Odinstaluj:
McAfee Safe Connect (HKLM-x32\...\{CA2B3316-2536-489C-BB9D-B6E15572A90C}) (Version: 1.4.3.156 - McAfee, Inc)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.961.1 - McAfee, Inc.)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.0.28 - McAfee, Inc.)
Otwórz notatnik systemowy i wklej:
CloseProcesses:
RemoveProxy:
Task: {564329EC-988E-4910-950B-5A243829AB82} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe (AVAST Software s.r.o. -> AVAST Software)
Task: {57540C71-29D4-43D4-A191-71B6DD01A1CA} - System32\Tasks\Opera scheduled Autoupdate 1533913868 => C:\Users\admin\AppData\Local\Programs\Opera\launcher.exe (Opera Software AS -> Opera Software)
Task: {D467F02A-BDB3-4DA7-AA67-21EE25F2B126} - System32\Tasks\Opera scheduled assistant Autoupdate 1547150840 => C:\Users\admin\AppData\Local\Programs\Opera\launcher.exe (Opera Software AS -> Opera Software)
Task: {DC801775-B6DC-4129-937E-FF0009BA3465} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
AlternateDataStreams: C:\Users\Public\AppData:CSM [488]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [478]
Hosts:
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.961\SSScheduler.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\browserhost.exe
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKU\S-1-5-21-3151824592-2380628704-25770626-1001\...\Run: [McAfeeSafeConnect] => C:\Program Files (x86)\McAfee Safe Connect\McAfee Safe Connect.exe [1032624 2018-01-23] (AnchorFree Inc -> McAfee Inc.)
HKU\S-1-5-21-3151824592-2380628704-25770626-1001\...\Run: [Napisy24Update] => "C:\Program Files (x86)\Napisy24\Napisy24Update.exe" "sleep"
HKU\S-1-5-21-3151824592-2380628704-25770626-1001\...\Run: [vibranceGUI] => C:\Users\admin\AppData\Local\Temp\Rar$EXa5104.283\vibranceGUI.exe [794624 2018-12-10] (juvlarN) [Brak podpisu cyfrowego] <==== UWAGA
HKU\S-1-5-21-3151824592-2380628704-25770626-1001\...\MountPoints2: {36978f0b-c22e-11e8-8bcc-309c23279398} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-3151824592-2380628704-25770626-1001\...\MountPoints2: {659f9973-6915-11e8-8b53-309c23279398} - "G:\setup.exe"
HKU\S-1-5-21-3151824592-2380628704-25770626-1001\...\MountPoints2: {68f8b708-b775-11e8-8bba-309c23279398} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-3151824592-2380628704-25770626-1001\...\MountPoints2: {a2f11899-523d-11e8-8b40-309c23279398} - "F:\HiSuiteDownLoader.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2019-02-18]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.961\SSScheduler.exe (McAfee, Inc. -> McAfee, Inc.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 0 <==== UWAGA (Ograniczenia - ProxySettings)
ProxyEnable: [HKLM] => Proxy [funkcja włączona]
ProxyEnable: [HKLM-x32] => Proxy [funkcja włączona]
ProxyServer: [HKLM] => http=127.0.0.1:8080;https=127.0.0.1:8080
ProxyServer: [HKLM-x32] => http=127.0.0.1:8080;https=127.0.0.1:8080
AutoConfigURL: [HKLM] => http=127.0.0.1:8080;https=127.0.0.1:8080
ProxyEnable: [.DEFAULT] => Proxy [funkcja włączona]
ProxyServer: [.DEFAULT] => http=127.0.0.1:8080;https=127.0.0.1:8080
ProxyEnable: [S-1-5-21-3151824592-2380628704-25770626-1001] => Proxy [funkcja włączona]
ProxyServer: [S-1-5-21-3151824592-2380628704-25770626-1001] => http=127.0.0.1:8080;https=127.0.0.1:8080
Hosts: 0.0.0.1 mssplus.mcafee.com
ManualProxies: 1http=127.0.0.1:8080;https=127.0.0.1:8080
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <==== UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.gmx.com/start?src=p_jkld_pl&p=jkld&p_brw=ie&p_mkt=pl&p_tsrc=301ssg01&p_w=y1w32
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avast.com/AV772/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3151824592-2380628704-25770626-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
