REKLAMA

Addition.txt

Windows 10, czarny ekran - analiza plików FRST

Witam problem wałkowany ale nie widzę aktualnego tematu a potrzebna pomoc. Wklejam pliki FRST Proszę o pomoc, z góry dziękuję.


Pobierz plik - link do postu

Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 08-03-2020
Uruchomiony przez Uzytkownik (16-03-2020 12:01:41)
Uruchomiony z C:\Users\Uzytkownik\Downloads
Windows 10 Home Wersja 1909 18363.720 (X64) (2020-01-26 15:35:55)
Tryb startu: Normal
==========================================================


==================== Konta użytkowników: =============================

Administrator (S-1-5-21-4180999624-2129486474-3880248609-500 - Administrator - Disabled)
Gość (S-1-5-21-4180999624-2129486474-3880248609-501 - Limited - Disabled)
Konto domyślne (S-1-5-21-4180999624-2129486474-3880248609-503 - Limited - Disabled)
Uzytkownik (S-1-5-21-4180999624-2129486474-3880248609-1001 - Administrator - Enabled) = & gt; C:\Users\Uzytkownik
WDAGUtilityAccount (S-1-5-21-4180999624-2129486474-3880248609-504 - Limited - Disabled)

==================== Centrum zabezpieczeń ========================

(Załączenie wejścia w fixlist spowoduje jego usunięcie.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}

==================== Zainstalowane programy ======================

(W fixlist dozwolone tylko załączanie programów adware z flagą " Hidden " w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.)

µTorrent (HKU\S-1-5-21-4180999624-2129486474-3880248609-1001\...\uTorrent) (Version: 3.5.5.45608 - BitTorrent Inc.)
Aktualizacje NVIDIA 38.0.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 38.0.4.0 - NVIDIA Corporation) Hidden
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 20.1.2397 - AVAST Software)
CPUID CPU-Z 1.91 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.91 - CPUID, Inc.)
CPUID HWMonitor 1.41 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.41 - CPUID, Inc.)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.12.0.1152 - Disc Soft Ltd)
Epic Games Launcher (HKLM-x32\...\{0B51E0DE-75C4-4C28-ABAB-AEBA1151708D}) (Version: 1.1.257.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
FPS Monitor (HKLM-x32\...\FPS Monitor_is1) (Version: 1 - )
Free RAR Password Recovery (HKLM-x32\...\{592EEAE0-810C-4AB6-9CA5-F32B4F43617A}) (Version: 3.70.69 - KRyLack Software)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 80.0.3987.132 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.441 - Google LLC) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Microsoft OneDrive (HKU\S-1-5-21-4180999624-2129486474-3880248609-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0008 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Need for Speed - Carbon (HKLM-x32\...\Need for Speed - Carbon_R.G. Mechanics_is1) (Version: - R.G. Mechanics, markfiter)
Need For Speed Hot Pursuit 2 (HKLM-x32\...\{76F4DD9B-C246-4BE0-00B6-3DE9ABF72299}) (Version: - )
Need for Speed Underground 2 (HKLM-x32\...\{909F8EBC-EC7F-48FF-0085-475D818F0F31}) (Version: - )
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.19 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 3.20.2.34 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.2.34 - NVIDIA Corporation)
NVIDIA Oprogramowanie systemu PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
NVIDIA Sterownik dźwięku HD 1.3.38.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.21 - NVIDIA Corporation)
NVIDIA Sterownik graficzny 442.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 442.50 - NVIDIA Corporation)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8228 - Realtek Semiconductor Corp.)
Roblox Player (HKLM-x32\...\roblox-player) (Version: - Roblox Corporation)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
WinRAR 5.80 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.80.0 - win.rar GmbH)

Packages:
=========
Bubble Witch 3 Saga - & gt; C:\Program Files\WindowsApps\king.com.BubbleWitch3Saga_6.5.9.0_x86__kgqvnymyfvs32 [2020-03-08] (king.com)
Candy Crush Friends - & gt; C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.32.4.0_x86__kgqvnymyfvs32 [2020-03-08] (king.com)
HP Smart - & gt; C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_110.1.671.0_x64__v10z8vjag6ke6 [2020-03-14] (HP Inc.)
Microsoft Advertising SDK for XAML - & gt; C:\Program Files\WindowsApps\microsoft.advertising.xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-01-26] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML - & gt; C:\Program Files\WindowsApps\microsoft.advertising.xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-01-26] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection - & gt; C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.6.1224.0_x64__8wekyb3d8bbwe [2020-03-10] (Microsoft Studios) [MS Ad]
MSN Pogoda - & gt; C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20503.0_x64__8wekyb3d8bbwe [2020-03-10] (Microsoft Corporation) [MS Ad]
NVIDIA Control Panel - & gt; C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.956.0_x64__56jybvy8sckqj [2020-03-08] (NVIDIA Corp.)
Spotify Music - & gt; C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.127.472.0_x86__zpdnekdrzrea0 [2020-03-08] (Spotify AB) [Startup Task]

