1) Odinstaluj:
- Wondershare NativePush
- Wondershare Virtual Location
- 7-Zip 9.20 (nieaktualne!)
- Java 8 Update 144 (nieaktualne!)
- NVIDIA GeForce Experience (zbędny komponent)
2) Uruchom "C:\Program Files\UPDATE\SU10Guard.exe" i odblokuj Windows Update.
Dopiero po odblokowaniu możesz przystąpić do kolejnej czynności!
3) Uruchom FRST/FRST64.exe, wciśnij kombinację klawiszy ctrl + y. Otworzy się notatnik, do którego wklej zawartość skryptu. Zamknij i zapisz. W FRST kliknij „napraw” →
SystemRestore: On
CloseProcesses:
CreateRestorePoint:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [Backup] => C:\Program Files (x86)\Wondershare\drfone\Addins\Backup\DrFoneBackup.exe /hide (Brak pliku)
HKLM\...\Policies\Explorer: [NoWindowsUpdate] 1
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Ograniczenia <==== UWAGA
HKU\S-1-5-21-145892214-794493160-1696793290-1002\...\Run: [BingSvc] => C:\Users\Łukasz\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2016-02-10] (Microsoft Corporation -> © 2015 Microsoft Corporation)
HKU\S-1-5-21-145892214-794493160-1696793290-1002\...\Run: [CCXProcess] => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe" (Brak pliku)
HKU\S-1-5-21-145892214-794493160-1696793290-1002\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize (Brak pliku)
HKU\S-1-5-21-145892214-794493160-1696793290-1002\...\Policies\Explorer: [NoSecurityTab] 1
HKU\S-1-5-21-145892214-794493160-1696793290-1002\...\MountPoints2: {18058bf7-c8c9-11e4-be73-7c7a91e79db5} - "D:\AutoRun.exe"
HKU\S-1-5-21-145892214-794493160-1696793290-1002\...\MountPoints2: {1cdde701-1a05-11eb-82d3-001c4208e968} - "D:\AutoRun.exe"
HKU\S-1-5-21-145892214-794493160-1696793290-1002\...\MountPoints2: {6cb487d2-1912-11ec-83ed-001c4208e968} - "D:\AutoRun.exe"
HKU\S-1-5-21-145892214-794493160-1696793290-1002\...\MountPoints2: {8ce5cd59-8c9d-11ec-8435-28b2bd5645d6} - "D:\AutoRun.exe"
HKU\S-1-5-21-145892214-794493160-1696793290-1002\...\MountPoints2: {ac502416-4a22-11eb-8302-001c4208e968} - "D:\autorun.exe"
HKU\S-1-5-21-145892214-794493160-1696793290-1002\...\MountPoints2: {b8b2f5a3-2416-11eb-82da-001c4208e968} - "D:\AutoRun.exe"
HKU\S-1-5-21-145892214-794493160-1696793290-1002\...\MountPoints2: {c6149461-210b-11eb-82d9-001c4208e968} - "D:\AutoRun.exe"
IFEO\dismHost.exe: [Debugger] *
IFEO\EOSNOTIFY.EXE: [Debugger] *
IFEO\InstallAgent.exe: [Debugger] *
IFEO\MusNotification.exe: [Debugger] *
IFEO\MUSNOTIFICATIONUX.EXE: [Debugger] *
IFEO\remsh.exe: [Debugger] *
IFEO\SIHClient.exe: [Debugger] *
IFEO\UpdateAssistant.exe: [Debugger] *
IFEO\UPFC.EXE: [Debugger] *
IFEO\UsoClient.exe: [Debugger] *
IFEO\WaaSMedic.exe: [Debugger] *
IFEO\WaasMedicAgent.exe: [Debugger] *
IFEO\Windows10Upgrade.exe: [Debugger] *
IFEO\WINDOWS10UPGRADERAPP.EXE: [Debugger] *
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\$McRebootA5E6DEAA56$.lnk [2023-03-14]
ShortcutTarget: $McRebootA5E6DEAA56$.lnk -> (Brak pliku)
ShortcutTarget: WSAndroidAppHelper.lnk -> C:\Program Files (x86)\Wondershare\drfone\Addins\SocialApps\WSAndroidAppHelper.exe (Brak pliku)
ShortcutTarget: WSAppHelper.lnk -> C:\Program Files (x86)\Wondershare\drfone\Addins\SocialApps\WSAppHelper.exe (Brak pliku)
GroupPolicy: Ograniczenia ? <==== UWAGA
Policies: C:\ProgramData\NTUSER.pol: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
Task: {009B040C-6B83-41C8-9B30-7948B7909D5E} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [16832 2015-07-01] (LENOVO -> Lenovo)
Task: {0297B1F1-F939-40C0-9AD2-BE4A052C5AF0} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Brak pliku <==== UWAGA
Task: {0929E2C3-00CF-419C-B720-3F7AFA05CC64} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe /show (Brak pliku)
Task: {1DC69DD3-1D41-4814-B3CE-31DC476BD29F} - System32\Tasks\TVT\TVSUUpdateTask_UserLogOn => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe PendingTask (Brak pliku)
Task: {20B7CB9E-DC8E-4B83-BD40-3F12C9DAEEB7} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Brak pliku <==== UWAGA
Task: {24B789CE-AEC6-4908-B3DB-7F3E2953AA13} - \WPD\SqmUpload_S-1-5-21-145892214-794493160-1696793290-1002 -> Brak pliku <==== UWAGA
