Infekcji nie masz. Oba skanery to wersje online, wystarczy usunac.
> "duzo wczytuje w pulpicie oraz przegladarce"
Co to znaczy i w jakim to jezyku? Dlugo sie pulpit laduje po uruchomieniu? To chciales napisac? Czy cos innego?
Zamiesc screen z CrystalDiskMark Portable, po wykonaniu testu.
Piszczenie skad?
Odinstaluj: WebAdvisor firmy McAfee
Uzyj Adwclenaer oraz mabm i usun to co wykryja.
Wykonaj Fixlist.txt dla FRST:
CloseProcesses:
HKU\S-1-5-21-696973359-1899737074-1786566433-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.nav-pl.com/
SearchScopes: HKU\S-1-5-21-696973359-1899737074-1786566433-1003 -> DefaultScope {D362695B-93A6-45CE-B241-AB65C617B22F} URL = hxxp://www.nav-pl.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-696973359-1899737074-1786566433-1003 -> {D362695B-93A6-45CE-B241-AB65C617B22F} URL = hxxp://www.nav-pl.com/search?q={searchTerms}
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2022-07-20] (McAfee, LLC -> McAfee, LLC)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2022-07-20] (McAfee, LLC -> McAfee, LLC)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706680 2020-09-17] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center: Ograniczenia <==== UWAGA
HKU\S-1-5-21-696973359-1899737074-1786566433-1003\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32414392 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-696973359-1899737074-1786566433-1003\...\MountPoints2: {ebff66df-5040-11ea-871a-00d8619e8e09} - "D:\setup.exe"
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(cmd.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\browserhost.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
Task: {3D48DF85-61F1-42D4-9A38-AE11186DDBD4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [26896568 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {53FA3442-9A53-4087-963B-448A85FB161F} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
Edge HomeButtonPage: HKU\S-1-5-21-696973359-1899737074-1786566433-1003 -> hxxp://www.nav-pl.com/
Edge HomePage: Default -> hxxp://www.nav-pl.com/
Edge StartupUrls: Default -> "hxxp://www.nav-pl.com/"
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2023-02-10] [UpdateUrl:hxxps://sadownload.mcafee.com/products/SA/Win/xpi/webadvisor/update.json]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
CHR HomePage: Default -> hxxp://www.nav-pl.com/
CHR DefaultSearchURL: Default -> hxxps://pl.search.yahoo.com/search?fr=mcafee_uninternational&type=E210PL0G0&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR Extension: (McAfee® WebAdvisor) - C:\Users\dalei\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2023-02-21]
C:\Users\dalei\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [856472 2023-02-10] (McAfee, LLC -> McAfee, LLC)
2023-02-24 22:20 - 2023-02-24 22:20 - 015274968 _____ (ESET) C:\Users\dalei\Downloads\esetonlinescanner.exe
2023-02-24 22:18 - 2023-02-24 22:18 - 014562400 _____ (ESET spol. s r.o.) C:\Users\dalei\Downloads\ESETOnlineScanner_PLK (1).exe
2023-02-24 22:14 - 2023-02-24 22:20 - 000001378 _____ C:\Users\dalei\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2023-02-24 22:14 - 2023-02-24 22:14 - 000000000 ____D C:\Users\dalei\AppData\Local\ESET
2023-02-24 22:13 - 2023-02-24 22:13 - 014562400 _____ (ESET spol. s r.o.) C:\Users\dalei\Downloads\ESETOnlineScanner_PLK.exe
2023-02-24 21:26 - 2023-02-24 21:27 - 000000000 ____D C:\ProgramData\mks_vir
2020-07-19 06:24 - 2020-07-19 06:24 - 000000000 _____ () C:\Users\dalei\AppData\Local\D22954.tmp
2020-07-09 21:27 - 2020-07-09 21:27 - 000000000 _____ () C:\Users\dalei\AppData\Local\D2D34F.tmp