Udělal jsem dle pokynů, ale zřejmě to neproběhlo obvyklým způsobem. pročistilo to. Avira nic nezablokovala. Restartovalo to PC. A naběhlo vše v 19:48. Ale nespustil se FRST jako minule s výsledným logem. Našel jsem v adresáři FRST Fixlog.txt z 19:42. Ten sem vkládám. Snad je to ten správný soubor, co měl být vytvořen. Dík za další rady.
Fix result of Farbar Recovery Scan Tool (x86) Version: 20-10-2019
Ran by kuku (20-10-2019 19:40:36) Run:2
Running from D:\FRST
Loaded Profiles: kuku (Available Profiles: kuku)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
ExportKey: HKU\S-1-5-21-73998946-1782675459-2744590695-1000\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
ExportKey: HKLM\SYSTEM\CurrentControlSet\Services\84034335
File: C:\Windows\explorer.exe
HKLM\...\Run: [] => [X]
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {445844DB-7D5A-487A-A2F2-2B5B3EE77B63} - \RealDownloader Update Check -> No File <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
U3 aswbdisk; no ImagePath
U3 iswSvc; no ImagePath
ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => -> No File
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\84034335.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\84034335.sys => ""="Driver"
EmptyTemp:
End
*****************
Processes closed successfully.
Restore point was successfully created.
========= Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum =========
Count : 19
Average :
Sum : 19081
Maximum :
Minimum :
Property : Length
========= End of Powershell: =========
================== ExportKey: ===================
[HKU\S-1-5-21-73998946-1782675459-2744590695-1000\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
"ExcludeProfileDirs"="AppData\Local;AppData\LocalLow;$Recycle.Bin"
"BuildNumber"="7601"
"FirstLogon"="0"
"ParseAutoexec"="1"
"shell"="explorer.exe"
=== End of ExportKey ===
================== ExportKey: ===================
"HKLM\SYSTEM\CurrentControlSet\Services\84034335" => not found
=== End of ExportKey ===
========================= File: C:\Windows\explorer.exe ========================
C:\Windows\explorer.exe
Catalog: C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_40_for_KB3184143~31bf3856ad364e35~x86~~6.1.1.4.cat
File is digitally signed
MD5: 6DDCA324434FFA506CF7DC4E51DB7935
Creation and modification date: 2018-01-06 21:17 - 2016-08-29 16:55
Size: 002972672
Attributes: ----A
Company Name: Microsoft Windows -> Microsoft Corporation
Internal Name: explorer
Original Name: EXPLORER.EXE
Product: Microsoft® Windows® Operating System
Description: Windows Explorer
File Version: 6.1.7601.23537 (win7sp1_ldr.160829-0600)
Product Version: 6.1.7601.23537
Copyright: © Microsoft Corporation. All rights reserved.
VirusTotal:
https://www.virustotal.com/file/11d69fb ... 571588280/
====== End of File: ======
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\" => not found
HKLM\SOFTWARE\Policies\Google => removed successfully.
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{445844DB-7D5A-487A-A2F2-2B5B3EE77B63} => not found
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RealDownloader Update Check => not found
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => removed successfully.
aswbdisk => service not found.
HKLM\System\CurrentControlSet\Services\iswSvc => removed successfully.
iswSvc => service removed successfully.
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\PDFCreator.ShellContextMenu => not found
HKLM\Software\Classes\CLSID\{d9cea52e-100d-4159-89ea-76e845bc13e1} => not found
HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\84034335.sys => not found
HKLM\System\CurrentControlSet\Control\SafeBoot\Network\84034335.sys => not found
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 11540872 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 704054 B
Edge => 0 B
Chrome => 105916188 B
Firefox => 36654728 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 0 B
LocalService => 0 B
NetworkService => 1318 B
kuku => 2369728 B
RecycleBin => 0 B
EmptyTemp: => 157.9 MB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 19:42:49 ====