Powolna praca komputera,problemy przeglądarek

[miloszja]

Witam,jak w tytule wiadomości proszę o sprawdzenie logów.

Addition.txt FRST.txt Shortcut.txt

[jessica]

W dolnej części logu Addition.txt widać błędy (np. zawieszanie się "explorer.exe; problem z usługą VSS) ale nie widzę tam przyczyn tego stanu.

 

Nie masz zainstalowanego AVG, ani McAfee, więc daję do usuwania ich elementy widoczne w logach.

 

Uruchom FRST.
Skopiuj to poniższe: (ale nigdzie nie wklejaj tego!)

Spoiler

START::
FirewallRules: [{62D8881B-C07A-496B-BDC8-47A4E4518FBA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.95.289.0_x86__zpdnekdrzrea0\Spotify.exe => Brak pliku
FirewallRules: [{50FB6A18-9DC3-45DE-8FB5-D1964A6C58D0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.95.289.0_x86__zpdnekdrzrea0\Spotify.exe => Brak pliku
FirewallRules: [{EADC6836-B504-40E6-9735-6004950F0CF8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.95.289.0_x86__zpdnekdrzrea0\Spotify.exe => Brak pliku
FirewallRules: [{63101CD9-A576-4EE1-93C9-C003028F296B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.95.289.0_x86__zpdnekdrzrea0\Spotify.exe => Brak pliku
FirewallRules: [{9BD23056-F38B-4E73-80BC-5372838BBAC3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.95.289.0_x86__zpdnekdrzrea0\Spotify.exe => Brak pliku
FirewallRules: [{4435E293-E520-448D-A6D2-CFC3299DF0DD}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.95.289.0_x86__zpdnekdrzrea0\Spotify.exe => Brak pliku
FirewallRules: [{9BED7CAB-F8C7-4DCE-BF45-6FA28D160C05}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.95.289.0_x86__zpdnekdrzrea0\Spotify.exe => Brak pliku
FirewallRules: [{24F9AE7D-F701-4B2B-9C0A-C446F0A333D8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.95.289.0_x86__zpdnekdrzrea0\Spotify.exe => Brak pliku
Task: {35E5AFC3-4174-40B6-A011-69A60E763EC1} - System32\Tasks\DashlaneUpgradeCheck => net [Argument = start "Dashlane Upgrade Service"]
Task: {BE4A7A6E-DAB2-4930-A32D-5A2C72FBB570} - System32\Tasks\CareCenter\SecurityHealth_Reg_HKLMRun => C:\Program Files\Windows Defender\MSASCuiL.exe (Brak pliku)
S3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [232688 2016-04-26] (McAfee, Inc. -> McAfee, Inc.)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [382456 2016-08-02] (McAfee, Inc. -> McAfee, Inc.)
S3 mfevtp; C:\Windows\system32\mfevtps.exe [277744 2016-04-26] (McAfee, Inc. -> McAfee, Inc.)
RemoveDirectory: C:\Program Files\Common Files\McAfee
C:\Windows\system32\mfevtps.exe
S3 cfwids; C:\WINDOWS\System32\drivers\cfwids.sys [78632 2016-08-02] (McAfee, Inc. -> McAfee, Inc.)
C:\WINDOWS\System32\drivers\cfwids.sys
R3 mfeaack; C:\WINDOWS\System32\drivers\mfeaack.sys [419624 2016-08-02] (McAfee, Inc. -> McAfee, Inc.)
R3 mfeavfk; C:\WINDOWS\System32\drivers\mfeavfk.sys [349480 2016-08-02] (McAfee, Inc. -> McAfee, Inc.)
S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [83608 2016-08-02] (Microsoft Windows Early Launch Anti-malware Publisher -> McAfee, Inc.)
R3 mfefirek; C:\WINDOWS\System32\drivers\mfefirek.sys [493352 2016-08-02] (McAfee, Inc. -> McAfee, Inc.)
