VIRY.CZ

Dobrý večer,

rád bych poprosil o kontrolu logu neboť mi v posledních 14 dnech začali padat graficky náročnější hry a to tím stylem, že se hra po nějakém čase prostě vypne (bez jakékoliv hlášky) a jsem na ploše. Už jsem zkusil kde co od výměny RAM, testování GPU a disků, flashnout BIOS na nejnovější, reinstall WS a nic...proto prosím abyste se mi podívali na logy jestli nezjistíte něco relevantního z nich.

V příloze je FRST.rar a Adition dávám na plochu neboť mi nejde přidat.

Děkuji předem

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-08-2022
Ran by MASO (23-08-2022 20:13:24)
Running from C:\Users\MASO\Downloads
Microsoft Windows 11 Pro Version 21H2 22000.856 (X64) (2022-08-19 19:13:29)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================


(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-1278583033-682830182-3355857238-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1278583033-682830182-3355857238-503 - Limited - Disabled)
Guest (S-1-5-21-1278583033-682830182-3355857238-501 - Limited - Disabled)
MASO (S-1-5-21-1278583033-682830182-3355857238-1001 - Administrator - Enabled) => C:\Users\MASO
WDAGUtilityAccount (S-1-5-21-1278583033-682830182-3355857238-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AMD GPIO2 Driver (HKLM-x32\...\{E9DD399F-21A3-479E-A7DF-D6CF4B2ADBF3}) (Version: 2.2.0.130 - Advanced Micro Devices, Inc.) Hidden
AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 4.06.10.651 - Advanced Micro Devices, Inc.)
AMD PCI Driver (HKLM-x32\...\{80EC3CEE-2940-42A1-A776-B5D810D39F1E}) (Version: 1.0.0.89 - Advanced Micro Devices, Inc.) Hidden
AMD PSP Driver (HKLM-x32\...\{988F14B8-79A8-475D-BAC7-83F96AD3D821}) (Version: 5.19.0.0 - Advanced Micro Devices, Inc.) Hidden
AMD Ryzen Balanced Driver (HKLM-x32\...\{A171D320-C42C-4F3B-A2D8-C6A09F6788CC}) (Version: 7.0.4.10 - Advanced Micro Devices, Inc.) Hidden
AMD SBxxx SMBus Driver (HKLM-x32\...\{AAE0E27D-C88A-49BA-8715-77ADCD4286A3}) (Version: 5.12.0.38 - Advanced Micro Devices, Inc.) Hidden
AMD_Chipset_Drivers (HKLM-x32\...\{c63a1907-428b-458b-935e-e61aad4aac6e}) (Version: 4.06.10.651 - Advanced Micro Devices, Inc.) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Black Desert (HKLM-x32\...\BlackDesert_NA_is1) (Version: 22.01.12.1 - PearlAbyss Corp.)
Discord (HKU\S-1-5-21-1278583033-682830182-3355857238-1001\...\Discord) (Version: 1.0.9005 - Discord Inc.)
Firestone (HKU\S-1-5-21-1278583033-682830182-3355857238-1001\...\Overwolf_lnknbakkpommmjjdnelmfbjjdbocfpnpbkijjnob) (Version: 9.9.2 - Overwolf app)
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Heaven Benchmark version 4.0 (HKLM-x32\...\Unigine Heaven Benchmark (Basic Edition)_is1) (Version: 4.0 - Unigine Corp.)
Kontrola stavu osobního počítače s Windows (HKLM\...\{D1F15F7A-707A-42BD-BE6B-3380616F796D}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: 2022.7.290502 - Logitech)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 104.0.1293.63 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 104.0.1293.63 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1278583033-682830182-3355857238-1001\...\OneDriveSetup.exe) (Version: 22.161.0731.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{6A2A8076-135F-4F55-BB02-DED67C8C6934}) (Version: 4.67.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29334 (HKLM-x32\...