Съмнения за зараза

31 август 20251 г.

Здравейте, от известно време системата започна да забавя- по-точно хром, бавно зарежда , когато реша да гледам филм или ленти понякога тръгват само със звук.Затварям браузъра и го отварям отново тръгва и картина, като цяло системата не работи като преди

FRST.txt Addition.txt

31 август 20251 г.

Здравейте,

Първия лог файл е непълен и съответно безполезен в този си вид. Моля повторете проверката и го прикачете отново.

Във втория лог се вижда, че проблема по-скоро не е свързан със зловреден софтуер, а по-скоро в хардуера. Изглежда, че диска ви има лоши сектори и може би е добре да направите бекъп на важните си файлове и да се замислите за смяна. Стига това да е възможно, защото това явно е някакъв лаптоп. Дори ако е възможно аз бих сложил SSD вместо механичен диск като евентуален ъпгрейд. Иначе дори РАМ паметта е заета на 81%. Толкова си може машинката.

Error: (08/31/2025 09:14:41 AM) (Source: disk) (EventID: 7) (User: )
Description: The device, \Device\Harddisk0\DR0, has a bad block.

Цитат

==================== Memory info ===========================

BIOS: Hewlett-Packard 68PZI Ver. F.12 11/30/2009
Motherboard: Hewlett-Packard 3074
Processor: Intel(R) Core(TM)2 Duo CPU T6570 @ 2.10GHz
Percentage of memory in use: 81%
Total physical RAM: 4060.26 MB
Available physical RAM: 767.18 MB
Total Virtual: 6866.26 MB
Available Virtual: 3730.51 MB

Пуснете една проверка на диска:

От Command Prompt (CMD.exe) стартиран с десен бутон и Run as administrator въведете командата и натиснете Enter.

ECHO Y|CHKDSK C: /X /F /R /B

Рестартирайте и изчакайте проверката да приключи. След като зареди Windows наново отворете Start => Run => въведете eventvwr. msc

Оттам отворете Windows Logs => Applications => потърсете за събитие WinInit или Chkdsk с ID номер 1001 и копирайте тази информация в следващия си коментар.

Ето инструкции:

https://www.sevenforums.com/tutorials/96938-check-disk-chkdsk-read-event-viewer-log.html

Не е зле да покажете и S.M.A.R.T. статуса на диска да речем с CrystalDiskInfo:

https://www.kaldata.com/софтуер/crystaldiskinfo-112693.html

Поздрави!

1

31 август 20251 г.

Автор

Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 17.9.2024 г. 17:23:31
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: DESKTOP-0R7QVT2
Description:

Checking file system on 😄
The type of the file system is NTFS.

One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.

Stage 1: Examining basic file system structure ...
Read failure with status 0xc000009c at offset 0xd882e3000 for 0x400 bytes.
File record segment 6A6DC is unreadable.
Read failure with status 0xc000009c at offset 0xd882e3400 for 0x400 bytes.
File record segment 6A6DD is unreadable.
Read failure with status 0xc000009c at offset 0xd882e3800 for 0x400 bytes.
File record segment 6A6DE is unreadable.
Read failure with status 0xc000009c at offset 0xd882e3c00 for 0x400 bytes.
File record segment 6A6DF is unreadable.
784128 file records processed.

File verification completed.
Phase duration (File record verification): 6.61 minutes.
21229 large file records processed.

Phase duration (Orphan file record recovery): 0.00 milliseconds.
Read failure with status 0xc000009c at offset 0xd882e3000 for 0x400 bytes.
Read failure with status 0xc000009c at offset 0xd882e3400 for 0x400 bytes.
Read failure with status 0xc000009c at offset 0xd882e3800 for 0x400 bytes.
Read failure with status 0xc000009c at offset 0xd882e3c00 for 0x400 bytes.
4 bad file records processed.

Phase duration (Bad file record checking): 0.00 milliseconds.