R0 mfehidk; C:\WINDOWS\System32\drivers\mfehidk.sys [843048 2016-08-02] (McAfee, Inc. -> McAfee, Inc.)
R3 mfencbdc; C:\WINDOWS\system32\DRIVERS\mfencbdc.sys [519456 2016-08-01] (McAfee, Inc. -> McAfee, Inc.)
S3 mfencrk; C:\WINDOWS\system32\DRIVERS\mfencrk.sys [100136 2016-08-01] (McAfee, Inc. -> McAfee, Inc.)
R0 mfewfpk; C:\WINDOWS\System32\drivers\mfewfpk.sys [243496 2016-08-02] (McAfee, Inc. -> McAfee, Inc.)
C:\WINDOWS\System32\drivers\mfeaack.sys
C:\WINDOWS\System32\drivers\mfeavfk.sys
C:\WINDOWS\System32\drivers\mfeelamk.sys
C:\WINDOWS\System32\drivers\mfefirek.sys
C:\WINDOWS\System32\drivers\mfehidk.sys
C:\WINDOWS\system32\DRIVERS\mfencbdc.sys
C:\WINDOWS\system32\DRIVERS\mfencrk.sys
C:\WINDOWS\System32\drivers\mfewfpk.sys
RemoveDirectory: C:\Users\Rodzice\AppData\Roaming\AVG
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG AntiVirus FREE.lnk
2022-05-16 16:18 - 2022-05-16 16:20 - 000381680 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\asw9358b7076ddfc478.tmp
2022-05-16 16:18 - 2022-05-16 16:19 - 000317960 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\asw207f715732d886d2.tmp
2022-05-16 16:18 - 2022-05-16 16:18 - 000255192 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\aswdfd535f7013b83d2.tmp
2022-05-16 16:18 - 2022-05-16 16:18 - 000218240 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\aswe9fbf0e95d0f4ebc.tmp
2022-05-16 16:18 - 2022-05-16 16:18 - 000102616 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\aswa47a51af1ccdda9a.tmp
2022-05-16 16:18 - 2022-05-16 16:17 - 000558912 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\asw5492684928ac9638.tmp
2022-05-16 16:18 - 2022-05-16 16:17 - 000549120 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\asw572decb78f172154.tmp
2022-05-16 16:18 - 2022-05-16 16:17 - 000282552 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\avgBoot.exe
2022-05-16 16:18 - 2022-05-16 16:17 - 000271752 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\asw9190c69eefc6290c.tmp
2022-05-16 16:18 - 2022-05-16 16:17 - 000111200 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\asw72211725e1ad62ab.tmp
2022-05-16 16:18 - 2022-05-16 16:17 - 000086272 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\aswc9b1d10a0ae3c201.tmp
2022-05-16 16:18 - 2022-05-16 16:17 - 000044704 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\aswf06a420988562fce.tmp
2022-05-16 16:18 - 2022-05-16 16:17 - 000021960 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\aswada3854657847397.tmp
2022-05-16 16:18 - 2022-05-16 16:14 - 000857632 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\asw85dd0cb184c6572d.tmp
2022-05-16 16:18 - 2022-05-16 16:14 - 000232784 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\aswab45d6b344172cb9.tmp
2022-05-16 16:18 - 2022-05-16 16:14 - 000039056 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\aswa23ace066fbbfbb6.tmp
RemoveDirectory: C:\Program Files\AVG
RemoveDirectory: C:\ProgramData\AVG
Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"}
EmptyTemp:
END::