\{a9cfe9c7-e54f-46cd-9c5c-542ff8e3e8c4}) (Version: 14.28.29334.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334 (HKLM-x32\...\{b2d0f752-adc5-496e-8f70-8669de01f746}) (Version: 14.28.29334.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29334 (HKLM\...\{2E11EF4E-901F-4B2D-B68E-3DB2A566C857}) (Version: 14.28.29334 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29334 (HKLM\...\{8A3F7D5B-422D-49D9-84F7-8DC1B7782967}) (Version: 14.28.29334 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29334 (HKLM-x32\...\{14C49FC8-3E9B-4F29-8526-26629B5CF30B}) (Version: 14.28.29334 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29334 (HKLM-x32\...\{0D01A812-82A1-481F-8546-8E28E976F8DF}) (Version: 14.28.29334 - Microsoft Corporation) Hidden
NVIDIA Ovladač HD audia 1.3.39.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.39.3 - NVIDIA Corporation)
NVIDIA Ovladače grafiky 512.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 512.95 - NVIDIA Corporation)
NVIDIA Systémový software PhysX 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
NZXT CAM 4.37.1 (HKLM\...\ac0666ae-ee66-5310-ac01-9d6348133b2d) (Version: 4.37.1 - NZXT, Inc.)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.204.0.1 - Overwolf Ltd.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Packages:
=========
Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_1.35.3.0_x64__6rarf9sa4v8jt [2022-08-17] (Disney)
DTS:X Ultra -> C:\Program Files\WindowsApps\DTSInc.DTSXUltra_1.11.6.0_x64__t5j2fzbtdg37r [2022-08-19] (DTS, Inc.)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.13.7180.0_x64__8wekyb3d8bbwe [2022-08-17] (Microsoft Studios) [MS Ad]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.962.0_x64__56jybvy8sckqj [2022-08-19] (NVIDIA Corp.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.20.238.0_x64__dt26b99r8h8gj [2022-08-15] (Realtek Semiconductor Corp)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.191.824.0_x86__zpdnekdrzrea0 [2022-08-15] (Spotify AB) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_647b4244e991951b\nvshext.dll [2022-05-21] (Nvidia Corporation -> NVIDIA Corporation)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2022-08-16 00:53 - 2022-08-16 00:53 - 000151040 _____ () [File not signed] \\?\C:\Program Files\LGHUB\resources\app.asar.unpacked\node_modules\keytar\build\Release\keytar.node
2022-08-16 16:20 - 2022-07-18 19:11 - 001569280 _____ () [File not signed] \\?\C:\Program Files\NZXT CAM\resources\app.asar.unpacked\node_modules\@nzxt\rust-cam\dist\target\x86_64-pc-windows-msvc\release\CTITSDKDeviceTool.dll
2022-08-16 16:20 - 2022-07-18 19:11 - 002725376 _____ () [File not signed] C:\Program Files\NZXT CAM\ffmpeg.dll
2022-08-16 16:20 - 2022-07-18 19:11 - 000447488 _____ () [File not signed] C:\Program Files\NZXT CAM\libegl.dll
2022-08-16 16:20 - 2022-07-18 19:11 - 006985216 _____ () [File not signed] C:\Program Files\NZXT CAM\libglesv2.dll
2022-08-16 16:20 - 2022-07-18 19:11 - 002391552 _____ (CPUID) [File not signed] C:\Program Files\NZXT CAM\resources\app.asar.unpacked\node_modules\@nzxt\rust-cam\dist\common\cpuid\cpuidsdk64.dll
2022-08-16 16:20 - 2022-07-18 19:11 - 000083456 _____ (Silicon Laboratories, Inc.) [File not signed] C:\Program Files\NZXT CAM\resources\app.asar.unpacked\node_modules\@nzxt\rust-cam\dist\nzxt-device\SiUSBXp64.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========


