Częste spowolnienia systemu

[FastMan]

Cześć, mam problem, że system bardzo często łapie różne zwiechy, w losowych momentach, np. nagle zaczyna przycinać youtube, po kilkunastu wszystko wraca do normy, albo podczas zwykłego przeglądania stron nagle cała przeglądarka zmienia się w białe lub czarne pole na 1-2s po czym wszystko wraca. Proszę o sprawdzenie logów, czy nie ma tam nic podejrzanego.

FRST.txt

(54.95 KiB) Ściągnięto 82 razy

Addition.txt

(118.77 KiB) Ściągnięto 84 razy

[ordynat]

Jest infekcja - ma aż 10 Zaplanowanych Zadań, więc być może one są źródłem Twojego problemu.

Uruchom FRST.
Skopiuj to poniższe: (ale nigdzie nie wklejaj tego!) - FRST sam znajdzie "fixlist" w schowku systemowym

Spoiler:

START::
RemoveDirectory: C:\Program Files (x86)\AW Manager
HKLM\...\Run: [AdobeAAMUpdater-1.0] => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" (Brak pliku)
HKLM\...\Run: [AdobeGCInvoker-1.0] => "C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe" (Brak pliku)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKU\S-1-5-21-4135350591-1163165710-1810336352-1001\...\Policies\system: [EnableLUA] 0
HKU\S-1-5-21-4135350591-1163165710-1810336352-1001\...\Policies\Explorer: []
HKLM\Software\Microsoft\Active Setup\Installed Components: [{28B89EEF-1007-0000-7102-CF3F3A09B77D}] -> msiexec /fus {28B89EEF-1007-0000-7102-CF3F3A09B77D}
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
IFEO\LogTransport2.exe: [Debugger] 0
GroupPolicy: Ograniczenia ? <==== UWAGA
Policies: C:\ProgramData\NTUSER.pol: Ograniczenia <==== UWAGA
Task: {00B9AFDF-EF48-4A53-92FB-35DF5CDDA0CD} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -MediaCenterRecoveryTask (Brak pliku)
Task: {1345F225-6D02-4370-B670-7F4E8DF0C918} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -ObjectStoreRecoveryTask (Brak pliku)
Task: {1A2A093B-05BE-43E1-A732-E1CB5792545C} - System32\Tasks\AdvancedWindowsManager #5 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [697208 2022-05-11] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
Task: {240B905C-B1FD-4D94-B472-667B064F49A9} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe /RestartRecording (Brak pliku)
Task: {4FBB2B0F-D0C8-4E80-80A9-A247A9B9686B} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0) (Brak pliku)
Task: {55BD8EC6-6EB0-47F1-B47E-A9FB85D41F97} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe -mode=scheduled (Brak pliku)
Task: {57F0E8F2-E5DE-41AE-A2F0-9308E9D57CB2} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe /DoReindexSearchRoot (Brak pliku)
Task: {6373FEE7-7A31-4CD3-B83F-C2BD627BE106} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe /DRMInit (Brak pliku)
Task: {70D832F9-A47D-47E1-BFBC-B69B55C31B0B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery (Brak pliku)
Task: {7DCDA678-7824-4CB4-992A-5C53CB269037} - System32\Tasks\{7883B7DF-C40B-4682-AF9B-B8BC51A72F39} => C:\Windows\system32\pcalua.exe -a "D:\FastMan\Gry\Poradnik nagrywanie starszych gier XBOX360\abgx360_video_waves_1-13_sfx.exe" -d "D:\FastMan\Gry\Poradnik nagrywanie starszych gier XBOX360"
Task: {87DB8ED8-B5F1-47AD-9792-25CCE6F0B026} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe /DoConfigureInternetTimeService (Brak pliku)
Task: {8B768140-4A72-4FC5-B646-45EF20771822} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe (Brak pliku)
Task: {92F2DB70-BBD7-4FCF-AE24-31F4EF788894} - System32\Tasks\AdvancedWindowsManager #6 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [697208 2022-05-11] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
Task: {9444B3D9-2172-4754-95E0-4C30EF4BDC4A} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0) (Brak pliku)
Task: {96F435A9-1391-43BF-98C7-A93E903AF8A0} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe /OCURActivate (Brak pliku)
Task: {A0DCEB57-FCC4-401F-AF29-9414CFB03673} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0) (Brak pliku)
Task: {A9354F26-3CE5-4BF9-9889-1D39DB137BE2} - System32\Tasks\AdobeAAMUpdater-1.0-FastManPC-FastMan => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe -mode=scheduled (Brak pliku)
Task: {AA077864-67B8-4B33-85F2-8664960487A1} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -SqlLiteRecoveryTask (Brak pliku)
Task: {B0685882-4C6C-48CA-9EB8-46A822B6AC88} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -PvrRecoveryTask (Brak pliku)
Task: {B1877184-62F1-4A50-A3FD-8D6CD2616F4F} - System32\Tasks\AdvancedWindowsManager #7 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [697208 2022-05-11] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
Task: {B9A20CD0-4C01-4E7F-AD38-8386F94A6040} - System32\Tasks\AdvancedWindowsManager #4 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [697208 2022-05-11] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
Task: {BB547650-A2CC-4EE1-B156-49C4F0433F07} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe $(Arg0) (Brak pliku)
Task: {BD6D2423-DB82-4E40-B2A3-3C66F20BDCA1} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery (Brak pliku)
Task: {C4BDCDC9-496B-443C-87A8-D3A1853C772E} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0) (Brak pliku)
