VIRY.CZ

Dobrý den, Rudy a kolegové.
Prosím o pomoc se starším PC. Syn mi tvrdí, že se mu sekne po cca. půl hodině hraní a musí PC vypnout. Já dnes zkoušel aktualizace W10 - dobře 4 hodiny PC funguje, teploty vyskočí nejvýš u procesoru na max. 65°C.
Mrkněte se prosím do logů, jestli tam něco neblbne...
Jediný problém mám prokazatelně v tom, že při restartu PC se počítač nevypne - nerestartuje. Jenom vrní a musím ho vypnout - pak se zapne.
Uvažujeme o zdroji - je tam už hodně starý 350W...
Může to být mnoha dalšími důvody - zkuste prosím poradit, na co se vrhnout.
Díky

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

OK. Dejte nové logy FRST+Addition.

Log additom je OK, ale FRST prakticky zcela chybí. Měl by vypadat asi takto: https://forum.viry.cz/viewtopic.php?p=1532774#p1532774 . Bez obou kompletních logů nelze nic řešit.

se mi asi blbě generoval... zkusím znovu za chvilku

Asi je vidět, že to našlo trojana a milion mrch, ale jestli to souvisí s tím problémem "nevypínání" PC při restartu si nejsem jist.

tak hotovo - asi byl problém v zapnutém antiviru po restartu pc..

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2020-02-22]
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {1217B21C-941C-439E-A017-3AF82C7BE634} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-02-02] (Google LLC -> Google LLC)
Task: {13C614A2-4CA7-4502-8DF3-FF32B37058FD} - System32\Tasks\AdvancedUpdater => C:\Program Files (x86)\AdvancedWindowsManager\Windows Installer\Windows Updater.exe [895112 2020-02-21] (MICROLEAVES LTD -> AdvancedWindowsManager) <==== ATTENTION
Task: {24EDCAB4-9225-4CCD-8BBF-43FF4E1BB144} - \Microsoft\Windows\Setup\EOSNotify2 -> No File <==== ATTENTION
Task: {702E3BE1-10D0-4064-A1F7-01E3EE5CEE7D} - \Microsoft\Windows\Setup\EOSNotify -> No File <==== ATTENTION
Task: {A81262C0-C6C0-4F3E-B1B9-C8C3A638F149} - System32\Tasks\{B5E7A151-B002-4FA1-A9C8-ED178D042E0A} => C:\Windows\system32\pcalua.exe -a C:\Users\Fafa\Downloads\aomwin200ea24.exe -d C:\Users\Fafa\Downloads
Task: {B845D7B8-80C0-4DAD-88C5-FE6AFC208EC4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-02-02] (Google LLC -> Google LLC)
U3 idsvc; no ImagePath
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\system32\Tasks\{B5E7A151-B002-4FA1-A9C8-ED178D042E0A}
C:\WINDOWS\system32\Tasks\{E43F0E80-46BB-4CF6-834D-65A783E66C2B}
C:\WINDOWS\system32\Tasks\{80CC6ADE-8C21-4537-A158-A4456ED86552}
C:\DumpStack.log.tmp
C:\Program Files (x86)\GUTF6AE.tmp
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers3: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [474]
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
FirewallRules: [{A3E3CD59-D453-4CE3-8D9B-791F84FFDE7A}] => (Allow) C:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe => No File
FirewallRules: [{4359F49B-B7E0-48A4-9DFA-451403EF1422}] => (Allow) C:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe => No File

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Tak jsme asi skončili... po restartu se nedostanu ani do biosu. Na obrazovce nic... ani když hodím monitor přímo na desku - vyjmu grafickou kartu.
Po zapnutí se všechno točí - větráčky a chladiče, ale nepípne a neblikne
Asi tedy odcházela základní deska tak dlouho, až odešla.

To je možné, na první pohled nelze poznat jestli se jedná o sw, nebo hw závadu. Zájkadní diagnostiku hw závad máte zde: https://forum.viry.cz/viewtopic.php?f=53&t=109260 .