==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-12-07 11:14 - 2019-12-07 11:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1278583033-682830182-3355857238-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{46C11A86-39CD-44C6-ABBF-E4667B884F86}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.87.3406.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{5BC2885C-9DA1-4D20-BEFE-6FF4E106FFA9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.87.3406.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{1AEC0F16-7C2B-441D-B4D2-C001CC162D5D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.87.3406.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{BF263B33-6CD8-4B23-BF74-E4F91477876E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.87.3406.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{C61011E3-F990-4075-AA1D-429A43F8C515}] => (Allow) C:\Program Files (x86)\Overwolf\0.204.0.1\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{F19C2F6C-A7B6-4D60-87BA-E6791FF5B100}] => (Allow) C:\Program Files (x86)\Overwolf\0.204.0.1\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{CB2E67BE-81B4-4D19-B65E-4419B49AF6A6}] => (Block) C:\Program Files (x86)\Overwolf\0.203.1.12\OverwolfBrowser.exe => No File
FirewallRules: [{94684751-7023-4F2F-B68D-1BADE535E3C0}] => (Block) C:\Program Files (x86)\Overwolf\0.203.1.12\OverwolfBrowser.exe => No File
FirewallRules: [{2E389AC3-0DBA-4D3E-8F5B-FC4EE0EF4C27}] => (Allow) C:\Program Files (x86)\Overwolf\0.203.1.12\OverwolfBrowser.exe => No File
FirewallRules: [{49BD5D7D-ECF5-4BD0-8A55-A097C5F16145}] => (Allow) C:\Program Files (x86)\Overwolf\0.203.1.12\OverwolfBrowser.exe => No File
FirewallRules: [{F934B152-95C1-4A2A-AF62-65EFA069BFAF}] => (Block) E:\battle.net\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )
FirewallRules: [{DF2AEC7F-CBC7-4CF8-BB95-A9FD6518C931}] => (Block) E:\battle.net\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )
FirewallRules: [UDP Query User{EC6B5AF6-9B07-4F0E-91FE-C7B1867ECF63}E:\battle.net\hearthstone\hearthstone.exe] => (Allow) E:\battle.net\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )
FirewallRules: [TCP Query User{539B918B-58EF-4CA7-8924-64A17B94C728}E:\battle.net\hearthstone\hearthstone.exe] => (Allow) E:\battle.net\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )
FirewallRules: [{1EEE6F64-D11D-4FBA-AABA-7879B2DEFB6F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.191.824.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{3CB23E7C-0C80-4FD0-8294-FACB440245F0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.191.824.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{C1605D1E-02F8-4C6B-A610-8A1CE1CEE467}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.191.824.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F9D07380-917E-444E-8DC5-B8B00F9E56CB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.191.824.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{851B2984-F4BC-4C68-AC03-95EBCA69FE8E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.191.824.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{4D875C93-DF90-4C4B-BCA1-0091CF1DBE82}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.191.824.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F05A6E0E-9126-4F1B-9408-063472E16AB9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.191.824.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A0382645-9B10-48B1-BE80-4648E7C7CE73}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.191.824.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8BF9274A-54B5-470F-B346-F368EBDAEF6B}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\104.0.1293.63\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8F85F625-9D2B-4222-BA5E-FFBA71D678DF}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22183.300.1431.9295_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{EE3276E8-A94E-4667-AF37-56D7B5B5A569}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22183.300.1431.9295_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{79586C3E-D993-4DF1-AA57-0B1F99D94E4C}] => (Allow) E:\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{93FE77FA-5D3B-44D3-A04D-7A9DBF6ED1AF}] => (Allow) E:\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{7BE1D909-73DB-4421-847E-28CCC608912A}] => (Allow) E:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{225D4AD4-07A7-48CA-8964-FDAC2DBCCAAB}] => (Allow) E:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{7E48DE67-6D4E-4A73-8231-B155BF05508F}] => (Allow) E:\Steam\steamapps\common\Total War WARHAMMER III\launcher\launcher.exe (The Creative Assembly Ltd -> Creative Assembly Ltd)
FirewallRules: [{48FBDF97-F311-406F-BFAD-6434E48C1B52}] => (Allow) E:\Steam\steamapps\common\Total War WARHAMMER III\launcher\launcher.exe (The Creative Assembly Ltd -> Creative Assembly Ltd)
FirewallRules: [TCP Query User{24C89EAB-5769-4429-9D7E-EE22E97157E0}E:\steam\steamapps\common\total war warhammer iii\warhammer3.exe] => (Allow) E:\steam\steamapps\common\total war warhammer iii\warhammer3.exe (The Creative Assembly Ltd -> The Creative Assembly Ltd)
FirewallRules: [UDP Query User{AE1EBD7E-15F4-4284-84DA-7AE7A8772B0C}E:\steam\steamapps\common\total war warhammer iii\warhammer3.exe] => (Allow) E:\steam\steamapps\common\total war warhammer iii\warhammer3.exe (The Creative Assembly Ltd -> The Creative Assembly Ltd)
FirewallRules: [{72AFD5F7-2304-4CE5-AE58-0C6E993E793E}] => (Block) E:\steam\steamapps\common\total war warhammer iii\warhammer3.exe (The Creative Assembly Ltd -> The Creative Assembly Ltd)
FirewallRules: [{FA93FFA4-05E2-4B6D-A7C3-227861D778A4}] => (Block) E:\steam\steamapps\common\total war warhammer iii\warhammer3.exe (The Creative Assembly Ltd -> The Creative Assembly Ltd)