HKU\S-1-5-21-3151824592-2380628704-25770626-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://search.gmx.com/web/result?origin=p_jkld_pl&p=jkld&p_brw=ie&p_mkt=pl&p_tsrc=301ssg01&p_w=y1w32&q={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://search.gmx.com/web/result?origin=p_jkld_pl&p=jkld&p_brw=ie&p_mkt=pl&p_tsrc=301ssg01&p_w=y1w32&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://search.gmx.com/web/result?origin=p_jkld_pl&p=jkld&p_brw=ie&p_mkt=pl&p_tsrc=301ssg01&p_w=y1w32&q={searchTerms}
SearchScopes: HKLM-x32 -> {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3151824592-2380628704-25770626-1001 -> DefaultScope {c2b8e594-d284-ef0b-2c66-48a9c98914bc} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15
SearchScopes: HKU\S-1-5-21-3151824592-2380628704-25770626-1001 -> {c2b8e594-d284-ef0b-2c66-48a9c98914bc} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE15
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2019-02-21] (McAfee, Inc. -> McAfee, Inc.)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2019-02-21] (McAfee, Inc. -> McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll Brak pliku
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FF NewTab: Mozilla\Firefox\Profiles\3ymbuxn0.default-1514038564808 -> about:newtab
FF NetworkProxy: Mozilla\Firefox\Profiles\3ymbuxn0.default-1514038564808 -> type", 0
FF Extension: (Avast SafePrice | Porównania, promocje, kupony) - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\3ymbuxn0.default-1514038564808\Extensions\sp@avast.com.xpi [2019-03-18]
FF SearchPlugin: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\3ymbuxn0.default-1514038564808\searchplugins\avast-search.xml [2018-08-15]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2019-03-16]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
CHR DefaultSearchURL: Default -> hxxps://pl.search.yahoo.com/search?fr=mcafee_uninternational&type=E210PL91105G0&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR Extension: (McAfee® WebAdvisor) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2018-07-13]
CHR Extension: (Avast Online Security) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-12-31]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
S3 McAfee Vpn Service; C:\Program Files (x86)\McAfee Safe Connect\service\VpnService.exe [320944 2018-01-23] (AnchorFree Inc -> AnchorFree Inc.)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [899640 2019-02-21] (McAfee, Inc. -> McAfee, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.961\McCHSvc.exe [405392 2019-02-08] (McAfee, Inc. -> McAfee, Inc.)
R1 ESEADriver2; C:\Users\admin\AppData\Local\Temp\ESEADriver2.sys [3505752 2018-05-16] (Microsoft Windows Hardware Compatibility Publisher -> ) <==== UWAGA
S3 cpuz136; \??\C:\WINDOWS\TEMP\cpuz136\cpuz136_x64.sys [X]
2019-03-18 20:10 - 2019-03-18 20:13 - 000000000 ____D C:\AdwCleaner
2019-03-18 20:15 - 2017-12-23 15:00 - 000000000 ____D C:\ProgramData\AVAST Software
2019-03-18 18:27 - 2018-05-16 00:07 - 000000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2018-03-11 18:59 - 2018-03-11 18:59 - 000000000 ____H () C:\Users\admin\AppData\Local\BITABDB.tmp
2018-04-30 23:26 - 2018-06-06 16:45 - 000000831 _____ () C:\Users\admin\AppData\Local\Nox_crash.log
2018-11-21 18:52 - 2018-11-21 18:53 - 000000410 _____ () C:\Users\admin\AppData\Local\oobelibMkey.log
2019-02-13 18:55 - 2019-02-13 18:55 - 000001625 _____ () C:\Users\admin\AppData\Local\recently-used.xbel
2018-03-11 18:59 - 2018-03-11 18:59 - 000000000 _____ () C:\Users\admin\AppData\Local\{4A79C45E-7371-453B-A55C-9C3B43EC94AF}
EmptyTemp:
Plik zapisz pod nazwą fixlist.txt i umieść w folderze, gdzie masz FRST.exe.
Uruchom FRST i kliknij w Fix/Napraw.