Pokusy jsem se dostal na jeden vadný modul RAM.
LOG po opravě:
Fix result of Farbar Recovery Scan Tool (x64) Version: 22-06-2020
Ran by Fafa (22-06-2020 16:31:45) Run:1
Running from C:\Users\Fafa\Desktop
Loaded Profiles: Fafa
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2020-02-22]
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {1217B21C-941C-439E-A017-3AF82C7BE634} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-02-02] (Google LLC -> Google LLC)
Task: {13C614A2-4CA7-4502-8DF3-FF32B37058FD} - System32\Tasks\AdvancedUpdater => C:\Program Files (x86)\AdvancedWindowsManager\Windows Installer\Windows Updater.exe [895112 2020-02-21] (MICROLEAVES LTD -> AdvancedWindowsManager) <==== ATTENTION
Task: {24EDCAB4-9225-4CCD-8BBF-43FF4E1BB144} - \Microsoft\Windows\Setup\EOSNotify2 -> No File <==== ATTENTION
Task: {702E3BE1-10D0-4064-A1F7-01E3EE5CEE7D} - \Microsoft\Windows\Setup\EOSNotify -> No File <==== ATTENTION
Task: {A81262C0-C6C0-4F3E-B1B9-C8C3A638F149} - System32\Tasks\{B5E7A151-B002-4FA1-A9C8-ED178D042E0A} => C:\Windows\system32\pcalua.exe -a C:\Users\Fafa\Downloads\aomwin200ea24.exe -d C:\Users\Fafa\Downloads
Task: {B845D7B8-80C0-4DAD-88C5-FE6AFC208EC4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-02-02] (Google LLC -> Google LLC)
U3 idsvc; no ImagePath
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
C:\WINDOWS\system32\Tasks\{B5E7A151-B002-4FA1-A9C8-ED178D042E0A}
C:\WINDOWS\system32\Tasks\{E43F0E80-46BB-4CF6-834D-65A783E66C2B}
C:\WINDOWS\system32\Tasks\{80CC6ADE-8C21-4537-A158-A4456ED86552}
C:\DumpStack.log.tmp
C:\Program Files (x86)\GUTF6AE.tmp
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers3: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> No File
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [474]
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
FirewallRules: [{A3E3CD59-D453-4CE3-8D9B-791F84FFDE7A}] => (Allow) C:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe => No File
FirewallRules: [{4359F49B-B7E0-48A4-9DFA-451403EF1422}] => (Allow) C:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe => No File

EmptyTemp:
End
*****************

Processes closed successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk => moved successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
HKLM\SOFTWARE\Policies\Google => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1217B21C-941C-439E-A017-3AF82C7BE634}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1217B21C-941C-439E-A017-3AF82C7BE634}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{13C614A2-4CA7-4502-8DF3-FF32B37058FD}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{13C614A2-4CA7-4502-8DF3-FF32B37058FD}" => removed successfully
C:\WINDOWS\System32\Tasks\AdvancedUpdater => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AdvancedUpdater" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{24EDCAB4-9225-4CCD-8BBF-43FF4E1BB144}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{24EDCAB4-9225-4CCD-8BBF-43FF4E1BB144}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\EOSNotify2" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{702E3BE1-10D0-4064-A1F7-01E3EE5CEE7D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{702E3BE1-10D0-4064-A1F7-01E3EE5CEE7D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\EOSNotify" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A81262C0-C6C0-4F3E-B1B9-C8C3A638F149}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A81262C0-C6C0-4F3E-B1B9-C8C3A638F149}" => removed successfully
C:\WINDOWS\System32\Tasks\{B5E7A151-B002-4FA1-A9C8-ED178D042E0A} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{B5E7A151-B002-4FA1-A9C8-ED178D042E0A}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B845D7B8-80C0-4DAD-88C5-FE6AFC208EC4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B845D7B8-80C0-4DAD-88C5-FE6AFC208EC4}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
HKLM\System\CurrentControlSet\Services\idsvc => removed successfully
idsvc => service removed successfully
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA" => not found
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore" => not found
"C:\WINDOWS\system32\Tasks\{B5E7A151-B002-4FA1-A9C8-ED178D042E0A}" => not found
C:\WINDOWS\system32\Tasks\{E43F0E80-46BB-4CF6-834D-65A783E66C2B} => moved successfully
C:\WINDOWS\system32\Tasks\{80CC6ADE-8C21-4537-A158-A4456ED86552} => moved successfully
Could not move "C:\DumpStack.log.tmp" => Scheduled to move on reboot.
C:\Program Files (x86)\GUTF6AE.tmp => moved successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avg => removed successfully
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\00avg => removed successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets => removed successfully
C:\Users\Public\Shared Files => ":VersionCache" ADS removed successfully
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File) => Error: No automatic fix found for this entry.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A3E3CD59-D453-4CE3-8D9B-791F84FFDE7A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4359F49B-B7E0-48A4-9DFA-451403EF1422}" => removed successfully

=========== EmptyTemp: ==========

BITS transfer queue => 19161088 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 20194855 B
Java, Flash, Steam htmlcache => 191697151 B
Windows/system/drivers => 87272 B
Edge => 401579 B
Chrome => 252101075 B
Firefox => 52184526 B
Opera => 1952667 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 30686 B
NetworkService => 30686 B
Fafa => 1476736 B

RecycleBin => 0 B
EmptyTemp: => 514.3 MB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 22-06-2020 16:35:56)

C:\DumpStack.log.tmp => Could not move

==== End of Fixlog 16:35:56 ====

Asi nemá smysl nakupovat nové ramky nebo hledat podobnou základní desku... - restart se stále seká - při restartu se prostě nevypne všechno, jak by mělo. Počítač se musí vypnout natvrdo.
Ještě mám možnost otestovat na jiném zdroji - ale má to logiku, aby případný starší (vadný) zdroj způsoboval problém při vypínání a restartu? U toho seknutí během užívání bych tomu věřil, třeba náhlý výpadek proudu pro určitý HW a tím k.o. celého systému.
Nejde to ale do modré smrti - jen zamrzne.