Odinstaluj:
Advanced SystemCare 12
Avast Cleanup Premium
Wykonaj Fixlist.txt dla FRST:
CloseProcesses:
ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => X:\Programosy\Advanced SystemCare\ASCExtMenu_64.dll [2019-04-16] (IObit Information Technology -> IObit)
ContextMenuHandlers2: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => X:\Programosy\Advanced SystemCare\ASCExtMenu_64.dll [2019-04-16] (IObit Information Technology -> IObit)
ContextMenuHandlers4: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => X:\Programosy\Advanced SystemCare\ASCExtMenu_64.dll [2019-04-16] (IObit Information Technology -> IObit)
AlternateDataStreams: C:\Users\Public\AppData:CSM [438]
AlternateDataStreams: C:\Users\SofciO\Dane aplikacji:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\SofciO\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [394]
HKU\S-1-5-21-1781080333-3880228369-668465640-1001\...\RunOnce: [Application Restart #2] => C:\Windows\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
HKU\S-1-5-21-1781080333-3880228369-668465640-1001\...\Winlogon: [Shell] %comspec% <==== UWAGA
HKU\S-1-5-21-1781080333-3880228369-668465640-1001\...\Command Processor: @mode 20,5 & tasklist /FI "IMAGENAME eq SoundMixer.exe" 2>NUL | find /I /N "SoundMixer.exe">NUL && exit & if exist ( start /MIN "" & tasklist /FI "IMAGENAME eq explorer.exe" 2>NUL | find /I /N "explorer.exe">NUL && exit & explorer.exe & exit ) else ( tasklist /FI "IMAGENAME eq explorer.exe" 2>NUL | find /I /N "explorer.exe">NUL && exit & explorer.exe & exit ) <==== UWAGA
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast Cleanup Premium.lnk [2018-12-08]
ShortcutTarget: Avast Cleanup Premium.lnk -> C:\Program Files (x86)\AVAST Software\Avast Cleanup\TuneupUI.exe (AVAST Software s.r.o. -> AVAST Software)
GroupPolicy: Ograniczenia ? <==== UWAGA
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
Task: {47A4DE88-4936-4D7D-BCCA-D2FFC986A875} - System32\Tasks\ASC12_SkipUac_SofciO => X:\Programosy\Advanced SystemCare\ASC.exe [8693008 2019-04-16] (IObit Information Technology -> IObit)
Task: {87C22532-74E7-4C79-8732-EFFFE3F9CB9C} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\Explorer.exe /NOUACCHECK
Task: {C09F4E40-3303-4284-929D-91AD120976A5} - System32\Tasks\Avast Cleanup Update => C:\Program Files (x86)\AVAST Software\Avast Cleanup\TUNEUpdate.exe [1659000 2019-04-17] (AVAST Software s.r.o. -> AVAST Software)
Winsock: Catalog5-x64 08 C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll => Brak pliku
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
R2 AdvancedSystemCareService12; X:\Programosy\Advanced SystemCare\ASCService.exe [1266960 2019-04-16] (IObit Information Technology -> IObit)
R2 CleanupPSvc; C:\Program Files (x86)\AVAST Software\Avast Cleanup\TuneupSvc.exe [10227280 2019-04-17] (AVAST Software s.r.o. -> AVAST Software)
S3 mracsvc; C:\WINDOWS\System32\mracsvc.exe [10395248 2018-05-22] (Mail.Ru LLC -> LLC Mail.Ru)
S3 mracdrv; C:\WINDOWS\System32\drivers\mracdrv.sys [9623160 2018-05-22] (Mail.Ru LLC -> LLC Mail.Ru)
Po wykonaniu usun katalog C:\FRST.
Zrob tez skan przy pomocy mbam i usun to co wykryje oraz uzyj adwcleaner.
