Logi do sprawdzenia, duże zużycie procesora

[kingkong]

Cześć, ostatnio miałem dużo problemów z komputerem przy włączaniu secureboota i tpm 2.0 i przywróciło mi system, od tego momentu komputer działa dużo gorzej.

Prosiłbym o sprawdzenie logów i pomoc.

 

 

FRST_12-06-2023 12.38.14.txt Addition_12-06-2023 12.38.14.txt

[Bromidum]

Odinstaluj:

- µTorrent, BitTorrent Web

- CCleaner

- Driver Easy

- NVIDIA GeForce Experience

 

Zamienniki:

- qBittorent ( https://www.qbittorrent.org/download.php )  

- BleachBit ( https://www.bleachbit.org ) 

 

Zmień serwer DNS na Quad9 → https://www.youtube.com/embed/aujUl3yt6nM?autoplay=1 (podstawowy 9.9.9.9, zapasowy 149.112.112.112) 

 

Wykonaj skan RogueKiller Anti Malware →  https://www.adlice.com/roguekiller/#alt_download 

Zalecane pobranie wersji przenośnej (portable). Przed uruchomieniem pełnego skanowania należy włączyć w ustawieniach bezsygnaturowy „moduł MaIPE (BETA)”; opcjonalnie „skanuj z pełną wydajnością” (ustawienia → ustawienia skanowania).    

 

Uruchom FRST/FRST64.exe, wciśnij kombinację klawiszy ctrl + y. Otworzy się notatnik, do którego wklej zawartość skryptu. Zamknij i zapisz. W FRST kliknij „napraw” →