Task: {CB5EA87D-5218-4D97-969F-9ECF684B6585} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoActivateWindowsSearch (Brak pliku)
Task: {D54FEE7B-6AAD-48BB-8ABC-57391FEB2F00} - System32\Tasks\AdvancedUpdater => C:\Program Files (x86)\AW Manager\Windows Manager\Windows Updater.exe [1036152 2022-05-11] (Microleaves LTD -> AdvancedWindowsManager) <==== UWAGA
Task: {D7B98FD6-2EC5-4520-AF3D-85479E18B1DC} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0) (Brak pliku)
Task: {D8FCC55F-72D7-4C64-B4D4-AC298ECD2B5A} - System32\Tasks\AdvancedWindowsManager #8 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [697208 2022-05-11] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
Task: {D964A3BC-B976-4035-91DD-5579C141E060} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /PBDADiscovery (Brak pliku)
Task: {DE3C34BE-6DFA-433D-B202-B20511301F69} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe -pscn 0 (Brak pliku)
Task: {E6685A45-745F-4D51-8988-A1AECEE247B5} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe -PvrSchedule (Brak pliku)
Task: {EA881E91-4212-4439-992A-1D1395DD63D9} - System32\Tasks\AdvancedWindowsManager #2 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [697208 2022-05-11] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
Task: {EB3CB5AA-3091-493B-B874-1F9FEC7B9F4D} - System32\Tasks\AdvancedWindowsManager #9 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [697208 2022-05-11] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
Task: {F33C632E-403B-44DA-8FB1-C57DE0871C01} - System32\Tasks\AdvancedWindowsManager #3 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [697208 2022-05-11] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
Task: {F5A65E65-5D2A-4A4B-BB76-814E27476835} - System32\Tasks\AdvancedWindowsManager #1 => C:\Program Files (x86)\AW Manager\Windows Manager\AdvancedWindowsManager.exe [697208 2022-05-11] (Microleaves LTD -> Advanced Windows Manager) <==== UWAGA
WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Brak pliku)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [Brak pliku]
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\FastMan\AppData\Local\Akamai\netsession_win.exe"
FirewallRules: [{2EB9E895-4867-4B1A-A234-10C0B82B119D}] => (Allow) C:\Users\FastMan\AppData\Roaming\Zoom\bin\airhost.exe => Brak pliku
FirewallRules: [{3A2271D1-4855-4124-917C-4E2CFB789426}] => (Allow) C:\Users\FastMan\AppData\Roaming\Zoom\bin\airhost.exe => Brak pliku
FirewallRules: [{4F5A3379-45F6-41EF-8F64-C2805732A6AE}] => (Allow) C:\Users\FastMan\AppData\Roaming\Zoom\bin\Zoom.exe => Brak pliku
FirewallRules: [{704BA931-3C2E-423E-BC87-AAE022E2C148}] => (Allow) F:\AnyDesk.exe => Brak pliku
FirewallRules: [{7821C7D6-827B-47BE-9906-711A042642DB}] => (Allow) F:\AnyDesk.exe => Brak pliku
FirewallRules: [{C1124D8B-BDB9-413A-9B61-7FC689C68E9A}] => (Allow) F:\AnyDesk.exe => Brak pliku
FirewallRules: [{25E42DA2-9DF1-4DCF-A99B-C3C5F9D82132}] => (Allow) F:\AnyDesk.exe => Brak pliku
FirewallRules: [{C40A765B-4E9A-4BCE-8E1C-769D5B432259}] => (Allow) F:\AnyDesk.exe => Brak pliku
FirewallRules: [{2811D488-7CC5-4059-A2C0-D7963125A8F2}] => (Allow) F:\AnyDesk.exe => Brak pliku
FirewallRules: [{CA5AD12E-E696-4227-91C3-E5801B375CFF}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe => Brak pliku
FirewallRules: [{5D5FA153-A0B9-4EC1-A4A0-A8C7E0DECF23}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe => Brak pliku
FirewallRules: [{DC404E60-538D-4B0F-A570-E061F3D711A3}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe => Brak pliku
FirewallRules: [{52DF2272-96A5-4F49-AF05-9C711B0BDA5B}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe => Brak pliku
FirewallRules: [{C035D4B9-E8DC-4542-B87F-AD4BC6A5E413}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe => Brak pliku
FirewallRules: [{484F5B0E-CE7D-4748-A6D6-4D5078955851}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe => Brak pliku
FirewallRules: [{48A96A8E-9C0E-4C35-ABC1-E46BF8C8942E}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => Brak pliku
FirewallRules: [{A9FFC415-17C5-4B51-ACBD-7CD0F8D6A322}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => Brak pliku
FirewallRules: [{B0D87F34-2825-4DE4-A45C-E30233C01F05}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => Brak pliku
FirewallRules: [{4F667433-0DBD-4066-BC58-7DDD672C3AE3}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => Brak pliku
FirewallRules: [{830A1AFC-447D-4384-9B78-7DF242E85CEF}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => Brak pliku
FirewallRules: [{C55A1339-B6FE-4319-A0BA-DAE14EF88465}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => Brak pliku
S2 AdobeUpdateService; "C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe" [X]
S2 AGMService; "C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe" [X]
S2 AGSService; "C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe" [X]
EmptyEventLogs:
EmptyTemp:
END::

W FRST kliknij na Fix (NAPRAW).
.

Autor postu otrzymał pochwałę

[FastMan]

Dzięki!
Wstawiam fixlog. Czy jakieś jeszcze logi zrobić?

Fixlog.txt

(35.61 KiB) Ściągnięto 94 razy

[ordynat]

Czy jakieś jeszcze logi zrobić?

Nie.