W logach nie widac tych rozszerzen.
Czy w Chrome logujesz sie do konta google i synchronizujesz ustawienia? Jezeli tak to usun dane synchronizacji z konta.
Odinstaluj: McAfee WebAdvisor
Wykonaj Fixlist.txt dla FRST:
Task: {2C59ECAF-3A27-4640-9F4B-519B05BDD70F} - \Microsoft\Windows\MUI\LPRemove -> No File <==== ATTENTION
Task: {38102367-4304-44F3-AA56-51AFB2DF7078} - System32\Tasks\Opera scheduled Autoupdate 1548162633 => C:\Users\mario\AppData\Local\Programs\Opera\launcher.exe [2019-01-09] (Opera Software)
Task: {DB592E85-DFB6-4D2A-87EC-F0EFF32CF7FD} - System32\Tasks\BraveSoftwareUpdateTaskUserS-1-5-21-3817945463-2891596308-2823985072-1000UA => C:\Users\mario\AppData\Local\BraveSoftware\Update\BraveUpdate.exe <==== ATTENTION
(McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\browserhost.exe
HKU\S-1-5-21-3817945463-2891596308-2823985072-1000\...\Run: [Shell] => C:\Program Files\TP-Link\TP-Link TL-WN722N\WPS_TOOL_AUTO.vbs [146 2018-07-11] ()
HKU\S-1-5-21-3817945463-2891596308-2823985072-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.web-pl.com/
HKU\S-1-5-21-3817945463-2891596308-2823985072-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
SearchScopes: HKU\S-1-5-21-3817945463-2891596308-2823985072-1000 -> DefaultScope {B37517F9-FA6D-4D8F-998F-69F015CB3B16} URL = hxxp://www.web-pl.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3817945463-2891596308-2823985072-1000 -> {B37517F9-FA6D-4D8F-998F-69F015CB3B16} URL = hxxp://www.web-pl.com/search?q={searchTerms}
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2018-12-19] (McAfee, Inc.)
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2019-01-22]
CHR HomePage: Default -> hxxp://www.web-pl.com/
CHR StartupUrls: Default -> "hxxp://www.web-pl.com/"
CHR DefaultSearchURL: Default -> hxxps://pl.search.yahoo.com/search?fr=mcafee_uninternational&type=E210PL91105G91207&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho
CHR Extension: (McAfee® WebAdvisor) - C:\Users\mario\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2019-02-01]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn] - hxxps://clients2.google.com/service/update2/crx
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [666912 2018-12-19] (McAfee, Inc.)
2019-01-04 12:42 - 2019-01-04 12:42 - 000016384 _____ C:\Program Files\uik.dat
2019-01-28 17:19 - 2002-01-01 02:41 - 000000000 ____D C:\AdwCleaner
2018-12-12 21:02 - 2019-01-04 13:08 - 000000005 _____ () C:\Program Files\is.dat
2019-01-04 12:42 - 2019-01-04 12:42 - 000016384 _____ () C:\Program Files\uik.dat