Stage 2: Examining file name linkage ...
8150 reparse records processed.

Index entry IKEEXT.DLL of index $I30 in file 0xc69 points to unused file 0x6a6df.
Deleting index entry IKEEXT.DLL in index $I30 of file C69.
Index entry MI56BF~1.CAT of index $I30 in file 0x2c912 points to unused file 0x6a6dc.
Deleting index entry MI56BF~1.CAT in index $I30 of file 2C912.
Index entry MIC9D5~1.CAT of index $I30 in file 0x2c912 points to unused file 0x6a6de.
Deleting index entry MIC9D5~1.CAT in index $I30 of file 2C912.
Index entry Microsoft-Windows-EditionSpecific-EnterpriseSEval-Package~31bf3856ad364e35~amd64~pt-PT~10.0.19041.4780.cat of index $I30 in file 0x2c912 points to unused file 0x6a6de.
Deleting index entry Microsoft-Windows-EditionSpecific-EnterpriseSEval-Package~31bf3856ad364e35~amd64~pt-PT~10.0.19041.4780.cat in index $I30 of file 2C912.
Index entry Microsoft-Windows-Product-Data-21h1-EKB-Wrapper-Package~31bf3856ad364e35~amd64~sr-Latn-RS~10.0.19041.3636.cat of index $I30 in file 0x2c912 points to unused file 0x6a6dc.
Deleting index entry Microsoft-Windows-Product-Data-21h1-EKB-Wrapper-Package~31bf3856ad364e35~amd64~sr-Latn-RS~10.0.19041.3636.cat in index $I30 of file 2C912.
Index entry IKEEXT.DLL of index $I30 in file 0x8570f points to unused file 0x6a6df.
Deleting index entry IKEEXT.DLL in index $I30 of file 8570F.
Index entry BFE.DLL of index $I30 in file 0x85711 points to unused file 0x6a6dd.
Deleting index entry BFE.DLL in index $I30 of file 85711.
1203792 index entries processed.

Index verification completed.
Phase duration (Index verification): 10.41 minutes.
0 unindexed files scanned.

Phase duration (Orphan reconnection): 10.47 seconds.
0 unindexed files recovered to lost and found.

Phase duration (Orphan recovery to lost and found): 23.49 seconds.
8150 reparse records processed.

Phase duration (Reparse point and Object ID verification): 633.70 milliseconds.

Stage 3: Examining security descriptors ...
Cleaning up 3417 unused index entries from index $SII of file 0x9.
Cleaning up 3417 unused index entries from index $SDH of file 0x9.
Cleaning up 3417 unused security descriptors.
Security descriptor verification completed.
Phase duration (Security descriptor verification): 250.09 milliseconds.
209833 data files processed.

Phase duration (Data attribute verification): 1.77 milliseconds.
CHKDSK is verifying Usn Journal...
Usn Journal verification completed.
Adding 1 bad clusters to the Bad Clusters File.
Correcting errors in the master file table's (MFT) DATA attribute.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
CHKDSK discovered free space marked as allocated in the volume bitmap.

Windows has made corrections to the file system.
No further action is required.

312568831 KB total disk space.
61330396 KB in 438359 files.
361228 KB in 209834 indexes.
4 KB in bad sectors.
868407 KB in use by the system.
65536 KB occupied by the log file.
250008796 KB available on disk.

4096 bytes in each allocation unit.
78142207 total allocation units on disk.
62502199 allocation units available on disk.
Total duration: 17.97 minutes (1078643 ms).

Internal Info:
00 f7 0b 00 f4 df 09 00 60 9b 11 00 00 00 00 00 ........`.......
e8 01 00 00 ee 1d 00 00 00 00 00 00 00 00 00 00 ................

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2024-09-17T14:23:31.8102665Z" />
<EventRecordID>44389</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>DESKTOP-0R7QVT2</Computer>
<Security />
</System>
<EventData>
<Data>