Task: {25DC6B84-5B7B-460B-8361-8C30F907B1B8} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe -diag HWScan (Brak pliku)
Task: {27C9D18C-7CAE-4245-957E-CD3564D97D45} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Brak pliku <==== UWAGA
Task: {2C673E0C-4B06-4CDA-AC47-309BD946F80C} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Brak pliku <==== UWAGA
Task: {33C1DD63-396A-4439-86FA-735741474B62} - System32\Tasks\Lenovo\LSC\RebootCountTask => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCService.exe Actions RebootCount (Brak pliku)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe join (Brak pliku)
Task: {3892CD2F-9315-470E-B5BB-9E337A09BF67} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe -diag HWScan (Brak pliku)
Task: {4228CD07-A2A8-445D-BF43-7C4377AE6DEA} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Brak pliku <==== UWAGA
Task: {4ECDF53A-EEBF-4E55-A6F5-DC18B8B9D6DC} - System32\Tasks\Lenovo\LSC\Time72Task => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCService.exe Actions CanUpdate (Brak pliku)
Task: {50C8498B-1301-4B8D-8E13-953042FE66F4} - \Microsoft\Windows\UNP\RunCampaignManager -> Brak pliku <==== UWAGA
Task: {51050C3D-A009-468A-A59C-38B2048EB5D2} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\pla.dll,PlaHost "LSC Memory" "$(Arg0)"
Task: {5752771B-7173-408F-80C3-09E34EFF0247} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [674720 2023-03-07] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {5769F841-F86E-4F9A-894A-21EA9BCFEFEF} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe (Brak pliku)
Task: {5887D7D2-F2FA-4482-90DA-7E84F9A1E9B5} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe (Brak pliku)
Task: {6C0C251F-22BD-4615-BB16-2317BE884339} - System32\Tasks\e-pity2017_kwiecien => C:\Program Files (x86)\e-file\e-pity\Assets\signxml.exe notify 2 30.04.2019 (Brak pliku)
Task: {6D322511-3824-4C0E-A317-829E6AEBAA84} - \Lenovo\ImController\TimeBasedEvents\d46d9537-8f9c-4a10-9940-3a3ae3b2cf48 -> Brak pliku <==== UWAGA
Task: {6E966D37-B9A3-48C9-B5A6-53902F127BE5} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.UpdateStatusService.exe UpdateStatus (Brak pliku)
Task: {7AB11BB7-D1D0-4620-AA70-113376E90984} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> Brak pliku <==== UWAGA
Task: {83801BFD-2556-477D-A079-F2C8222A7D82} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat [1145 2020-12-04] () [Brak podpisu cyfrowego]
Task: {8D91B876-33A9-4DB2-B890-97F2A485646B} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Brak pliku <==== UWAGA
Task: {9D115265-53AF-4E88-A879-553666E5F2E7} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe /CM -search R -action LIST -nolicense -schtask (Brak pliku)
Task: {A13A839B-FC49-4FDF-8BA9-FCED9C43ADB4} - System32\Tasks\StartPowerDVDService => C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe (Brak pliku)
Task: {A6B8056C-5663-4647-80A8-E3B0D8FC3F79} - System32\Tasks\e-pity2017_styczen => C:\Program Files (x86)\e-file\e-pity\Assets\signxml.exe notify 1 31.01.2019 (Brak pliku)
Task: {AE091650-6580-4A5D-AD96-CFF39FB3695A} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [716704 2023-03-07] (Mozilla Corporation -> Mozilla Foundation)
Task: {B61A2E67-60CB-44FC-9AB0-66C2EDFD0EA6} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Brak pliku <==== UWAGA
Task: {C9486193-2E5E-4204-AE84-CFF09174D222} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe (Brak pliku)
Task: {D00E3AD2-33B3-4508-9AE9-F422A8631FAD} - \Lenovo\ImController\TimeBasedEvents\cb0d9bc9-1150-403a-83d2-50386828a050 -> Brak pliku <==== UWAGA
Task: {D2871549-5FF7-480B-973C-28904C0C1957} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Brak pliku <==== UWAGA
Task: {D7670A73-01ED-407B-9463-BD1B6B451FB2} - System32\Tasks\DolbySelectorTask => C:\Program Files\Dolby Digital Plus\ddp.exe -autostart (Brak pliku)
Task: {D9009DF7-944E-448E-A8A9-F2DD396772E0} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Brak pliku <==== UWAGA
Task: {DA1D8828-F731-41B9-B2F0-9739848BDD6F} - \Lenovo\ImController\TimeBasedEvents\356d6bd1-be2b-4fce-a84e-bf7ec0904c78 -> Brak pliku <==== UWAGA