==================== Restore Points =========================

21-08-2022 21:29:02 Instalační služba modulů systému Windows
23-08-2022 18:08:38 Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334

==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Application errors:
==================
Error: (08/23/2022 06:09:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: launcher.exe_launcher, verze: 3.24.3.0, časové razítko: 0x5c81ae40
Název chybujícího modulu: launcher.exe, verze: 3.24.3.0, časové razítko: 0x5c81ae40
Kód výjimky: 0x80000003
Posun chyby: 0x019c4f90
ID chybujícího procesu: 0x1e70
Čas spuštění chybující aplikace: 0x01d8b70aafcb07fd
Cesta k chybující aplikaci: E:\Steam\steamapps\common\Total War WARHAMMER III\launcher\launcher.exe
Cesta k chybujícímu modulu: E:\Steam\steamapps\common\Total War WARHAMMER III\launcher\launcher.exe
ID zprávy: 6beacd4e-bbc1-4f94-b984-8ad8a65475ae
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:

Error: (08/21/2022 10:26:03 AM) (Source: CAM Service) (EventID: 1) (User: )
Description: request thread encountered an error: Failed to send result: io error: Přesměrování se uzavírá. (os error 232)

Error: (08/19/2022 10:21:17 PM) (Source: CAM Service) (EventID: 1) (User: )
Description: request thread encountered an error: Failed to send result: io error: Přesměrování se uzavírá. (os error 232)

Error: (08/19/2022 10:08:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: BlackDesert64.exe, verze: 0.0.0.0, časové razítko: 0x62fba3cf
Název chybujícího modulu: BlackDesert64.exe, verze: 0.0.0.0, časové razítko: 0x62fba3cf
Kód výjimky: 0xc0000005
Posun chyby: 0x0000000000577afe
ID chybujícího procesu: 0x4460
Čas spuštění chybující aplikace: 0x01d8b406a6a9ecda
Cesta k chybující aplikaci: E:\BlackDesert\bin64\BlackDesert64.exe
Cesta k chybujícímu modulu: E:\BlackDesert\bin64\BlackDesert64.exe
ID zprávy: acc41768-f79f-4d55-a08e-01d4ca4bfdf4
Úplný název chybujícího balíčku:
ID aplikace související s chybujícím balíčkem:


System errors:
=============
Error: (08/23/2022 03:35:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Steam Client Service neuspěla při spuštění v důsledku následující chyby:
Služba neodpověděla na řídicí nebo zahajovací požadavek dostatečně včas.

