Reklamy i przekierowania w Chrome - logi FRST do analizy

Cytat:

HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKU\S-1-5-21-4276445531-638447664-1439027332-1001\...\Run: [App] => C:\Users\Vasquito\AppData\Local\App\svchost.exe [589824 2019-05-20] () [Brak podpisu cyfrowego] <==== UWAGA
HKU\S-1-5-21-4276445531-638447664-1439027332-1001\...\Run: [1869322] => C:\Users\Vasquito\AppData\Local\Temp\is-B9THU.tmp\BOxfiire.exe [8980731 2019-05-19] ( ) [Brak podpisu cyfrowego] <==== UWAGA
HKU\S-1-5-21-4276445531-638447664-1439027332-1001\...\MountPoints2: {2eaa2170-b8d5-11e8-a5e3-309c238619e4} - "G:\setup.exe"
GroupPolicy: Ograniczenia - Chrome <==== UWAGA
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA
Task: {2A994054-7D24-4C6C-B7D1-0DF0AB45A436} - System32\Tasks\Microsoft\Windows\WDI\SrvHost => rundll32.exe winscomrssrv.dll,SrvMainHost <==== UWAGA
Task: {CB8D4580-9394-4BF9-B144-261C14972D83} - System32\Tasks\Microsoft\Windows\Application Experience\StartupCheckLibrary => rundll32.exe StartupCheckLibrary.dll,DllMainRunLibrary <==== UWAGA
HKU\S-1-5-21-4276445531-638447664-1439027332-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoGk3GzeHhcr-ccZ8pRjWbegMFgkcpuit_SPwNNDhLvajYKETdW1wxyWjeosQSh5G5xxQsfxYW-omrErc-qXlkPiIpmgzPhmDzO_WAhWKg0ew8D6e-tEkr_kjTZH77IoLCK6NyvOgIBqmaRW-HGArsZCT5Hcw-orROWZmdKLsDwjk&q={searchTerms}
HKU\S-1-5-21-4276445531-638447664-1439027332-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoGk3GzeHhcr-ccZ8pRjWbegMFgkcpuit_SPwNNDhLvajYKETdW1wxyWjeosQSh5G5xxQsfxYW-omrErQMc0XXo7wV5iEQYQaGqOKZDZkpO72QwblU4IRBeA8oE81AY9IXjBupzqmoTZfXIKagZc52ScAY3eAptpxBerj5yEAzJL0
SearchScopes: HKLM-x32 -> DefaultScope - brak wartości
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
S3 aswbIDSAgent; "C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe" [X]
S2 avast! Antivirus; "C:\Program Files\AVAST Software\Avast\AvastSvc.exe" [X]
S3 AvastWscReporter; "C:\Program Files\AVAST Software\Avast\wsc_proxy.exe" /runassvc [X]
S2 cFosSpeedS; "C:\Program Files\cFosSpeed\spd.exe" -service [X]
S3 NTIOLib_DVDSetup; \??\D:\STEROWNIKI ITPMSI\NTIOLib_X64.sys [X]
2019-05-20 21:53 - 2019-05-20 21:54 - 000000000 ____D C:\AdwCleaner
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll -> Brak pliku
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll -> Brak pliku
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll -> Brak pliku
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll -> Brak pliku
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [470]