTION
Task: {9E7AA67A-5D62-4243-A2D0-CBE3EBCDEB71} - \Lenovo\ImController\TimeBasedEvents\4f44a6b7-7dce-4f1e-9b83-fdedb98a5fa8 -> No File <==== ATTENTION
Task: {AECD355E-9558-4748-943F-DA8740019033} - System32\Tasks\{3736D42E-35ED-47D2-BD5C-E0953C3A9D57} => C:\WINDOWS\system32\pcalua.exe -a "D:\Warcraft III\Frozen Throne.exe" -d "D:\Warcraft III"
Task: {EA30B6DC-B905-4AB4-B5C6-D1BE8A26D320} - System32\Tasks\DefenderUpdate => c:\windows\lsass.exe <==== ATTENTION
Task: {EDCE72B0-8320-4305-8D73-9AB971B934B9} - \Lenovo\ImController\Lenovo iM Controller Monitor -> No File <==== ATTENTION
Task: {F1B626E4-5A67-4B04-98C7-D0EBC4EB3DCA} - \Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask -> No File <==== ATTENTION
HKU\S-1-5-21-2535104074-2805541861-1108262570-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com
SearchScopes: HKU\S-1-5-21-2535104074-2805541861-1108262570-1001 -> DefaultScope {3FBE490D-6D0C-4F64-AF4F-0920D16A0551} URL =
SearchScopes: HKU\S-1-5-21-2535104074-2805541861-1108262570-1001 -> {3FBE490D-6D0C-4F64-AF4F-0920D16A0551} URL =
C:\WINDOWS\system32\Tasks\{FBCB72B9-E7B1-40EA-A1F7-7CD902D22DBD}
C:\WINDOWS\system32\Tasks\{E33C8878-9CFC-4C6A-BE6D-C062506FF60E}
C:\WINDOWS\system32\Tasks\{3736D42E-35ED-47D2-BD5C-E0953C3A9D57}
ContextMenuHandlers1: [SHAREit.FileContextMenuExt] -> {430BD134-576D-4E75-87CD-0F5C6221A82B} => -> No File
ContextMenuHandlers4: [SHAREit.FileContextMenuExt] -> {430BD134-576D-4E75-87CD-0F5C6221A82B} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
FirewallRules: [UDP Query User{0A86AA02-125D-4002-8CAF-1BD3845850AC}C:\program files (x86)\lenovo\shareit\shareit.exe] => (Block) C:\program files (x86)\lenovo\shareit\shareit.exe => No File
FirewallRules: [TCP Query User{8225E9DE-4382-4A1E-9F1D-F850F92A7DFB}C:\program files (x86)\lenovo\shareit\shareit.exe] => (Block) C:\program files (x86)\lenovo\shareit\shareit.exe => No File
FirewallRules: [{93B0F301-9D25-4C5C-A4B6-3154AB6D6F42}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{003E95C8-FA66-4D8D-A987-E4CA31B4757D}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File

EmptyTemp:
End

Uložte do C:\Users\SnejQ\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.