Prośba o analizę logów FRST.

[GrindujTopy]

Dzień dobry. 

 

Proszę o sprawdzenie logów. Generalnie komputer jak na swój wiek i parametry działa całkiem sprawnie po tym gdy trochę usług czy programów wyłączyłem bądź kompletnie usunąłem. Niektóre zadania jednak powodują, że łapie zadyszkę i występują zacięcia/lagi a nawet kompletny freeze się zdarzy ale to na 2-3 sekundy i wraca do żywych. Pasta termo na procesorze wymieniana regularnie co dwa lata, zawsze starannie wyczyszczone i nałożone świeżej także temperatury raczej nie są problemem. Przy grach grzeje się mocno ale to nie urządzenie do gier, do pracy czy internetu wystarcza. 
Skanowany regularnie przy pomocy Malwarebytes, ESET Online Scanner oraz teraz przed FRST puściłem skan AdwCleaner i wykrył coś w lokalizacji "C:/End/". Dałem kwarantannę, pomyślnie wyrzuciło.

Po tym zrobiłem skan FRST według instrukcji. Proszę o sprawdzenie czy nic tu nie siedzi. ClassicShell używam umyślnie, dzięki temu menu start wygląda klasycznie jak w starszych wersjach Windows. Mam też program DefenderUI, którym dostosowuję reguły i inne sprawy w Defenderze. 

 

 

Addition.txt Shortcut.txt FRST.txt

[Illidan]

Temperatury sprawdzałeś podczas grania i normalnej pracy? Tu przyśle by się logo z CoreTemp i GPU-Z po pół godzinie hrabia i normalnej pracy. Programy te są darmowe, nie trzeba ich instalować i zapisują pomiar co sekundę do pliku tekstowego. Te pliki tekstowe możesz pokazać na forum. Tak samo w jakim stanie jest dysk, czy dysku twardego w komputerze. Dobrze by było zobaczyć ich S.M.A.R.T. Tutaj pobrać darmowy program CrustalDiskInfo i zgubić zrzuty ekranu ona programu z parametrami dysku twardego i pokazać na forum. No i czy system aktualny i sterowniki? Sterowniki można spróbować uaktualnić darmowym DriverCloud. Z logami poczekaj na ekspertów forum, jak nie sprawdzą to zrobię to w poniedziałek wieczorem, bo już będę miał wolne i czas na to.

 

Co do FRST... Jest tu sporo tego, nie ma może jakiś niebezpiecznych aplikacji, ale jest sporo namieszanie, nie wiem czy przez Ciebie, czy to pozostałość po jakimś jednak złosliwym oprogramowaniu, ale są osierocone zadania, brakujące pliki, polityki blokujące funkcje systemu, blokada aktualizacji Windows i telemetria i jeden potencjalnie niebezpieczny program, to chyba aktywator, ale nie jestem pewny czy tylko. Spróbujemy wszystko usunąc i naprawić, poza telemetrią, to zostawimy wyłaczone. Długo sie zastanawiałem jak zrobić ten skrypt. Skorzystałem z pomocy AI, mój wyglądałby troszkę inaczej, gdyby sam miał wszystko robić. Zróbmy tak:

Uruchom FRST. Skopiuj zawartość podaną niżej i nigdzie nie wklejaj-FRST sam znajdzie "fixlist" w schowku systemowym.

Spoiler

Start::
CloseProcesses:
CreateRestorePoint:

***********************
*** AUTOSTART CLEANUP ***
***********************

HKU\S-1-5-21-3702064335-1485693863-2381811695-1002\...\Run: [ProductAuthenticationService] => C:\Users\pc\AppData\Roaming\ProductAuthenticationService\pas.exe
HKU\S-1-5-21-3702064335-1485693863-2381811695-1001\...\StartupApproved\Run: => "ProductAuthenticationService"
HKU\S-1-5-21-3702064335-1485693863-2381811695-1002\...\StartupApproved\Run: => "ProductAuthenticationService"
C:\Users\pc\AppData\Roaming\ProductAuthenticationService
C:\Users\guest\AppData\Roaming\ProductAuthenticationService