Task: {DAB58C29-57F9-41FC-A9C4-116F94A804D3} - \Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask -> Brak pliku <==== UWAGA
Task: {DD6D2A14-3299-4970-B88E-9658DF1D5A02} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Brak pliku <==== UWAGA
Task: {E565F0FF-906D-4F89-8344-982A0DA581B4} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Brak pliku <==== UWAGA
Task: {F2DCADD5-BFFE-4CA1-BDC5-73801DFA5204} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Brak pliku <==== UWAGA
Task: {FE5E2FB0-2BB5-4117-9C13-2807BFD74966} - \Lenovo\ImController\Lenovo iM Controller Monitor -> Brak pliku <==== UWAGA
Task: C:\WINDOWS\Tasks\CIS_{81EFDD93-DBBE-415B-BE6E-49B9664E3E82}.job => C:\ProgramData\cis25B9.exe <==== UWAGA
Tcpip\..\Interfaces\{052a368c-01d1-4884-8e50-6cb438085fe0}: [NameServer] 10.10.42.10,10.10.42.71
Tcpip\..\Interfaces\{0da91aa0-21b3-445b-86b5-a56e56be8b22}: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{158b332a-351b-490b-81b5-8130d53b3c12}: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{18b44e55-0f4d-49a0-a3a6-30b5d6716b8a}: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{3001aa5a-870a-44d9-b6d4-7dd2f41d9125}: [DhcpNameServer] 10.10.42.71 10.10.42.10
Tcpip\..\Interfaces\{53717b85-0fff-45cc-a257-5b3ae7b31584}: [NameServer] 185.89.185.1 89.108.195.20
Tcpip\..\Interfaces\{617c0135-2b49-460d-8aea-9bda41600a9d}: [NameServer] 185.89.185.1 89.108.195.20
Tcpip\..\Interfaces\{6318c54b-a467-4807-bd84-a2f8753d3699}: [NameServer] 185.89.185.1 89.108.195.20
Tcpip\..\Interfaces\{b31917e6-cc1d-40db-8a35-f26088c5c810}: [DhcpNameServer] 192.168.1.1 192.168.2.1
Tcpip\..\Interfaces\{d9025f65-6cbf-4dce-bb7b-dbad9a7b0f6e}: [DhcpNameServer] 192.168.8.1 192.168.8.1
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Brak pliku]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [Brak pliku]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [Brak pliku]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [Brak pliku]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [Brak pliku]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [Brak pliku]
C:\Program Files (x86)\Lavasoft
C:\Program Files (x86)\Wondershare
C:\Users\Łukasz\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee
C:\Users\Łukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho
C:\Users\Łukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee
C:\Users\Łukasz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fheoggkfdfchfphceeifdbepaooicaho
C:\Users\Łukasz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\fheoggkfdfchfphceeifdbepaooicaho
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [lpdfbkehegfmedglgemnhbnpmfmioggj]
CHR HKLM-x32\...\Chrome\Extension: [ofoeigeaodhbjogdigckajfhjbonaofg]
R2 SU10Guard; C:\Program Files\UPDATE\SU10Guard.exe [72776 2020-05-30] (Greatis Software LLC -> Greatis Software, LLC)
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [X]
S2 DFWSIDService; C:\ProgramData\Wondershare\wsServices\WsidService.exe [X]
S2 ImControllerService; %SystemRoot%\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [X]
S3 LSC.Services.SystemService; "C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe" [X]
S3 SUService; "C:\Program Files (x86)\Lenovo\System Update\SUService.exe" [X]
S2 WirelessBackupService; C:\Program Files (x86)\Wondershare\drfone\Addins\Backup\WirelessBackupService.exe [X]
S2 Wondershare InstallAssist; C:\ProgramData\Wondershare\Service\InstallAssistService.exe [X]
S3 WsDrvInst; "C:\Program Files (x86)\Wondershare\drfone\Addins\Repair\DriverInstall.exe" [X]
R3 ALSysIO; C:\Users\UKASZ~1\AppData\Local\Temp\ALSysIO64.sys [47240 2023-03-14] (ALCPU (Arthur Liberman) -> Arthur Liberman) <==== UWAGA
S3 ew_hwusbdev; \SystemRoot\system32\DRIVERS\ew_hwusbdev.sys [X]
S3 ew_usbenumfilter; \SystemRoot\System32\drivers\ew_usbenumfilter.sys [X]
S3 huawei_enumerator; \SystemRoot\System32\drivers\ew_jubusenum.sys [X]
S3 huawei_ext_ctrl; \SystemRoot\System32\drivers\ew_juextctrl.sys [X]
S3 huawei_wwanecm; \SystemRoot\system32\DRIVERS\ew_juwwanecm.sys [X]
