Stránka 1 z 1

obcasne zasekavani pc

Napsal: 12 čer 2023 07:37
od číslo
Obcas kdyz spustim pc tak se mi jakoby sekne a nejde nic delat jen hybat mysi a klikat na neco ale nic nereaguje pomuze az tvrdy restart, po restartu je to vsechno ok, ale za par zapnuti o5 to same. Doufam ze sem vlozil vse spravne

Re: obcasne zasekavani pc

Napsal: 12 čer 2023 08:18
od Rudy
Zdravím!
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Re: obcasne zasekavani pc

Napsal: 12 čer 2023 10:05
od číslo
# -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build: 08-30-2022
# Database: 2022-10-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 06-12-2023
# Duration: 00:00:00
# OS: Windows 10 (Build 19045.2965)
# Cleaned: 2
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

Deleted http://istart.webssearches.com/?type=hp ... J9AQB07836
Deleted http://istart.webssearches.com/?type=hp ... J9AQB07836

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1651 octets] - [12/06/2023 11:01:44]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Re: obcasne zasekavani pc

Napsal: 12 čer 2023 10:06
od číslo
# -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build: 08-30-2022
# Database: 2022-10-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 06-12-2023
# Duration: 00:00:03
# OS: Windows 10 (Build 19045.2965)
# Scanned: 32100
# Detected: 2


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

PUP.Optional.Legacy http://istart.webssearches.com/?type=hp ... J9AQB07836
PUP.Optional.Legacy http://istart.webssearches.com/?type=hp ... J9AQB07836

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

No Preinstalled Software found.



########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########

Re: obcasne zasekavani pc

Napsal: 12 čer 2023 12:40
od Rudy
OK. Poprosím o nové logy FRST+Addition.

Re: obcasne zasekavani pc

Napsal: 12 čer 2023 12:52
od číslo
Logy na viry.cz.rar
(30.31 KiB) Staženo 30 x

Re: obcasne zasekavani pc

Napsal: 12 čer 2023 14:01
od Rudy
Otevřte poznámkový blok a zkopírujte do něj:
Start

CloseProcesses:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [739448 2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {E13B40D8-1243-4D3C-B5AB-1862CAA44C39} - System32\Tasks\GoogleUpdateTaskMachineUA{E9EDE3D7-0386-43A2-8D5C-8C44C07C60AE} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2023-02-24] (Google LLC -> Google LLC)
Task: {ECFCCB4D-290F-4C40-97CA-44B6B4B20A3C} - System32\Tasks\GoogleUpdateTaskMachineCore{4BF19C4B-5D8E-400D-8378-78C451C3E631} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2023-02-24] (Google LLC -> Google LLC)
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{E9EDE3D7-0386-43A2-8D5C-8C44C07C60AE}
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{4BF19C4B-5D8E-400D-8378-78C451C3E631}
CustomCLSID: HKU\S-1-5-21-2227092603-2680403404-1919150376-1001_Classes\CLSID\{9486aaf1-0930-362a-962d-8e6908739c817}\InprocServer32 -> 0xCDF03692F54CD9010D4E3792F54CD901010000008000000000000000 => No File
CustomCLSID: HKU\S-1-5-21-2227092603-2680403404-1919150376-1001_Classes\CLSID\{d936918b-9c4b-555e-074a-c79314be04e1}\localserver32 -> "C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe" -ToastActivated => No File
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk:A1B76439FE [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk:B96E9B8455 [4298]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [9862]
FirewallRules: [{16B18F4B-09CE-48A6-85D3-0128314F2F9C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Mafia Definitive Edition\2KLauncher\LauncherPatcher.exe => No File
FirewallRules: [{A6F4FD9E-EAE6-4F9A-8C30-3770557B76A5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Mafia Definitive Edition\2KLauncher\LauncherPatcher.exe => No File
FirewallRules: [{63E68715-9EC9-4986-9B0E-0A138B08A190}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Deadlight Director’s Cut\Binaries\Win64\LOTDGame.exe => No File
FirewallRules: [{A73C4E91-FE49-4B5F-9B4D-C0EE667410A2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Deadlight Director’s Cut\Binaries\Win64\LOTDGame.exe => No File
FirewallRules: [{511E751D-9E0C-4764-A043-B838FB395007}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => No File

EmptyTemp:
End
Uložte doD:\soft\Logy na viry.cz jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Re: obcasne zasekavani pc