HKU\S-1-5-21-3702064335-1485693863-2381811695-1002\...\Run: [Spotify] => (Brak pliku)
HKU\S-1-5-21-3702064335-1485693863-2381811695-1002\...\Run: [SteamServerBrowser] => C:\Users\pc\AppData\Roaming\SteamServerBrowser\SteamServerBrowser.exe
C:\Users\pc\AppData\Roaming\SteamServerBrowser

***********************
*** TASKS CLEANUP ***
***********************

Task: {09A22AC7-9F73-451A-9A1E-43CEF3CA416D}
Task: {7E854B1A-DDFE-4AA5-AF27-A9FA3CA508CB}
Task: {1104BE36-0C2A-4F41-AEF9-C48D7EE958C8}
Task: {8376D0C3-C65A-4EB2-ACEA-2F5A57ABE2B0}
Task: {1B195E49-2144-4DBA-BBDE-8C8599E4F6D7}

***********************
*** IFEO CLEANUP ***
***********************

IFEO\CompatTelRunner.exe: [Debugger] =>
IFEO\DeviceCensus.exe: [Debugger] =>
IFEO\EOSnotify.exe: [Debugger] =>
IFEO\InstallAgent.exe: [Debugger] =>
IFEO\MoNotificationUx.exe: [Debugger] =>
IFEO\MusNotification.exe: [Debugger] =>
IFEO\MusNotificationUx.exe: [Debugger] =>
IFEO\remsh.exe: [Debugger] =>
IFEO\SihClient.exe: [Debugger] =>
IFEO\UpdateAssistant.exe: [Debugger] =>
IFEO\UsoClient.exe: [Debugger] =>
IFEO\WaaSMedic.exe: [Debugger] =>
IFEO\WaasMedicAgent.exe: [Debugger] =>
IFEO\Windows10Upgrade.exe: [Debugger] =>
IFEO\Windows10UpgraderApp.exe: [Debugger] =>

***********************
*** POLICIES CLEANUP ***
***********************

HKLM\...\Policies\Explorer: [NoWindowsUpdate] -
HKLM\...\Policies\Explorer: [AllowOnlineTips] -
HKLM\...\Policies\Explorer: [HideSCAMeetNow] -

HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Ograniczenia
HKLM\SOFTWARE\Policies\Microsoft\MRT: Ograniczenia
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia
HKLM\SOFTWARE\Policies\Microsoft\Edge: Ograniczenia

GroupPolicy: Restriction
Policies: C:\ProgramData\NTUSER.pol

***********************
*** FILE CLEANUP ***
***********************

C:\Users\pc\AppData\Local\d2.bin
C:\Users\pc\AppData\Local\d3.bin
C:\Users\pc\AppData\Local\sleep.exe

***********************
*** CLSID CLEANUP ***
***********************

HKU\S-1-5-21-3702064335-1485693863-2381811695-1001_Classes\CLSID\{2EF7E390-2F7C-4F9A-9B7D-4A87B56B711D}
HKU\S-1-5-21-3702064335-1485693863-2381811695-1001_Classes\CLSID\{38971E90-14FD-44F6-AA45-1447B653F873}
HKU\S-1-5-21-3702064335-1485693863-2381811695-1001_Classes\CLSID\{B29F5F83-90DF-479A-BDE7-8A9F4412E394}
HKU\S-1-5-21-3702064335-1485693863-2381811695-1001_Classes\CLSID\{E8791438-3525-48BF-A600-C577AD1674C2}

***********************
*** PRIVACY HARDENING ***
***********************

Reg: reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v AllowTelemetry /t REG_DWORD /d 0 /f
Reg: reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo" /v DisabledByGroupPolicy /t REG_DWORD /d 1 /f
Reg: reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /v DisableConsumerFeatures /t REG_DWORD /d 1 /f
Reg: reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /v DisableSoftLanding /t REG_DWORD /d 1 /f

Reg: reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v EnableActivityFeed /t REG_DWORD /d 0 /f
Reg: reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v PublishUserActivities /t REG_DWORD /d 0 /f
Reg: reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v UploadUserActivities /t REG_DWORD /d 0 /f

SC config DiagTrack start= disabled
SC stop DiagTrack

SC config dmwappushservice start= disabled
SC stop dmwappushservice

Reg: reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive" /v DisableFileSyncNGSC /t REG_DWORD /d 1 /f

Reg: reg add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v StartupBoostEnabled /t REG_DWORD /d 0 /f
Reg: reg add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v HideFirstRunExperience /t REG_DWORD /d 1 /f

Reg: reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v BingSearchEnabled /t REG_DWORD /d 0 /f

***********************
*** MISC CLEANUP ***
***********************

EmptyTemp:
End::

Fixlist przeznaczona tylko dla autora tematu!