W FRST kliknij na Fix (NAPRAW).

 

jessi

[miloszja]

Nowe logi.Sytuacja znacznie się poprawiła.Komplet skanów FRST robiony na końcu.

Addition.txt Fixlog.txt FRST.txt AdwCleaner[C00].txt AdwCleaner[S00].txt

Shortcut.txt

[jessica]

McAfee ma zablokowane swoje obiekty, więc przed usuwaniem spróbujemy je odblokować:

Uruchom FRST.
Skopiuj to poniższe: (ale nigdzie nie wklejaj tego!)

Spoiler

START::
S3 GamesAppService; "C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe" [X]
S3 mfefire; "C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe" [X]
S3 QALSvc; "C:\Program Files\Acer\Acer Quick Access\QALSvc.exe" [X]
S3 QASvc; "C:\Program Files\Acer\Acer Quick Access\QASvc.exe" [X]
S3 UEIPSvc; "C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe" [X]
Unlock: HKLM\System\CurrentControlSet\Services\mfefire
Unlock: HKLM\System\CurrentControlSet\Services\mfemms
Unlock: HKLM\System\CurrentControlSet\Services\mfevtp
Unlock: HKLM\System\CurrentControlSet\Services\cfwids
Unlock: HKLM\System\CurrentControlSet\Services\mfeaack
Unlock: HKLM\System\CurrentControlSet\Services\mfeavfk
Unlock: HKLM\System\CurrentControlSet\Services\mfeelamk
Unlock: HKLM\System\CurrentControlSet\Services\mfefirek
Unlock: HKLM\System\CurrentControlSet\Services\mfehidk
Unlock: HKLM\System\CurrentControlSet\Services\mfencbdc
Unlock: HKLM\System\CurrentControlSet\Services\mfencrk
Unlock: HKLM\System\CurrentControlSet\Services\mfewfpk
DeleteKey: HKLM\System\CurrentControlSet\Services\mfemms
DeleteKey: HKLM\System\CurrentControlSet\Services\mfefire
DeleteKey: HKLM\System\CurrentControlSet\Services\mfevtp
DeleteKey: HKLM\System\CurrentControlSet\Services\cfwids
DeleteKey: HKLM\System\CurrentControlSet\Services\mfeaack
DeleteKey: HKLM\System\CurrentControlSet\Services\mfeavfk
DeleteKey: HKLM\System\CurrentControlSet\Services\mfeelamk
DeleteKey: HKLM\System\CurrentControlSet\Services\mfefirek
DeleteKey: HKLM\System\CurrentControlSet\Services\mfehidk
DeleteKey: HKLM\System\CurrentControlSet\Services\mfencbdc
DeleteKey: HKLM\System\CurrentControlSet\Services\mfencrk
DeleteKey: HKLM\System\CurrentControlSet\Services\mfewfpk
Unlock: C:\Windows\system32\mfevtps.exe
Unlock: C:\WINDOWS\System32\drivers\cfwids.sys
Unlock: C:\WINDOWS\System32\drivers\mfeaack.sys
Unlock: C:\WINDOWS\System32\drivers\mfeavfk.sys
Unlock: C:\WINDOWS\System32\drivers\mfeelamk.sys
Unlock: C:\WINDOWS\System32\drivers\mfefirek.sys
Unlock: C:\WINDOWS\System32\drivers\mfehidk.sys
Unlock: C:\WINDOWS\system32\DRIVERS\mfencbdc.sys
Unlock: C:\WINDOWS\system32\DRIVERS\mfencrk.sys
Unlock: C:\WINDOWS\System32\drivers\mfewfpk.sys
Unlock: C:\Program Files\Common Files\McAfee\SystemCore\mfeaaca.dll
Unlock: C:\Program Files\Common Files\McAfee\SystemCore\mfehida.dll
Unlock: C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe
Unlock: C:\Program Files\Common Files\McAfee\SystemCore\mfemmsa.dll
Unlock: C:\Program Files\Common Files\McAfee\SystemCore\mfestwa.dll
C:\Windows\system32\mfevtps.exe
C:\WINDOWS\System32\drivers\cfwids.sys
C:\WINDOWS\System32\drivers\mfeaack.sys
C:\WINDOWS\System32\drivers\mfeavfk.sys
C:\WINDOWS\System32\drivers\mfeelamk.sys
C:\WINDOWS\System32\drivers\mfefirek.sys
C:\WINDOWS\System32\drivers\mfehidk.sys
C:\WINDOWS\system32\DRIVERS\mfencbdc.sys
C:\WINDOWS\system32\DRIVERS\mfencrk.sys
C:\WINDOWS\System32\drivers\mfewfpk.sys
C:\Program Files\Common Files\McAfee\SystemCore\mfeaaca.dll
C:\Program Files\Common Files\McAfee\SystemCore\mfehida.dll
C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe
C:\Program Files\Common Files\McAfee\SystemCore\mfemmsa.dll
C:\Program Files\Common Files\McAfee\SystemCore\mfestwa.dll
RemoveDirectory: C:\Program Files\Common Files\McAfee
EmptyTemp:
END::

W FRST kliknij na Fix (NAPRAW).

 

jessi

[miloszja]

Wydaje mi się że nic nie poszło.

Addition.txt Fixlog.txt FRST.txt Shortcut.txt

[miloszja]

Chyba poszło z trybu awaryjnego

Addition.txt Fixlog.txt FRST.txt Shortcut.txt

[jessica]

Tak, w Trybie Awaryjnym poszło dobrze.

 

jessi

[miloszja]

Dziękuję wszystkim za pomoc. Temat do zamknięcia.