Nie pobieraj programow przy pomocy asystentow pobierania! Tylko z bezposrednich linkow.
Odinstaluj:
Avast Free Antivirus
WebAdvisor firmy McAfee
Obok frst.exe utowrz plik Fixlist.txt z zawartoscia:
CloseProcesses:
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2022-07-20] (McAfee, LLC -> McAfee, LLC)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2022-07-20] (McAfee, LLC -> McAfee, LLC)
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-3853387195-618660351-3822843642-1001\...\webcompanion.com -> hxxp://webcompanion.com
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(cmd.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\browserhost.exe
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [707256 2021-12-15] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Ograniczenia <==== UWAGA
HKU\S-1-5-21-3853387195-618660351-3822843642-1001\...\Run: [Opera GX Stable] => C:\Users\bartt\AppData\Local\Programs\Opera GX\launcher.exe [2462712 2022-07-25] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-3853387195-618660351-3822843642-1001\...\Run: [Opera GX Browser Assistant] => C:\Users\bartt\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe [3291288 2021-02-01] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-3853387195-618660351-3822843642-1001\...\Run: [MicrosoftEdgeAutoLaunch_92A63BF616DAB398CCC3F44896BE2925] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3601840 2022-07-28] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3853387195-618660351-3822843642-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize (Brak pliku)
HKU\S-1-5-21-3853387195-618660351-3822843642-1001\...\RunOnce: [Delete Cached Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\bartt\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (Brak pliku)
HKU\S-1-5-21-3853387195-618660351-3822843642-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\bartt\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Brak pliku)
HKU\S-1-5-21-3853387195-618660351-3822843642-1001\...\RunOnce: [Uninstall 22.131.0619.0001] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\bartt\AppData\Local\Microsoft\OneDrive\22.131.0619.0001" (Brak pliku)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
Task: {8913CA4C-38E4-49FD-93E6-55B665A720E4} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1648224922 => C:\Users\bartt\AppData\Local\Programs\Opera GX\launcher.exe [2462712 2022-07-25] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\bartt\AppData\Local\Programs\Opera GX\assistant" $(Arg0)
Task: {AF3A5F7A-1693-43C6-A296-0718954D6A6E} - System32\Tasks\Opera GX scheduled Autoupdate 1646810487 => C:\Users\bartt\AppData\Local\Programs\Opera GX\launcher.exe [2462712 2022-07-25] (Opera Norway AS -> Opera Software)
CHR HomePage: Default -> hxxps://poshukach.com?fr=ps&gp=496722&altserp=1
CHR StartupUrls: Default -> "hxxps://poshukach.com?fr=ps&gp=496722&altserp=1"
CHR Extension: (McAfee® WebAdvisor) - C:\Users\bartt\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2022-06-19]
C:\Users\bartt\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [808728 2022-07-20] (McAfee, LLC -> McAfee, LLC)
S3 WinRing0_1_2_0; \??\C:\Users\bartt\AppData\Local\Temp\tmpFB1A.tmp [X] <==== UWAGA
2022-07-31 13:30 - 2022-07-31 13:30 - 001306376 _____ () C:\Users\bartt\Downloads\hwmonitor-6628685807028353-AsystentPobierania_v2.699.011.81.0.exe
2022-05-09 08:25 - 2022-05-09 08:25 - 000000000 ____D C:\Program Files\McAfee
2022-05-09 08:24 - 2022-06-03 19:53 - 000000000 ____D C:\ProgramData\McAfee
2022-05-09 08:23 - 2022-05-09 08:34 - 000000000 ____D C:\Users\bartt\AppData\Local\Microvirt
EmptyTemp:
W FRST wybierz Napraw.
Co do samego minecrafta to w opcjach wylaczyles blokade fpsow?