W FRST kliknij opcję "Napraw" (Fix). Pokaż raport  "fixlog.txt", który otrzymasz po restarcie komputera. Po restarcie systemu zrób nowe logi, tym razem bez "Shortcut.txt".

Poniżej podaję wersję skryptu który sam przygotowałem:

Spoiler

Start::
CreateRestorePoint:
HKLM\...\Policies\Explorer: [NoWindowsUpdate] 1
HKLM\...\Policies\Explorer: [AllowOnlineTips] 0
HKLM\...\Policies\Explorer: [HideSCAMeetNow] 1
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Microsoft\MRT: Ograniczenia <==== UWAGA
HKU\S-1-5-21-3702064335-1485693863-2381811695-1001\...\Policies\Explorer: [HideSCAMeetNow] 1
HKU\S-1-5-21-3702064335-1485693863-2381811695-1001\...\MountPoints2: D - "D:\Autorun.exe" 
HKU\S-1-5-21-3702064335-1485693863-2381811695-1001\...\MountPoints2: {6bb728f0-7ed3-11ee-82f1-f8a963531cbd} - "V:\RunGame.exe" 
HKU\S-1-5-21-3702064335-1485693863-2381811695-1002\...\Run: [ProductAuthenticationService] => C:\Users\pc\AppData\Roaming\ProductAuthenticationService\pas.exe [1004072 2019-05-07] (ResolveDevOps Limited -> ResolveDevOps Limited) <==== UWAGA
HKU\S-1-5-21-3702064335-1485693863-2381811695-1002\...\Run: [Spotify] => C:\Users\guest\AppData\Roaming\Spotify\Spotify.exe --autostart --minimized (Brak pliku)
HKU\S-1-5-21-3702064335-1485693863-2381811695-1002\...\Policies\Explorer: [HideSCAMeetNow] 1
HKU\S-1-5-21-3702064335-1485693863-2381811695-1002\...\MountPoints2: {6bb728f0-7ed3-11ee-82f1-f8a963531cbd} - "V:\RunGame.exe" 
IFEO\CompatTelRunner.exe: [Debugger] %windir%\System32\taskkill.exe
IFEO\DeviceCensus.exe: [Debugger] %windir%\System32\taskkill.exe
IFEO\EOSnotify.exe: [Debugger] /
IFEO\InstallAgent.exe: [Debugger] /
IFEO\MoNotificationUx.exe: [Debugger] /
IFEO\MusNotification.exe: [Debugger] /
IFEO\MusNotificationUx.exe: [Debugger] /
IFEO\remsh.exe: [Debugger] /
IFEO\SihClient.exe: [Debugger] /
IFEO\UpdateAssistant.exe: [Debugger] /
IFEO\UsoClient.exe: [Debugger] /
IFEO\WaaSMedic.exe: [Debugger] /
IFEO\WaasMedicAgent.exe: [Debugger] /
IFEO\Windows10Upgrade.exe: [Debugger] /
IFEO\Windows10UpgraderApp.exe: [Debugger] /
GroupPolicy: Ograniczenia ? <==== UWAGA
Policies: C:\ProgramData\NTUSER.pol: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Edge: Ograniczenia <==== UWAGA
Task: {09A22AC7-9F73-451A-9A1E-43CEF3CA416D} - System32\Tasks\DolbySelectorTask => %ProgramFiles%\Dolby Digital Plus\ddp.exe  -autostart (Brak pliku)
Task: {7E854B1A-DDFE-4AA5-AF27-A9FA3CA508CB} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe  --automatic (Brak pliku)
Task: {1104BE36-0C2A-4F41-AEF9-C48D7EE958C8} - System32\Tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-3702064335-1485693863-2381811695-1001 => "C:\Users\pc\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe"  (Brak pliku)
Task: {8376D0C3-C65A-4EB2-ACEA-2F5A57ABE2B0} - System32\Tasks\TVT\TVSUUpdateTask => "C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe"  /CM -search R -action INSTALL -includerebootpackages 1,3,4,5 -noicon -noreboot -nolicense -defaultupdate -schtask (Brak pliku)
Task: {1B195E49-2144-4DBA-BBDE-8C8599E4F6D7} - System32\Tasks\TVT\TVSUUpdateTask_UserLogOn => "C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe"  PendingTask (Brak pliku)
Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
S4 SUService; "C:\Program Files (x86)\Lenovo\System Update\SUService.exe" [X]
U4 DcpSvc; Brak ImagePath
S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VCDS\VCDS Release 22.10.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\lenovo\System Update.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deep Silver\Secret Files Tunguska\Launch Secret Files Tunguska.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BthPS3\BthPS3 Driver Configuration Tool.lnk
C:\ProgramData\Microsoft\Windows\GameExplorer\{06852FF8-9BC3-4741-ABB6-D5A482AA2328}\PlayTasks\3\Elektroniczna rejestracja.lnk
C:\ProgramData\Microsoft\Windows\GameExplorer\{06852FF8-9BC3-4741-ABB6-D5A482AA2328}\PlayTasks\2\Pomoc techniczna.lnk
C:\ProgramData\Microsoft\Windows\GameExplorer\{06852FF8-9BC3-4741-ABB6-D5A482AA2328}\PlayTasks\1\Plik Przeczytaj.lnk
C:\ProgramData\Microsoft\Windows\GameExplorer\{06852FF8-9BC3-4741-ABB6-D5A482AA2328}\PlayTasks\0\Play.lnk
C:\Users\pc\Downloads\freetube-0.23.3-win-x64-portable — skrót (2) .lnk
C:\Users\pc\Documents\WebView\Tor Browser\Start Tor Browser.lnk
C:\Users\pc\Desktop\Programy\freetube-0.21.3-win-x64-portable.lnk
C:\Users\pc\Desktop\gry\Need for Speed™ Undercover.lnk
C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo\Deinstalacja programu Lenovo Service Bridge.lnk
CustomCLSID: HKU\S-1-5-21-3702064335-1485693863-2381811695-1001_Classes\CLSID\{2EF7E390-2F7C-4F9A-9B7D-4A87B56B711D}\InprocServer32 -> C:\Users\pc\AppData\Local\Microsoft\EdgeUpdate\1.3.173.51\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-3702064335-1485693863-2381811695-1001_Classes\CLSID\{38971E90-14FD-44F6-AA45-1447B653F873}\InprocServer32 -> C:\Users\pc\AppData\Local\Microsoft\EdgeUpdate\1.3.173.45\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-3702064335-1485693863-2381811695-1001_Classes\CLSID\{B29F5F83-90DF-479A-BDE7-8A9F4412E394}\InprocServer32 -> C:\Users\pc\AppData\Local\Microsoft\EdgeUpdate\1.3.171.39\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-3702064335-1485693863-2381811695-1001_Classes\CLSID\{E8791438-3525-48BF-A600-C577AD1674C2}\InprocServer32 -> C:\Users\pc\AppData\Local\Microsoft\EdgeUpdate\1.3.173.49\psuser_64.dll => Brak pliku
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Brak pliku
FirewallRules: [TCP Query User{18571F46-4129-485C-BD42-1986F9A00421}C:\program files (x86)\crossout\launcher.exe] => (Allow) C:\program files (x86)\crossout\launcher.exe => Brak pliku
FirewallRules: [UDP Query User{4A48EDC4-18BB-4478-9688-22C44685E138}C:\program files (x86)\crossout\launcher.exe] => (Allow) C:\program files (x86)\crossout\launcher.exe => Brak pliku
FirewallRules: [{5A24A81A-99E9-42A4-86A9-382D8B11B67B}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe => Brak pliku
FirewallRules: [{8819FEA6-E190-4346-A801-CBDB4742DAFC}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe => Brak pliku
FirewallRules: [{FEC0F5C0-1BDF-4CE7-B153-1002E829180B}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe => Brak pliku
FirewallRules: [{E2C89F1A-EB4A-4B66-80CA-A5A8C731A0BF}] => (Block) C:\Users\pc\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSB.exe => Brak pliku
FirewallRules: [{1C151261-4FE2-4192-B4A5-ACAAF4E6F229}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv.exe => Brak pliku
FirewallRules: [{4ECBA4B9-46E6-45EB-9E75-8F9E0F3FE478}] => (Block) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe => Brak pliku
FirewallRules: [{4288FE5E-8930-419E-86C0-D4BAB34C4F79}] => (Block) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe => Brak pliku