Error: (08/23/2022 03:35:54 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Při čekání na připojení služby Steam Client Service bylo dosaženo časového limitu (30000 ms).

Error: (08/23/2022 01:32:00 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-JDMAJ10)
Description: Server {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} se v daném časovém limitu neregistroval u služby DCOM.

Error: (08/23/2022 01:30:34 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Inicializace výpisu stavu systému se nezdařila.

Error: (08/23/2022 01:30:40 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Předchozí vypnutí systému (13:29:47, ‎23.‎08.‎2022) bylo neočekávané.

Error: (08/23/2022 11:54:16 AM) (Source: Server) (EventID: 2505) (User: )
Description: Server nemohl vytvořit vazbu na přenos \Device\NetBT_Tcpip_{305E108B-2376-4E62-9205-13D776B1DEAD}, protože jiný počítač v síti má stejný název. Server nelze spustit.

Error: (08/23/2022 11:51:05 AM) (Source: Server) (EventID: 2505) (User: )
Description: Server nemohl vytvořit vazbu na přenos \Device\NetBT_Tcpip_{305E108B-2376-4E62-9205-13D776B1DEAD}, protože jiný počítač v síti má stejný název. Server nelze spustit.

Error: (08/23/2022 11:50:40 AM) (Source: Server) (EventID: 2505) (User: )
Description: Server nemohl vytvořit vazbu na přenos \Device\NetBT_Tcpip_{305E108B-2376-4E62-9205-13D776B1DEAD}, protože jiný počítač v síti má stejný název. Server nelze spustit.


Windows Defender:
================
Date: 2022-08-22 22:26:40
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {C78D8F3D-217E-47DD-8E57-414562850467}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

Date: 2022-08-21 00:23:19
Description:
Prohledávání Antivirová ochrana v programu Microsoft Defender bylo zastaveno před dokončením.
ID prohledávání: {E801FCAF-EED7-4CC8-82FC-BB6A09C48214}
Typ prohledávání: Antimalwarový program
Parametry prohledávání: Rychlé prohledávání
Uživatel: NT AUTHORITY\SYSTEM

==================== Memory info ===========================

BIOS: American Megatrends International, LLC. F4e 07/20/2022
Motherboard: Gigabyte Technology Co., Ltd. X570S AORUS MASTER
Processor: AMD Ryzen 5 5600X 6-Core Processor
Percentage of memory in use: 25%
Total physical RAM: 32665.98 MB
Available physical RAM: 24346.63 MB
Total Virtual: 32665.98 MB
Available Virtual: 22123.4 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:231.72 GB) (Free:155.4 GB) (Model: Samsung SSD 870 EVO 250GB) NTFS
Drive d: (Data) (Fixed) (Total:1863 GB) (Free:1851.2 GB) (Model: ST2000DM008-2FR102) NTFS
Drive e: (Hry) (Fixed) (Total:931.5 GB) (Free:652.67 GB) (Model: Samsung SSD 980 PRO 1TB) NTFS

\\?\Volume{80c7e1ae-a4e7-4ef2-94b5-e88b3ef16987}\ () (Fixed) (Total:0.56 GB) (Free:0.08 GB) NTFS
\\?\Volume{6a7625cc-714e-4594-86ac-5ab3f24b2888}\ () (Fixed) (Total:0.5 GB) (Free:0.08 GB) NTFS
\\?\Volume{7145e530-b008-4eef-98c0-a0a8be0b6861}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 232.9 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 1 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 2 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt =======================

