[Rozwiązano] Cmd wyłącza się samoczynnie po uruchomieniu - co robić?

Cytat:

CloseProcesses:
CreateRestorePoint:
HKU\S-1-5-21-200120994-3750426956-899422893-1001\...\MountPoints2: {9f9bca87-e81b-11e9-ae6e-84ef18b6ae3f} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-200120994-3750426956-899422893-1001\...\MountPoints2: {aaad5b2d-5d2a-11e9-ae56-84ef18b6ae3f} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-200120994-3750426956-899422893-1001\...\Winlogon: [Shell] %comspec% <==== UWAGA
HKU\S-1-5-21-200120994-3750426956-899422893-1001\...\Command Processor: @mode 20,5 & tasklist /FI "IMAGENAME eq FirewallModule.exe" 2>NUL | find /I /N "FirewallModule.exe">NUL && exit & if exist "C:\Users\piotr\AppData\Roaming\Microsoft\FirewallModule\FirewallModule.exe" ( start /MIN "" "C:\Users\piotr\AppData\Roaming\Microsoft\FirewallModule\FirewallModule.exe" & tasklist /FI "IMAGENAME eq explorer.exe" 2>NUL | find /I /N "explorer.exe">NUL && exit & explorer.exe & exit ) else ( tasklist /FI "IMAGENAME eq explorer.exe" 2>NUL | find /I /N "explorer.exe">NUL && exit & explorer.exe & exit ) <==== UWAGA
HKU\S-1-5-18\...\Run: [] => [X]
"C:\Windows\System32\Tasks\McAfee\McAfee Idle Detection Task" został odblokowany. <==== UWAGA
Task: {92187093-8E09-4E30-9F19-43A28E0E1761} - System32\Tasks\Opera scheduled Autoupdate 1549477780 => C:\Users\piotr\AppData\Local\Programs\Opera\launcher.exe [1538584 2020-04-08] (Opera Software AS -> Opera Software)
Tcpip\..\Interfaces\{7950155d-e82d-4c66-9c08-26c62e7aeac3}: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{f5152a94-f58c-4db0-b74c-6245212b7257}: [DhcpNameServer] 192.168.1.1 0.0.0.0
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-200120994-3750426956-899422893-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-200120994-3750426956-899422893-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell17win10.msn.com/?pc=DCTE
SearchScopes: HKU\S-1-5-21-200120994-3750426956-899422893-1001 -> DefaultScope {8A16898A-93BB-471E-841B-B14DCF59B6B3} URL =
SearchScopes: HKU\S-1-5-21-200120994-3750426956-899422893-1001 -> {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = hxxp://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10420__190206&q={searchTerms}
FF HKLM\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSKHKLM => nie znaleziono
2020-04-15 19:23 - 2019-05-04 11:06 - 000004252 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1549477780
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [120]
FirewallRules: [UDP Query User{19FB4CFC-60CC-43FC-92B0-F41E3FE53BE5}C:\program files (x86)\origin games\apex\r5apex.exe] => (Allow) C:\program files (x86)\origin games\apex\r5apex.exe Brak pliku
FirewallRules: [TCP Query User{DEA9D8A9-5817-4525-A0A0-87EB790DB737}C:\program files (x86)\origin games\apex\r5apex.exe] => (Allow) C:\program files (x86)\origin games\apex\r5apex.exe Brak pliku
FirewallRules: [{FE58E348-C1AE-4DBE-8974-5E53CADF0F6C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Shakes & Fidget\Shakes and Fidget.exe Brak pliku
FirewallRules: [{63067159-5747-4A0C-8E1B-CCDE8D169D3C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Shakes & Fidget\Shakes and Fidget.exe Brak pliku
FirewallRules: [{C7F85D76-6B38-4A72-A6D9-E1920159025E}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe Brak pliku
FirewallRules: [{54D3C6AE-E5DC-4ADB-B6B2-ABFD91B87FDD}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe Brak pliku
FirewallRules: [{13B6B71F-2A59-4B12-89B3-CFDA2CDFEC7E}] => (Allow) C:\Program Files (x86)\CyberLink\CyberLink Media Suite\PowerDirector14\PDR10.EXE Brak pliku
FirewallRules: [{1B612C97-9C71-4A6F-AAA1-94441854F8C4}] => (Allow) C:\Program Files (x86)\CyberLink\CyberLink Media Suite\PowerDVD14\Kernel\DMS\CLMSServerPDVD14.exe Brak pliku
FirewallRules: [{782403E8-F9B3-4A20-A72F-5CC81E360E9A}] => (Allow) C:\Program Files (x86)\CyberLink\CyberLink Media Suite\PowerDVD14\PowerDVD14Agent.exe Brak pliku
FirewallRules: [TCP Query User{E815F250-4701-4FA9-8C52-219824A3F6C3}C:\program files\amd\cnext\cnext\radeonsettings.exe] => (Allow) C:\program files\amd\cnext\cnext\radeonsettings.exe Brak pliku
FirewallRules: [UDP Query User{18E2BA6E-A7AD-4059-8626-27DA2D088008}C:\program files\amd\cnext\cnext\radeonsettings.exe] => (Allow) C:\program files\amd\cnext\cnext\radeonsettings.exe Brak pliku
FirewallRules: [TCP Query User{B0A98566-458F-4DD5-A9FC-71C6C7748BAC}C:\program files\epic games\forhonor\forhonor.exe] => (Allow) C:\program files\epic games\forhonor\forhonor.exe Brak pliku
FirewallRules: [UDP Query User{55C02837-D1FA-48B4-B265-25EC5DD756DD}C:\program files\epic games\forhonor\forhonor.exe] => (Allow) C:\program files\epic games\forhonor\forhonor.exe Brak pliku
FirewallRules: [{89635AE5-8F60-466D-A704-7368F78319E3}] => (Allow) C:\Users\piotr\AppData\Roaming\Zoom\bin\airhost.exe Brak pliku
EmptyTemp: