Sam dodales:
Task: {029B58A6-0DBB-4FEE-84D8-295A15F7B34E} - System32\Tasks\zamknij => C:\Windows\System32\shutdown.exe [34304 2014-11-21] (Microsoft Windows -> Microsoft Corporation) ?
Wykonaj Fixlist.txt dla FRST:
CloseProcesses:
(SoundMixer) [File not signed] C:\Users\Admin win 8.1\AppData\Roaming\Microsoft\SoundMixer\SoundMixer.exe
HKLM\...\Run: [winlogui] => C:\Windows\system32\winlogui.exe [1803776 2019-07-28] (Microsoft Corporation) [File not signed]
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-3718842410-3540738347-2321045050-1001\...\MountPoints2: {512acc29-a9fa-11e9-8257-74d4359a6977} - "I:\suppress_explorer.exe"
HKU\S-1-5-21-3718842410-3540738347-2321045050-1001\...\Winlogon: [Shell] %comspec% <==== ATTENTION
HKU\S-1-5-21-3718842410-3540738347-2321045050-1001\...\Command Processor: @mode 20,5 & tasklist /FI "IMAGENAME eq SoundMixer.exe" 2>NUL | find /I /N "SoundMixer.exe">NUL && exit & if exist "C:\Users\Admin win 8.1\AppData\Roaming\Microsoft\SoundMixer\SoundMixer.exe" ( start /MIN "" "C:\Users\Admin win 8.1\AppData\Roaming\Microsoft\SoundMixer\SoundMixer.exe" & tasklist /FI "IMAGENAME eq explorer.exe" 2>NUL | find /I /N "explorer.exe">NUL && exit & explorer.exe & exit ) else ( tasklist /FI "IMAGENAME eq explorer.exe" 2>NUL | find /I /N "explorer.exe">NUL && exit & explorer.exe & exit ) <==== ATTENTION
GroupPolicy: Restriction ? <==== ATTENTION
Task: {027AFA96-4250-47EB-84C3-3D60CFD4C687} - System32\Tasks\Opera scheduled Autoupdate 1563429045 => C:\Program Files\Opera\launcher.exe [1519640 2019-08-07] (Opera Software AS -> Opera Software)
Task: {1DED802D-2541-4F66-87E0-74AA906012E1} - System32\Tasks\AdobeServis => C:\ProgramData\Flash\MSACuiL.exe [1189376 2019-07-21] () [File not signed]
Task: {33B5F8FC-40E0-4006-86E3-A955BE636E26} - System32\Tasks\Microsoft\Windows\Application Experience\StartupCheckLibrary => rundll32.exe StartupCheckLibrary.dll,DllMainRunLibrary <==== ATTENTION
Task: {86995E63-EC01-4B70-BCBE-F3FC53D05A6D} - System32\Tasks\Microsoft\Windows\WDI\SrvHost => rundll32.exe winscomrssrv.dll,SrvMainHost <==== ATTENTION
URLSearchHook: [S-1-5-80-2652535364-2169709536-2857650723-2622804123-1107741775] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-80-3880718306-3832830129-1677859214-2598158968-1052248003] ATTENTION => Default URLSearchHook is missing
2019-08-15 22:11 - 2019-08-15 22:11 - 002427504 _____ (Wiper Software, UAB) C:\Users\Admin win 8.1\Downloads\WiperSoft-installer.exe
2019-08-14 21:21 - 2019-08-15 18:30 - 000000257 _____ C:\DelFix.txt
C:\Users\Admin win 8.1\AppData\Roaming\Microsoft\SoundMixer\
