[Rozwiązano] Jak usunąć Safe Finder? Załączam logi z FRST

Cytat:

HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
(WZTeam -> MSFree Inc.) [Brak podpisu cyfrowego] C:\ProgramData\KMSAuto\bin\KMSSS.exe
HKLM\...\RunOnce: [lh1jxcvn4vj] => C:\Program Files (x86)\qesdfv\228563197.exe [665088 2019-03-02] (Files Manager) [Brak podpisu cyfrowego]
GroupPolicy: Ograniczenia - Windows Defender <==== UWAGA
HKLM\...\RunOnce: [lh1jxcvn4vj] => C:\Program Files (x86)\qesdfv\228563197.exe [665088 2019-03-02] (Files Manager) [Brak podpisu cyfrowego]
HKU\S-1-5-21-3478780245-2457304820-3927713091-1001\...\MountPoints2: {6ccd929f-13ed-11e9-8d91-806e6f6e6963} - "E:\ASRSetup.exe"
R2 KMSEmulator; C:\ProgramData\KMSAuto\bin\KMSSS.exe [35504 2016-11-05] (WZTeam -> MSFree Inc.) [Brak podpisu cyfrowego]
Task: {1549F248-8A86-480F-A21A-3096650BD53A} - System32\Tasks\User => cmd.exe /c REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /f /v User /t REG_SZ /d "cmd.exe /c start www.dipladoks.org"
Task: {EA106CA7-A152-452E-9416-E433DC588952} - System32\Tasks\Odkurzacz => C:\Program Files (x86)\Odkurzacz\odkurzacz.exe (FranmoSoftware) [Brak podpisu cyfrowego] <==== UWAGA
HKU\S-1-5-21-3478780245-2457304820-3927713091-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoGk3GzeHhcr-ccZ00TJyLvdRKAa9Pj_h2OXfxmqVYRfAfv2-DiNgrZjm0OYeepy3O0FQL2bx3fUdqEAno556TaKV1vb90EJSY45cFQQKjcVg0ebt1jLzqDqq59f_nep6YgUYL26VMe3sDsHqi6xlI7zVODfIVFM9Ocl70pTSs6Zf&q={searchTerms}
HKU\S-1-5-21-3478780245-2457304820-3927713091-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoGk3GzeHhcr-ccZ00TJyLvdRKAa9Pj_h2OXfxmqVYRfAfv2-DiNgrZjm0OYeepy3O0FQL2bx3fUdqEArahVJgxokVc27dymVINisobVRgRPlWB8svtXEZEHPFXc40XReFwJ1GdVYWweZpZa2oGdxILV0ZuVysPmuW2SmfsXrzMGe
SearchScopes: HKLM-x32 -> DefaultScope - brak wartości
CHR DefaultSearchURL: Default -> hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoGk3GzeHhcr-ccZ00TJyLvdRKAa9Pj_h2OXfxmqVYRfAfv2-DiNgrZjm0OYeepy3O0FQL2bx3fUdqEAntLvhIrp2KMqyH9uAjBAuPDrwkyjp25snP6cMyN5k6LF1asw9uXrDgTWCB94tl1FAKf2dfq00wq_KKxiLegBPqjFLOast&q={searchTerms}
CHR DefaultSearchKeyword: Default -> feed.sonic-search.com
S3 WinDivert1.1; C:\ProgramData\KMSAuto\bin\driver\x64WDV\WinDivert.sys [35376 2013-12-03] (Nemea Mjukvaruutveckling AB -> Basil Projects)
SafeFinder (HKLM-x32\...\{B3C29AAB-B093-498E-AB9F-EF24893103EC}) (Version: 1.0.0.0 - Linkury) <==== UWAGA