Napsal: 12 čer 2023 14:46
od číslo
Fix result of Farbar Recovery Scan Tool (x64) Version: 12-06-2023
Ran by Dan (12-06-2023 15:41:48) Run:1
Running from D:\soft\Logy na viry.cz
Loaded Profiles: Dan
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [739448 2023-03-17] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {E13B40D8-1243-4D3C-B5AB-1862CAA44C39} - System32\Tasks\GoogleUpdateTaskMachineUA{E9EDE3D7-0386-43A2-8D5C-8C44C07C60AE} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2023-02-24] (Google LLC -> Google LLC)
Task: {ECFCCB4D-290F-4C40-97CA-44B6B4B20A3C} - System32\Tasks\GoogleUpdateTaskMachineCore{4BF19C4B-5D8E-400D-8378-78C451C3E631} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2023-02-24] (Google LLC -> Google LLC)
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{E9EDE3D7-0386-43A2-8D5C-8C44C07C60AE}
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{4BF19C4B-5D8E-400D-8378-78C451C3E631}
CustomCLSID: HKU\S-1-5-21-2227092603-2680403404-1919150376-1001_Classes\CLSID\{9486aaf1-0930-362a-962d-8e6908739c817}\InprocServer32 -> 0xCDF03692F54CD9010D4E3792F54CD901010000008000000000000000 => No File
CustomCLSID: HKU\S-1-5-21-2227092603-2680403404-1919150376-1001_Classes\CLSID\{d936918b-9c4b-555e-074a-c79314be04e1}\localserver32 -> "C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe" -ToastActivated => No File
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk:A1B76439FE [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk:B96E9B8455 [4298]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [9862]
FirewallRules: [{16B18F4B-09CE-48A6-85D3-0128314F2F9C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Mafia Definitive Edition\2KLauncher\LauncherPatcher.exe => No File
FirewallRules: [{A6F4FD9E-EAE6-4F9A-8C30-3770557B76A5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Mafia Definitive Edition\2KLauncher\LauncherPatcher.exe => No File
FirewallRules: [{63E68715-9EC9-4986-9B0E-0A138B08A190}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Deadlight Director’s Cut\Binaries\Win64\LOTDGame.exe => No File
FirewallRules: [{A73C4E91-FE49-4B5F-9B4D-C0EE667410A2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Deadlight Director’s Cut\Binaries\Win64\LOTDGame.exe => No File
FirewallRules: [{511E751D-9E0C-4764-A043-B838FB395007}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => No File

EmptyTemp:
End
*****************

Processes closed successfully.
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched" => removed successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => value restored successfully
HKLM\SOFTWARE\Policies\Mozilla => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E13B40D8-1243-4D3C-B5AB-1862CAA44C39}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E13B40D8-1243-4D3C-B5AB-1862CAA44C39}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA{E9EDE3D7-0386-43A2-8D5C-8C44C07C60AE} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA{E9EDE3D7-0386-43A2-8D5C-8C44C07C60AE}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{ECFCCB4D-290F-4C40-97CA-44B6B4B20A3C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ECFCCB4D-290F-4C40-97CA-44B6B4B20A3C}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore{4BF19C4B-5D8E-400D-8378-78C451C3E631} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore{4BF19C4B-5D8E-400D-8378-78C451C3E631}" => removed successfully
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{E9EDE3D7-0386-43A2-8D5C-8C44C07C60AE}" => not found
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{4BF19C4B-5D8E-400D-8378-78C451C3E631}" => not found
HKU\S-1-5-21-2227092603-2680403404-1919150376-1001_Classes\CLSID\{9486aaf1-0930-362a-962d-8e6908739c817} => removed successfully
HKU\S-1-5-21-2227092603-2680403404-1919150376-1001_Classes\CLSID\{d936918b-9c4b-555e-074a-c79314be04e1} => removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk => ":A1B76439FE" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk => ":BE32D07BC5" ADS removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk => ":B96E9B8455" ADS removed successfully
C:\Users\Public\Shared Files => ":VersionCache" ADS removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{16B18F4B-09CE-48A6-85D3-0128314F2F9C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A6F4FD9E-EAE6-4F9A-8C30-3770557B76A5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{63E68715-9EC9-4986-9B0E-0A138B08A190}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A73C4E91-FE49-4B5F-9B4D-C0EE667410A2}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{511E751D-9E0C-4764-A043-B838FB395007}" => removed successfully

=========== EmptyTemp: ==========

FlushDNS => completed
BITS transfer queue => 1048576 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 141962171 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 1241109929 B
Windows/system/drivers => 77832898 B
Edge => 0 B
Chrome => 1121998528 B
Firefox => 940469431 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 226103 B
systemprofile32 => 226103 B
LocalService => 332043 B
NetworkService => 332043 B
Dan => 188387085 B

RecycleBin => 0 B
EmptyTemp: => 3.5 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 15:42:19 ====

Re: obcasne zasekavani pc

Napsal: 12 čer 2023 15:00
od Rudy
Smazáno. Chod PC je již plynulý?

Re: obcasne zasekavani pc

Napsal: 12 čer 2023 15:22
od číslo
zatím vsechno v pohode kdyby neco tak mam napsat sem nebo zalozit nove vlakno? a dekuji

Re: obcasne zasekavani pc

Napsal: 12 čer 2023 17:43
od Rudy
Cvíli to tu nechám otevřené, kdyby později, založte nové vlákno. Není zač! :)