FirewallRules: [{AE3663DB-2FCB-48CD-9F2C-B5F31F32090A}] => (Block) C:\Program Files\Intel\WiFi\bin\EvtEng.exe => Brak pliku
FirewallRules: [{9121FF8B-EFD0-4342-B241-8FF6EE5A3BDE}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe => Brak pliku
FirewallRules: [{DFF970D1-FCDD-42FA-8D2A-D345189279AD}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe => Brak pliku
FirewallRules: [{67EBBA70-167B-4251-A535-915571CC5843}] => (Block) C:\Program Files\Intel\WiFi\bin\EvtEng.exe => Brak pliku
FirewallRules: [{C0F86EF2-A73D-4FB8-82B7-7964D7F2F44B}] => (Block) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe => Brak pliku
FirewallRules: [{B99F1C72-E596-49F8-82E9-2722F68A3C9C}] => (Block) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe => Brak pliku
FirewallRules: [{0E13ED54-A65B-4507-AB13-483AF0995F6A}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv.exe => Brak pliku
FirewallRules: [{213F1D6D-9D65-41D7-BC7C-0D19773D7E82}] => (Block) C:\Users\pc\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSB.exe => Brak pliku
FirewallRules: [{FACDE0A3-91CB-49C2-8A64-C9806E88D6ED}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe => Brak pliku
FirewallRules: [TCP Query User{FB0BA29C-4CE8-42E4-9193-8A243A4E9C6E}C:\program files\airdc++\airdc.exe] => (Allow) C:\program files\airdc++\airdc.exe => Brak pliku
FirewallRules: [UDP Query User{20F0FEA7-0CC9-4D19-ABAF-D9C707911708}C:\program files\airdc++\airdc.exe] => (Allow) C:\program files\airdc++\airdc.exe => Brak pliku
FirewallRules: [TCP Query User{8C6C0429-EB00-49FC-8C9D-38765F95EB1D}C:\program files (x86)\steam\steamapps\common\combat arms reloaded\engine.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\combat arms reloaded\engine.exe => Brak pliku
FirewallRules: [UDP Query User{85B13330-A2E6-42D3-B39D-5707D64AD3DF}C:\program files (x86)\steam\steamapps\common\combat arms reloaded\engine.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\combat arms reloaded\engine.exe => Brak pliku
FirewallRules: [TCP Query User{CB5F1B68-FE7E-42E4-9874-563720069478}C:\program files (x86)\steam\steamapps\common\combat arms the classic\voicechat.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\combat arms the classic\voicechat.exe => Brak pliku
FirewallRules: [UDP Query User{75945573-C310-48EF-B604-659D0004093C}C:\program files (x86)\steam\steamapps\common\combat arms the classic\voicechat.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\combat arms the classic\voicechat.exe => Brak pliku
FirewallRules: [{EBB5F3C5-928F-4778-A8DB-9C0EF0218AF5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\COMBAT ARMS THE CLASSIC\NMService.exe => Brak pliku
FirewallRules: [{A283CFC8-97BA-4F02-9B6F-2ACE056A737F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\COMBAT ARMS THE CLASSIC\NMService.exe => Brak pliku
FirewallRules: [TCP Query User{52330CB6-390A-4170-A4AE-F8BA752E4C00}C:\program files (x86)\airdroid cast\airdroidcast.exe] => (Block) C:\program files (x86)\airdroid cast\airdroidcast.exe => Brak pliku
FirewallRules: [UDP Query User{22BAF646-A4BE-4949-AA8F-13969B418119}C:\program files (x86)\airdroid cast\airdroidcast.exe] => (Block) C:\program files (x86)\airdroid cast\airdroidcast.exe => Brak pliku
FirewallRules: [TCP Query User{D1C544BA-A912-4A52-BE45-D74D6074F351}C:\users\pc\downloads\agent_setup_windows\setup.exe] => (Allow) C:\users\pc\downloads\agent_setup_windows\setup.exe => Brak pliku