SystemRestore: On 
CloseProcesses:
CreateRestorePoint:
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [711328 2022-06-16] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-4085050152-1157453586-3094700922-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [36976728 2022-06-14] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-4085050152-1157453586-3094700922-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [371304 2019-11-02] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-4085050152-1157453586-3094700922-1001\...\Run: [Opera GX Browser Assistant] => C:\Users\48507\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe [3291288 2021-02-01] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-4085050152-1157453586-3094700922-1001\...\Run: [MicrosoftEdgeAutoLaunch_0AD03242B5199ABEE794D27948B0DD13] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4113872 2023-06-08] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-4085050152-1157453586-3094700922-1001\...\Run: [btweb] => C:\Users\48507\AppData\Roaming\BitTorrent Web\btweb.exe [6467584 2023-04-04] (Rainberry Inc -> BitTorrent Inc.)
HKU\S-1-5-21-4085050152-1157453586-3094700922-1001\...\MountPoints2: {36e5800c-5296-11eb-a98c-d037458aed9c} - "F:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-4085050152-1157453586-3094700922-1001\...\MountPoints2: {ae4d9fa7-e901-11ea-a97a-d037458aed9c} - "E:\HiSuiteDownLoader.exe" 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\$McRebootA5E6DEAA56$.lnk [2020-09-20]
ShortcutTarget: $McRebootA5E6DEAA56$.lnk ->  (Brak pliku)
Task: {0B315145-707C-41EE-840C-A39AB83F9FD6} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2022-06-14] (Piriform Software Ltd -> Piriform)
Task: {26361DB0-77F0-4B7E-A2A7-15DFF43D8077} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [5002472 2023-03-28] (Intel Corporation -> Intel Corporation)
Task: {9A49959D-F83C-4EAC-9B6F-8CBBDE54AF6C} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [5002472 2023-03-28] (Intel Corporation -> Intel Corporation)
Task: {A6BD43E9-95CB-4EED-BA5A-AAA7D3D843B1} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => C:\WINDOWS\System32\Wscript.exe [170496 2021-09-17] (Microsoft Windows -> Microsoft Corporation) -> //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
Task: {29A7F604-7038-43C8-BCE6-D97DA3079B4D} - System32\Tasks\Opera GX scheduled Autoupdate 1644149213 => C:\Users\48507\AppData\Local\Programs\Opera GX\launcher.exe [2611608 2023-05-25] (Opera Norway AS -> Opera Software)
Task: {68304C21-1102-43FC-9B3A-D9FEEAA83F0E} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1645566027 => C:\Users\48507\AppData\Local\Programs\Opera GX\launcher.exe [2611608 2023-05-25] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\48507\AppData\Local\Programs\Opera GX\assistant" $(Arg0)
Task: {31020270-674F-4FB5-AED4-1CDFE3B0C62E} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [732064 2023-05-31] (Mozilla Corporation -> Mozilla Foundation)
Task: {5F1AFC25-1943-48A5-8A5B-4ABD75504491} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [677280 2023-05-31] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {9034B614-0E58-42BB-AACB-24CCDCC0CE19} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-alzyy4@gmail.com => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-05-26] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {D67E42FB-2FD2-45F6-91E0-3186934277AC} - System32\Tasks\Driver Easy Scheduled Scan => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe [4036480 2023-03-01] (Easeware Technology Limited -> Easeware)
Task: C:\WINDOWS\Tasks\Driver Easy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
Task: {F619878C-19F8-432F-B768-C3A3DD50D8EF} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe  --automatic (Brak pliku)
Tcpip\Parameters: [DhcpNameServer] 89.228.4.126 31.11.173.2
Tcpip\..\Interfaces\{1e653ff9-2448-40ba-b2f6-56dd5ecb4610}: [NameServer] 103.86.96.100,103.86.99.100
Tcpip\..\Interfaces\{5726be71-8aa6-470e-83e8-11698756a354}: [DhcpNameServer] 89.228.4.126 31.11.173.2
Tcpip\..\Interfaces\{922e43a4-e266-4866-8dea-7dadab1a44fe}: [DhcpNameServer] 89.228.4.126 31.11.173.2
Tcpip\..\Interfaces\{e04d5b3a-5cde-4d0a-8d68-3c73ed6e5472}: [DhcpNameServer] 192.168.1.1
Edge Extension: (Brak nazwy) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nie znaleziono]
Edge Extension: (Brak nazwy) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nie znaleziono]
Edge Extension: (Brak nazwy) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nie znaleziono]
Edge Extension: (Brak nazwy) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nie znaleziono]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [makcojoppodhcgmmchohadhpkicoafka]
S3 EAAntiCheat; system32\drivers\eaanticheat.sys [X]
U3 aswbdisk; Brak ImagePath
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} =>  -> Brak pliku
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Brak pliku
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} =>  -> Brak pliku
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} =>  -> Brak pliku
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} =>  -> Brak pliku
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Brak pliku
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} =>  -> Brak pliku
AlternateDataStreams: C:\$SysReset:err [1064]
AlternateDataStreams: C:\Users\48507\AppData\Local\Temp:$DATA [16]
AlternateDataStreams: C:\ProgramData\DP45977C.lfl:677104FCAA [3442]
AlternateDataStreams: C:\ProgramData\settings.ini:27EB0451C1 [3442]
AlternateDataStreams: C:\ProgramData\settings.ini:DDC2FF1873 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk:1BABAD356A [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2015.lnk:742FE07988 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Asystent aktualizacji do systemu Windows 10.lnk:940F7430B4 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk:09A0A90EF3 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini:41964AA945 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FACEIT AC.lnk:550995E265 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk:980850BA8A [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk:6A9F97D342 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk:8096E45125 [3442]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [2714]
IE trusted site: HKU\S-1-5-21-4085050152-1157453586-3094700922-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-4085050152-1157453586-3094700922-1001\...\webcompanion.com -> hxxp://webcompanion.com
AV: ESET Security (Enabled - Up to date) {89B55CC4-3881-78B2-11E2-479AE0371896}
AV: ESET Security (Enabled - Up to date) {885D845F-AF19-0124-FECE-FFF49D00F440}
AS: ESET Security (Enabled - Up to date) {333C65BB-8923-0EAA-C47E-C486E687BEFD}
FW: ESET Zapora (Enabled) {B18EDDE1-72EE-79EA-3ABD-EEAF1EE45FED}
CMD: netsh advfirewall reset
CMD: sfc /scannow  
EmptyEventLogs:
EmptyTemp: 

Plik naprawczy przeznaczony jest tylko dla autora wątku!


Po wykonaniu skryptu i ponownym uruchomieniu załącz utworzony fixlog.txt  

Edytowane 12 czerwca 2023 przez Bromidum

[kingkong]

@Bromidum

 

Wszystko zrobione zgodnie z instrukcjami, załączam fixlog.

 

 

Fixlog.txt

Edytowane 12 czerwca 2023 przez kingkong

[Bromidum]

By usunąć wszystkie pliki/foldery utworzone przez FRST oraz narzędzie jako takie, zmień nazwę pliku FRST/FRST64.exe na uninstall.exe i uruchom ten plik. Procedura wymaga ponownego uruchomienia urządzenia. 

Edytowane 14 czerwca 2023 przez Bromidum