==================== Niestandardowe rejestracje CLSID (filtrowane): ==============

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

ShellIconOverlayIdentifiers: [00asw] - & gt; {472083B0-C522-11CF-8763-00608CC02F24} = & gt; C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-08] (Avast Software s.r.o. - & gt; AVAST Software)
ContextMenuHandlers1: [avast] - & gt; {472083B0-C522-11CF-8763-00608CC02F24} = & gt; C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-08] (Avast Software s.r.o. - & gt; AVAST Software)
ContextMenuHandlers2: [DaemonShellExtDriveLite] - & gt; {C06369D6-E77D-4626-9656-1256312BD576} = & gt; C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2020-03-14] (AVB Disc Soft, SIA - & gt; Disc Soft Ltd)
ContextMenuHandlers3: [00asw] - & gt; {472083B0-C522-11CF-8763-00608CC02F24} = & gt; C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-08] (Avast Software s.r.o. - & gt; AVAST Software)
ContextMenuHandlers3: [DaemonShellExtImageLite] - & gt; {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} = & gt; C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2020-03-14] (AVB Disc Soft, SIA - & gt; Disc Soft Ltd)
ContextMenuHandlers5: [NvCplDesktopContext] - & gt; {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} = & gt; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_33895c186dfc2a0d\nvshext.dll [2020-02-25] (NVIDIA Corporation - & gt; NVIDIA Corporation)
ContextMenuHandlers6: [avast] - & gt; {472083B0-C522-11CF-8763-00608CC02F24} = & gt; C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-08] (Avast Software s.r.o. - & gt; AVAST Software)

==================== Codecs (filtrowane) ====================

==================== Skróty & WMI ========================

==================== Załadowane moduły (filtrowane) =============

2020-03-09 18:28 - 2020-03-09 18:28 - 098275328 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\ThirdParty\CEF3\Win64\libcef.dll
2020-03-09 18:28 - 2020-03-09 18:28 - 000092672 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\ThirdParty\CEF3\Win64\libEGL.dll
2020-03-09 18:28 - 2020-03-09 18:28 - 003922432 _____ () [Brak podpisu cyfrowego] C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\ThirdParty\CEF3\Win64\libGLESv2.dll
2020-03-09 18:28 - 2020-03-09 18:28 - 000547840 _____ (The Chromium Authors) [Brak podpisu cyfrowego] C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\ThirdParty\CEF3\Win64\chrome_elf.dll

==================== Alternate Data Streams (filtrowane) ========

(Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.)

AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [488]

==================== Tryb awaryjny (filtrowane) ==================

==================== Powiązania plików (filtrowane) =================

==================== Internet Explorer - Witryny zaufane i z ograniczeniami ==========

==================== Hosts - zawartość: =========================

(Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.)

2020-01-26 16:06 - 2020-03-16 11:05 - 000000027 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost

==================== Inne obszary ===========================

(Obecnie brak automatycznej naprawy dla tej sekcji.)

HKU\S-1-5-21-4180999624-2129486474-3880248609-1001\Control Panel\Desktop\\Wallpaper - & gt; c:\windows\web\wallpaper\windows\img0.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System = & gt; (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer = & gt; (SmartScreenEnabled: )
Zapora systemu Windows [funkcja włączona]

==================== MSCONFIG/TASK MANAGER - Wyłączone elementy ==

==================== Reguły Zapory systemu Windows (filtrowane) ================

(Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)

FirewallRules: [{4CDAF323-0CA7-459E-B214-6FFC1DD6FF6E}] = & gt; (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve - & gt; Valve Corporation)
FirewallRules: [{AB8C234D-D1F1-43E6-A441-AA3752BAADB2}] = & gt; (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve - & gt; Valve Corporation)
FirewallRules: [{B24899A8-2F9A-4109-8B48-D80DC18551FB}] = & gt; (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve - & gt; Valve Corporation)
FirewallRules: [{CFE8051A-5C36-4843-9F17-FE3E10804AF6}] = & gt; (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve - & gt; Valve Corporation)

==================== Punkty Przywracania systemu =========================

14-03-2020 12:09:18 Windows Update
16-03-2020 11:02:22 Restore Point Created by FRST

==================== Wadliwe urządzenia w Menedżerze urządzeń ============


==================== Błędy w Dzienniku zdarzeń: ========================

Dziennik Aplikacja:
==================
Error: (03/16/2020 11:50:23 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas wywoływania procedury CoCreateInstance. hr = 0x8007045b, Trwa proces zamykania systemu.
.