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Zdravím,
dle rady postuju výsledek AdwCleaneru.
# -------------------------------
# Malwarebytes AdwCleaner 8.3.2.0
# -------------------------------
# Build: 03-23-2022
# Database: 2022-03-15.3 (Local)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 08-25-2022
# Duration: 00:00:00
# OS: Windows 10 Pro
# Cleaned: 0
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1405 octets] - [25/08/2022 17:08:53]
AdwCleaner[S01].txt - [1466 octets] - [25/08/2022 17:10:01]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########

Toto je OK. Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
FirewallRules: [{CB2E67BE-81B4-4D19-B65E-4419B49AF6A6}] => (Block) C:\Program Files (x86)\Overwolf\0.203.1.12\OverwolfBrowser.exe => No File
FirewallRules: [{94684751-7023-4F2F-B68D-1BADE535E3C0}] => (Block) C:\Program Files (x86)\Overwolf\0.203.1.12\OverwolfBrowser.exe => No File
FirewallRules: [{2E389AC3-0DBA-4D3E-8F5B-FC4EE0EF4C27}] => (Allow) C:\Program Files (x86)\Overwolf\0.203.1.12\OverwolfBrowser.exe => No File
FirewallRules: [{49BD5D7D-ECF5-4BD0-8A55-A097C5F16145}] => (Allow) C:\Program Files (x86)\Overwolf\0.203.1.12\OverwolfBrowser.exe => No File
HKU\S-1-5-21-1278583033-682830182-3355857238-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\MASO\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)
HKU\S-1-5-21-1278583033-682830182-3355857238-1001\...\RunOnce: [Uninstall 22.156.0724.0002] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\MASO\AppData\Local\Microsoft\OneDrive\22.156.0724.0002" (No File)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Task: {782CD825-4E3C-401B-9F40-FD87F0FE2C81} - System32\Tasks\MicrosoftEdgeShadowStackRollbackTask => C:\Program Files (x86)\Microsoft\Edge\Application\104.0.1293.54\Installer\setup.exe --handle-crash="$(ProcessPath)" (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (No File)

EmptyTemp:
End

Uložte do C:\Users\MASO\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 15-08-2022
Ran by MASO (25-08-2022 19:53:38) Run:1
Running from D:\+++utility\Farbar Recovery Scan Tool FRST
Loaded Profiles: MASO
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
FirewallRules: [{CB2E67BE-81B4-4D19-B65E-4419B49AF6A6}] => (Block) C:\Program Files (x86)\Overwolf\0.203.1.12\OverwolfBrowser.exe => No File
FirewallRules: [{94684751-7023-4F2F-B68D-1BADE535E3C0}] => (Block) C:\Program Files (x86)\Overwolf\0.203.1.12\OverwolfBrowser.exe => No File
FirewallRules: [{2E389AC3-0DBA-4D3E-8F5B-FC4EE0EF4C27}] => (Allow) C:\Program Files (x86)\Overwolf\0.203.1.12\OverwolfBrowser.exe => No File
FirewallRules: [{49BD5D7D-ECF5-4BD0-8A55-A097C5F16145}] => (Allow) C:\Program Files (x86)\Overwolf\0.203.1.12\OverwolfBrowser.exe => No File
HKU\S-1-5-21-1278583033-682830182-3355857238-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\MASO\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)
HKU\S-1-5-21-1278583033-682830182-3355857238-1001\...\RunOnce: [Uninstall 22.156.0724.0002] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\MASO\AppData\Local\Microsoft\OneDrive\22.156.0724.0002" (No File)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Task: {782CD825-4E3C-401B-9F40-FD87F0FE2C81} - System32\Tasks\MicrosoftEdgeShadowStackRollbackTask => C:\Program Files (x86)\Microsoft\Edge\Application\104.0.1293.54\Installer\setup.exe --handle-crash="$(ProcessPath)" (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (No File)