FirewallRules: [UDP Query User{0F7DFC7E-15C3-415F-BD8A-63FE5DFA9E93}C:\users\pc\downloads\agent_setup_windows\setup.exe] => (Allow) C:\users\pc\downloads\agent_setup_windows\setup.exe => Brak pliku
FirewallRules: [TCP Query User{D71FF9D1-E8B8-4149-B19D-133ADDEBA51C}C:\fawkes hub\launcher.exe] => (Allow) C:\fawkes hub\launcher.exe => Brak pliku
FirewallRules: [UDP Query User{C43A57F0-C423-4045-868B-DD8F1120D92A}C:\fawkes hub\launcher.exe] => (Allow) C:\fawkes hub\launcher.exe => Brak pliku
FirewallRules: [TCP Query User{71E12A6C-B2BA-4353-A296-608905FFFDF6}C:\users\pc\downloads\test_drive_unlimited_win_files_en\game files\testdriveunlimited.exe] => (Allow) C:\users\pc\downloads\test_drive_unlimited_win_files_en\game files\testdriveunlimited.exe => Brak pliku
FirewallRules: [UDP Query User{BC63E098-D7B4-40E0-9435-C8A6CF125B00}C:\users\pc\downloads\test_drive_unlimited_win_files_en\game files\testdriveunlimited.exe] => (Allow) C:\users\pc\downloads\test_drive_unlimited_win_files_en\game files\testdriveunlimited.exe => Brak pliku
FirewallRules: [TCP Query User{EF4D5CBE-6A17-4279-ACDA-858E5E6205A4}C:\users\pc\appdata\local\programs\plitch\plitch.exe] => (Allow) C:\users\pc\appdata\local\programs\plitch\plitch.exe => Brak pliku
FirewallRules: [UDP Query User{2DDA3675-F102-477A-8110-8FFE2D6E6F1E}C:\users\pc\appdata\local\programs\plitch\plitch.exe] => (Allow) C:\users\pc\appdata\local\programs\plitch\plitch.exe => Brak pliku
FirewallRules: [{B3AA430F-45EE-4694-A819-2A455FA34466}] => (Allow) C:\Ross-Tech\VCDS-AKP\VCDS.EXE => Brak pliku
FirewallRules: [TCP Query User{731002DB-B2D0-4BE1-AACC-03D5261751D1}C:\users\pc\desktop\tdu platinum v1.0\test drive unlimited\testdriveunlimited.exe] => (Allow) C:\users\pc\desktop\tdu platinum v1.0\test drive unlimited\testdriveunlimited.exe => Brak pliku
FirewallRules: [UDP Query User{7AA78C2E-CD0D-4D31-9090-1B5CD6CE8AE8}C:\users\pc\desktop\tdu platinum v1.0\test drive unlimited\testdriveunlimited.exe] => (Allow) C:\users\pc\desktop\tdu platinum v1.0\test drive unlimited\testdriveunlimited.exe => Brak pliku
FirewallRules: [{BB938649-EAF1-44EE-B080-AF7EC10FC1B7}] => (Allow) C:\Ross-Tech\VCDS\VCDS.EXE => Brak pliku
CustomCLSID: HKU\S-1-5-21-3702064335-1485693863-2381811695-1001_Classes\CLSID\{2EF7E390-2F7C-4F9A-9B7D-4A87B56B711D}\InprocServer32 -> C:\Users\pc\AppData\Local\Microsoft\EdgeUpdate\1.3.173.51\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-3702064335-1485693863-2381811695-1001_Classes\CLSID\{38971E90-14FD-44F6-AA45-1447B653F873}\InprocServer32 -> C:\Users\pc\AppData\Local\Microsoft\EdgeUpdate\1.3.173.45\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-3702064335-1485693863-2381811695-1001_Classes\CLSID\{B29F5F83-90DF-479A-BDE7-8A9F4412E394}\InprocServer32 -> C:\Users\pc\AppData\Local\Microsoft\EdgeUpdate\1.3.171.39\psuser_64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-3702064335-1485693863-2381811695-1001_Classes\CLSID\{E8791438-3525-48BF-A600-C577AD1674C2}\InprocServer32 -> C:\Users\pc\AppData\Local\Microsoft\EdgeUpdate\1.3.173.49\psuser_64.dll => Brak pliku
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Brak pliku
FirewallRules: [TCP Query User{18571F46-4129-485C-BD42-1986F9A00421}C:\program files (x86)\crossout\launcher.exe] => (Allow) C:\program files (x86)\crossout\launcher.exe => Brak pliku
FirewallRules: [UDP Query User{4A48EDC4-18BB-4478-9688-22C44685E138}C:\program files (x86)\crossout\launcher.exe] => (Allow) C:\program files (x86)\crossout\launcher.exe => Brak pliku