Error: (03/16/2020 11:50:23 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informacje Usługi kopiowania woluminów w tle: nie można uruchomić serwera usługi COM z identyfikatorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} i nazwą CEventSystem. [0x8007045b, Trwa proces zamykania systemu.
]

Error: (03/16/2020 11:17:46 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas wywoływania procedury CoCreateInstance. hr = 0x8007045b, Trwa proces zamykania systemu.
.

Error: (03/16/2020 11:17:46 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informacje Usługi kopiowania woluminów w tle: nie można uruchomić serwera usługi COM z identyfikatorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} i nazwą CEventSystem. [0x8007045b, Trwa proces zamykania systemu.
]

Error: (03/16/2020 11:12:04 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Błąd Usługi kopiowania woluminów w tle: nieoczekiwany błąd podczas wywoływania procedury CoCreateInstance. hr = 0x8007045b, Trwa proces zamykania systemu.
.

Error: (03/16/2020 11:12:04 AM) (Source: VSS) (EventID: 13) (User: )
Description: Informacje Usługi kopiowania woluminów w tle: nie można uruchomić serwera usługi COM z identyfikatorem CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} i nazwą CEventSystem. [0x8007045b, Trwa proces zamykania systemu.
]


Dziennik System:
=============
Error: (03/16/2020 11:51:24 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi SecDrv z powodu następującego błędu:
Nastąpiło zablokowanie ładowania sterownika

Error: (03/16/2020 11:51:24 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\WINDOWS\SysWow64\drivers\SECDRV.SYS

Error: (03/16/2020 11:18:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi SecDrv z powodu następującego błędu:
Nastąpiło zablokowanie ładowania sterownika

Error: (03/16/2020 11:18:42 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\WINDOWS\SysWow64\drivers\SECDRV.SYS

Error: (03/16/2020 11:13:01 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Nie można uruchomić usługi SecDrv z powodu następującego błędu:
Nastąpiło zablokowanie ładowania sterownika

Error: (03/16/2020 11:13:01 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\WINDOWS\SysWow64\drivers\SECDRV.SYS

Error: (03/16/2020 11:11:40 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Usługa Steam Client Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1.

Error: (03/16/2020 11:11:40 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Usługa Karta wydajności WMI niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. W przeciągu 120000 milisekund zostanie podjęta następująca czynność korekcyjna: Uruchom usługę ponownie.


CodeIntegrity:
===================================

Date: 2020-03-16 11:58:53.622
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-03-16 11:58:53.619
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-03-16 11:58:46.691
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-03-16 11:58:46.680
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-03-16 11:58:46.651
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-03-16 11:58:46.646
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

Date: 2020-03-16 11:58:46.403
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements.

Date: 2020-03-16 11:58:46.400
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.

==================== Statystyki pamięci ===========================

BIOS: American Megatrends Inc. FC 06/01/2015
Płyta główna: Gigabyte Technology Co., Ltd. 970A-DS3P
Procesor: AMD FX(tm)-6300 Six-Core Processor
Procent pamięci w użyciu: 35%
Całkowita pamięć fizyczna: 8158.66 MB
Dostępna pamięć fizyczna: 5226.23 MB
Całkowita pamięć wirtualna: 13534.66 MB
Dostępna pamięć wirtualna: 9059.38 MB

==================== Dyski ================================

Drive c: () (Fixed) (Total:539.88 GB) (Free:361.03 GB) NTFS
Drive d: (Drugi dysk) (Fixed) (Total:390.62 GB) (Free:388.35 GB) NTFS

\\?\Volume{5217a8f9-0000-0000-0000-100000000000}\ (Zastrzeżone przez system) (Fixed) (Total:0.49 GB) (Free:0.45 GB) NTFS
\\?\Volume{5217a8f9-0000-0000-0000-b01787000000}\ () (Fixed) (Total:0.52 GB) (Free:0.08 GB) NTFS

==================== MBR & Tablica partycji ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 5217A8F9)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=539.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=529 MB) - (Type=27)
Partition 4: (Not Active) - (Size=390.6 GB) - (Type=07 NTFS)

==================== Koniec Addition.txt =======================