EmptyTemp:
End
*****************

Processes closed successfully.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CB2E67BE-81B4-4D19-B65E-4419B49AF6A6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{94684751-7023-4F2F-B68D-1BADE535E3C0}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2E389AC3-0DBA-4D3E-8F5B-FC4EE0EF4C27}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{49BD5D7D-ECF5-4BD0-8A55-A097C5F16145}" => removed successfully
"HKU\S-1-5-21-1278583033-682830182-3355857238-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Delete Cached Standalone Update Binary" => not found
"HKU\S-1-5-21-1278583033-682830182-3355857238-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Uninstall 22.156.0724.0002" => not found
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{C885AA15-1764-4293-B82A-0586ADD46B35} => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{782CD825-4E3C-401B-9F40-FD87F0FE2C81}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{782CD825-4E3C-401B-9F40-FD87F0FE2C81}" => removed successfully
C:\WINDOWS\System32\Tasks\MicrosoftEdgeShadowStackRollbackTask => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MicrosoftEdgeShadowStackRollbackTask" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => removed successfully
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" => removed successfully

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 28637596 B
Java, Discord, Steam htmlcache => 159821151 B
Windows/system/drivers => 1315363 B
Edge => 0 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 56228 B
MASO => 239188483 B

RecycleBin => 1254 B
EmptyTemp: => 409.1 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 19:53:42 ====

Smazáno. Nastala nějaká změna?

Děkuji velmi pěkně za snahu a zájem.
Momentálně jsem ve fázi testování a zatím se vše drží cca 1,5 hodiny (většinou do hodiny mi aplikace padaly). Zítra dám vědět jestli nastaly nějaké problémy.
Pokud bude vše fungovat je něco čeho se mám vyvarovat, aby se mi ta situace nestala znovu?

Celkem ne, byly tam jen zbytečnosti, malware žádný. Ozvěte se.

tak po 2,5 hodinách BSOD s hláškou KMODE EXCEPTION NOT HANDLED

a po restartu počítače se stalo cca po 10 minutách to co vždy...aplikace spadne na plochu a v prohlížeči událostí o tom není ani zmínka

A po dalších cca 2 hodinách se systém vrátil do rozbitých kolejí...do hodiny se aplikace shodí na plochu

Tak to je problém systému, nikoliv malware. Přečtěte si toto: https://www-pcgamer-com.translate.goog/ ... _tr_pto=sc , jsou tam různé návody na opravu. Pokud by se nezdařila, udělejte obnpvu systému k datu, kdy korektně fungoval.

Všechno sem zkusil, včetně výměny RAM. Nic nefunguje. Každopádně díky za ochotu du hledat a zkoušet dál.

Budete muset Googlit. Problém není v malwaru, ale v systémové chybě. Možná vás čeká návrat do tov. nastavení, nebo přímo reinstal systému. Nemáte zač!

Tovární nastavení, reinstall systému, instalace systému na jiný disk, testy disků, RAMek, GPU, CPU - všechno už mám za sebou - po delší či kratší době se vše vrátí do stejných kolejí. Teď už mi zbývá jenom mainboard a zdroj. Setkal jste se někdy s vadnou deskou tak, že některé aplikace jedou v pohodě a jiné padají "jak je napadne"?

Pro lepší představivost uvedu příklad (nejvíce se opakující situace): včera jsem přeinstaloval systém, nainstaloval chipset a ovladače karty. Nainstaloval Warhammer III a dnes ráno v 10:15 začal...ve 13:30 systém zatuhl. Vypnul sem ho a ted po VYPNUTÍ počítače hra do hodiny spadne na plochu. Pokud ji spustím hned po pádu na plochu tak do 10 minut spadne znovu.

Tento scénář se děje po reinstall WS, tovární nastavení WS i po naší operaci s fixlist.txt

Někdy se objeví BSOD s nějakou chybovou hláškou, kterou prozkoumám na netu a zkusím řešit dle rad a návodů.

Všechny moje zkušenosti za posledních 14 dní směřují k vadné desce, ale odrazuje mě od toho. že v přísně logickém prostředí aplikace padají bez vzorce...