Prośba o sprawdzenie logów

[eryk93]

Cześć, chciałbym profilaktycznie sprawdzić logi, poniżej linki, dzięki

 

FRST

Addition

[Bromidum]

Tylko kosmetyka. Możesz profilaktycznie wykonać skan RogueKiller.  

Zmień serwer DNS na Quad9 → https://www.youtube.com/embed/aujUl3yt6nM?autoplay=1 (podstawowy 9.9.9.9, zapasowy 149.112.112.112) 

 

Uruchom FRST/FRST64.exe, wciśnij kombinację klawiszy ctrl + y. Otworzy się notatnik, do którego wklej zawartość skryptu. Zamknij i zapisz. W FRST kliknij „napraw” →


CloseProcesses:
CreateRestorePoint:
GroupPolicy: Ograniczenia ? <==== UWAGA
GroupPolicy-Firefox: Ograniczenia <==== UWAGA
Policies: C:\ProgramData\NTUSER.pol: Ograniczenia <==== UWAGA
HKU\S-1-5-21-25499631-917461811-3646189918-1001\...\MountPoints2: {73ba7d22-a9f2-11ed-8b49-00d8616ee10a} - "E:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-25499631-917461811-3646189918-1001\...\MountPoints2: {73ba7d93-a9f2-11ed-8b49-00d8616ee10a} - "E:\HiSuiteDownLoader.exe" 
Task: {9614EB8E-1D0C-40C5-B1FA-E4DC4BE52F8E} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\erykc\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [21737944 2023-03-21] (ESET, spol. s r.o. -> ESET)
Task: {E2F6A717-2C0B-495D-BF17-45FC07B37401} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\erykc\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [21737944 2023-03-21] (ESET, spol. s r.o. -> ESET)
Task: {C0344347-0F24-4808-BEA7-69801082A547} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [676768 2023-04-26] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {32EAD7B8-CA95-4469-89F4-174B3304A0A4} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [718240 2023-04-26] (Mozilla Corporation -> Mozilla Foundation)
Task: {E1DFCFB1-108E-4BA8-9C83-745E064DA66B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564152 2023-04-03] (Adobe Inc. -> Adobe Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 0.0.0.0
Tcpip\..\Interfaces\{c752c7f5-0796-4180-bbee-2afd0a821388}: [DhcpNameServer] 192.168.0.1 0.0.0.0
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
S3 BraveElevationService; "C:\Program Files\BraveSoftware\Brave-Browser\Application\113.1.51.110\elevation_service.exe" [X]
AlternateDataStreams: C:\ProgramData\CcAddAppList.mod:181AA586D5 [3442]
AlternateDataStreams: C:\ProgramData\CcAddAppList.mod:7CAB5C5CDE [3442]
AlternateDataStreams: C:\ProgramData\DP45977C.lfl:677104FCAA [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.10.34.lnk:968EA13E5A [3442]
AlternateDataStreams: C:\Users\erykc\Documents\Druk nr 11 Wniosek o uzasadnienie.pdf:shield [154]
AlternateDataStreams: C:\Users\erykc\Documents\FV_53690186.pdf:shield [1421]
AlternateDataStreams: C:\Users\erykc\Documents\kreatynina_01_05_2023.pdf:shield [148]
AlternateDataStreams: C:\Users\erykc\Documents\proforma-03339106118.pdf:shield [148]
AlternateDataStreams: C:\Users\erykc\Documents\wniosek-o-uzasadnienie-wyroku-sadu (1).doc:shield [197]
AlternateDataStreams: C:\Users\erykc\Documents\wniosek-o-uzasadnienie-wyroku-sadu.doc:shield [193]
AlternateDataStreams: C:\Users\erykc\Documents\WplataBank (2).pdf:shield [129]
AlternateDataStreams: C:\Users\erykc\Documents\wynik_badania.pdf:shield [1423]
AlternateDataStreams: C:\Users\erykc\Documents\wzor-nr-8---wniosek-o-sporzadzenie-uzasadnienia-i-o-doreczenie-odpisu-wyroku-z-uzasadnieniem (1).doc:shield [289]
AlternateDataStreams: C:\Users\erykc\Documents\wzor-nr-8---wniosek-o-sporzadzenie-uzasadnienia-i-o-doreczenie-odpisu-wyroku-z-uzasadnieniem.doc:shield [285]
AlternateDataStreams: C:\Users\Public\Documents\CcAddAppList.mod:0983F7BAE6 [3442]
FirewallRules: [TCP Query User{4D002E09-14C0-4BCC-BD6F-DA6C46A2E54E}C:\riot games\riot client\riotclientservices.exe] => (Allow) C:\riot games\riot client\riotclientservices.exe => Brak pliku
FirewallRules: [UDP Query User{FE289C71-7512-4137-93CB-A41A46990EDC}C:\riot games\riot client\riotclientservices.exe] => (Allow) C:\riot games\riot client\riotclientservices.exe => Brak pliku
FirewallRules: [{A6879AD3-B148-4273-9A4E-0F1E737A9FAC}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => Brak pliku
FirewallRules: [{DC951CB5-8499-4B60-9AF3-515818ED59D7}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => Brak pliku
FirewallRules: [{E9B54019-9A50-4F77-892F-9CB48560E83E}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Brak pliku
FirewallRules: [{E697AFB3-A319-447F-8D4C-F16B4B11420B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Brak pliku
FirewallRules: [TCP Query User{DE2B5B3B-D708-4C68-93F0-4C503DFA7DD8}C:\riot games\valorant\live\shootergame\binaries\win64\valorant-win64-shipping.exe] => (Allow) C:\riot games\valorant\live\shootergame\binaries\win64\valorant-win64-shipping.exe => Brak pliku
FirewallRules: [UDP Query User{C8E86957-41DA-4BCC-83BA-BFCF039FBFA7}C:\riot games\valorant\live\shootergame\binaries\win64\valorant-win64-shipping.exe] => (Allow) C:\riot games\valorant\live\shootergame\binaries\win64\valorant-win64-shipping.exe => Brak pliku
FirewallRules: [{AE1316C7-B852-4089-974A-BD20EF55CC40}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe => Brak pliku
FirewallRules: [{0532918A-49CE-4F03-9CCF-0372C2232DDF}] => (Allow) LPort=32683
FirewallRules: [{CCE5EAEE-1E15-4FE0-A1DC-E4B15061AF1E}] => (Allow) LPort=26822
EmptyEventLogs:
CMD: sfc /scannow  
EmptyTemp: 

 

Plik naprawczy przeznaczony jest tylko dla autora wątku!


Po wykonaniu skryptu i ponownym uruchomieniu załącz utworzony fixlog.txt  

Edytowane 11 maja 2023 przez Bromidum

[eryk93]

Załączam fixlog: https://pastebin.com/xgSQrkEN