FirewallRules: [{5A24A81A-99E9-42A4-86A9-382D8B11B67B}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe => Brak pliku
FirewallRules: [{8819FEA6-E190-4346-A801-CBDB4742DAFC}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe => Brak pliku
FirewallRules: [{FEC0F5C0-1BDF-4CE7-B153-1002E829180B}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe => Brak pliku
FirewallRules: [{E2C89F1A-EB4A-4B66-80CA-A5A8C731A0BF}] => (Block) C:\Users\pc\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSB.exe => Brak pliku
FirewallRules: [{1C151261-4FE2-4192-B4A5-ACAAF4E6F229}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv.exe => Brak pliku
FirewallRules: [{4ECBA4B9-46E6-45EB-9E75-8F9E0F3FE478}] => (Block) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe => Brak pliku
FirewallRules: [{4288FE5E-8930-419E-86C0-D4BAB34C4F79}] => (Block) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe => Brak pliku
FirewallRules: [{AE3663DB-2FCB-48CD-9F2C-B5F31F32090A}] => (Block) C:\Program Files\Intel\WiFi\bin\EvtEng.exe => Brak pliku
FirewallRules: [{9121FF8B-EFD0-4342-B241-8FF6EE5A3BDE}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe => Brak pliku
FirewallRules: [{DFF970D1-FCDD-42FA-8D2A-D345189279AD}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe => Brak pliku
FirewallRules: [{67EBBA70-167B-4251-A535-915571CC5843}] => (Block) C:\Program Files\Intel\WiFi\bin\EvtEng.exe => Brak pliku
FirewallRules: [{C0F86EF2-A73D-4FB8-82B7-7964D7F2F44B}] => (Block) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe => Brak pliku
FirewallRules: [{B99F1C72-E596-49F8-82E9-2722F68A3C9C}] => (Block) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe => Brak pliku
FirewallRules: [{0E13ED54-A65B-4507-AB13-483AF0995F6A}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv.exe => Brak pliku
FirewallRules: [{213F1D6D-9D65-41D7-BC7C-0D19773D7E82}] => (Block) C:\Users\pc\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSB.exe => Brak pliku
FirewallRules: [{FACDE0A3-91CB-49C2-8A64-C9806E88D6ED}] => (Block) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe => Brak pliku
FirewallRules: [TCP Query User{FB0BA29C-4CE8-42E4-9193-8A243A4E9C6E}C:\program files\airdc++\airdc.exe] => (Allow) C:\program files\airdc++\airdc.exe => Brak pliku
FirewallRules: [UDP Query User{20F0FEA7-0CC9-4D19-ABAF-D9C707911708}C:\program files\airdc++\airdc.exe] => (Allow) C:\program files\airdc++\airdc.exe => Brak pliku
FirewallRules: [TCP Query User{8C6C0429-EB00-49FC-8C9D-38765F95EB1D}C:\program files (x86)\steam\steamapps\common\combat arms reloaded\engine.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\combat arms reloaded\engine.exe => Brak pliku
FirewallRules: [UDP Query User{85B13330-A2E6-42D3-B39D-5707D64AD3DF}C:\program files (x86)\steam\steamapps\common\combat arms reloaded\engine.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\combat arms reloaded\engine.exe => Brak pliku
FirewallRules: [TCP Query User{CB5F1B68-FE7E-42E4-9874-563720069478}C:\program files (x86)\steam\steamapps\common\combat arms the classic\voicechat.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\combat arms the classic\voicechat.exe => Brak pliku
FirewallRules: [UDP Query User{75945573-C310-48EF-B604-659D0004093C}C:\program files (x86)\steam\steamapps\common\combat arms the classic\voicechat.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\combat arms the classic\voicechat.exe => Brak pliku
FirewallRules: [{EBB5F3C5-928F-4778-A8DB-9C0EF0218AF5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\COMBAT ARMS THE CLASSIC\NMService.exe => Brak pliku
FirewallRules: [{A283CFC8-97BA-4F02-9B6F-2ACE056A737F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\COMBAT ARMS THE CLASSIC\NMService.exe => Brak pliku
FirewallRules: [TCP Query User{52330CB6-390A-4170-A4AE-F8BA752E4C00}C:\program files (x86)\airdroid cast\airdroidcast.exe] => (Block) C:\program files (x86)\airdroid cast\airdroidcast.exe => Brak pliku
FirewallRules: [UDP Query User{22BAF646-A4BE-4949-AA8F-13969B418119}C:\program files (x86)\airdroid cast\airdroidcast.exe] => (Block) C:\program files (x86)\airdroid cast\airdroidcast.exe => Brak pliku
FirewallRules: [TCP Query User{D1C544BA-A912-4A52-BE45-D74D6074F351}C:\users\pc\downloads\agent_setup_windows\setup.exe] => (Allow) C:\users\pc\downloads\agent_setup_windows\setup.exe => Brak pliku
FirewallRules: [UDP Query User{0F7DFC7E-15C3-415F-BD8A-63FE5DFA9E93}C:\users\pc\downloads\agent_setup_windows\setup.exe] => (Allow) C:\users\pc\downloads\agent_setup_windows\setup.exe => Brak pliku
FirewallRules: [TCP Query User{D71FF9D1-E8B8-4149-B19D-133ADDEBA51C}C:\fawkes hub\launcher.exe] => (Allow) C:\fawkes hub\launcher.exe => Brak pliku
FirewallRules: [UDP Query User{C43A57F0-C423-4045-868B-DD8F1120D92A}C:\fawkes hub\launcher.exe] => (Allow) C:\fawkes hub\launcher.exe => Brak pliku
FirewallRules: [TCP Query User{71E12A6C-B2BA-4353-A296-608905FFFDF6}C:\users\pc\downloads\test_drive_unlimited_win_files_en\game files\testdriveunlimited.exe] => (Allow) C:\users\pc\downloads\test_drive_unlimited_win_files_en\game files\testdriveunlimited.exe => Brak pliku
FirewallRules: [UDP Query User{BC63E098-D7B4-40E0-9435-C8A6CF125B00}C:\users\pc\downloads\test_drive_unlimited_win_files_en\game files\testdriveunlimited.exe] => (Allow) C:\users\pc\downloads\test_drive_unlimited_win_files_en\game files\testdriveunlimited.exe => Brak pliku
FirewallRules: [TCP Query User{EF4D5CBE-6A17-4279-ACDA-858E5E6205A4}C:\users\pc\appdata\local\programs\plitch\plitch.exe] => (Allow) C:\users\pc\appdata\local\programs\plitch\plitch.exe => Brak pliku
FirewallRules: [UDP Query User{2DDA3675-F102-477A-8110-8FFE2D6E6F1E}C:\users\pc\appdata\local\programs\plitch\plitch.exe] => (Allow) C:\users\pc\appdata\local\programs\plitch\plitch.exe => Brak pliku
FirewallRules: [{B3AA430F-45EE-4694-A819-2A455FA34466}] => (Allow) C:\Ross-Tech\VCDS-AKP\VCDS.EXE => Brak pliku
FirewallRules: [TCP Query User{731002DB-B2D0-4BE1-AACC-03D5261751D1}C:\users\pc\desktop\tdu platinum v1.0\test drive unlimited\testdriveunlimited.exe] => (Allow) C:\users\pc\desktop\tdu platinum v1.0\test drive unlimited\testdriveunlimited.exe => Brak pliku
FirewallRules: [UDP Query User{7AA78C2E-CD0D-4D31-9090-1B5CD6CE8AE8}C:\users\pc\desktop\tdu platinum v1.0\test drive unlimited\testdriveunlimited.exe] => (Allow) C:\users\pc\desktop\tdu platinum v1.0\test drive unlimited\testdriveunlimited.exe => Brak pliku
FirewallRules: [{BB938649-EAF1-44EE-B080-AF7EC10FC1B7}] => (Allow) C:\Ross-Tech\VCDS\VCDS.EXE => Brak pliku
EmptyTemp:

End::

 Użyj którego chcesz. Ważne to zrobic punkt przywracania systemu, co w obacch jako zadanie do wykonania jest zawarte. Co do reszty zaleceń, to dobrze by było jakbys prawdził temperatury i stan dysku twardego.