S3 ldiagio_uefi; \??\C:\Program Files\Lenovo\Lenovo Solution Center\App\ldiag\x64\ldiagio_uefi.sys [X]
U4 npcap_wifi; Brak ImagePath
S3 SPUVCbv; \SystemRoot\System32\Drivers\SPUVCbv64.sys [X]
S3 TetaSCDevice; \??\C:\WINDOWS\system32\tetascop.SYS [X]
CustomCLSID: HKU\S-1-5-21-145892214-794493160-1696793290-1002_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\Łukasz\AppData\Local\GoToMeeting\18068\G2MOutlookAddin64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-145892214-794493160-1696793290-1002_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\Łukasz\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-145892214-794493160-1696793290-1002_Classes\CLSID\{cece6816-6107-4dc7-bdbc-20cd5ae1ffed}\localserver32 -> C:\ProgramData\Lenovo\ImController\Plugins\LenovoAppPromotionPlugin\x64\DesktopToastsHelper.exe => Brak pliku
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> Brak pliku
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> Brak pliku
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> Brak pliku
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> Brak pliku
ContextMenuHandlers1: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> Brak pliku
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Brak pliku
ContextMenuHandlers6: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> Brak pliku
AlternateDataStreams: C:\WINDOWS\system32\Drivers\YKMUSB.sys:$CmdTcID [64]
HKU\S-1-5-21-145892214-794493160-1696793290-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
HKU\S-1-5-21-145892214-794493160-1696793290-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13-comm.msn.com/?pc=LNJB
HKU\S-1-5-21-145892214-794493160-1696793290-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/welcome/thinkpad
HKU\S-1-5-21-145892214-794493160-1696793290-500\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13-comm.msn.com/?pc=LNJB
SearchScopes: HKU\S-1-5-21-145892214-794493160-1696793290-1002 -> DefaultScope {BCA2E5CE-17D8-418C-99BF-10532BCB6AED} URL =
SearchScopes: HKU\S-1-5-21-145892214-794493160-1696793290-1002 -> {BCA2E5CE-17D8-418C-99BF-10532BCB6AED} URL =
SearchScopes: HKU\S-1-5-21-145892214-794493160-1696793290-500 -> DefaultScope {BCA2E5CE-17D8-418C-99BF-10532BCB6AED} URL =
SearchScopes: HKU\S-1-5-21-145892214-794493160-1696793290-500 -> {BCA2E5CE-17D8-418C-99BF-10532BCB6AED} URL =
IE trusted site: HKU\S-1-5-21-145892214-794493160-1696793290-1002\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-145892214-794493160-1696793290-1002\...\sharepoint.com -> hxxps://intsol2-files.sharepoint.com
IE trusted site: HKU\S-1-5-21-145892214-794493160-1696793290-1002\...\webcompanion.com -> hxxp://webcompanion.com
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Brak pliku)
FirewallRules: [UDP Query User{335939F0-B3A4-491D-9923-8402323E0E2D}C:\program files\openshot video editor\launch.exe] => (Allow) C:\program files\openshot video editor\launch.exe => Brak pliku
FirewallRules: [TCP Query User{F2AAA1E8-4509-4FD7-B3E4-54A41C151D07}C:\program files\openshot video editor\launch.exe] => (Allow) C:\program files\openshot video editor\launch.exe => Brak pliku
FirewallRules: [UDP Query User{794E0441-0476-4259-829B-C0B8D31B3423}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe => Brak pliku
FirewallRules: [TCP Query User{BA14EDA2-039B-4FF9-B795-CC50F6BA7928}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe => Brak pliku
FirewallRules: [TCP Query User{34E0506B-BFA1-446B-ABDC-6E9549E82A65}C:\program files (x86)\altium\ad14\dxp.exe] => (Allow) C:\program files (x86)\altium\ad14\dxp.exe => Brak pliku
FirewallRules: [UDP Query User{66B954CD-5F87-4216-AF94-727B36CB4FB7}C:\program files (x86)\altium\ad14\dxp.exe] => (Allow) C:\program files (x86)\altium\ad14\dxp.exe => Brak pliku
FirewallRules: [TCP Query User{DB53DDEC-73AD-432D-9AC5-6550EF0572F8}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe => Brak pliku
FirewallRules: [UDP Query User{F451461B-5CF8-4094-AC6B-4F115CA2BE95}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe => Brak pliku
FirewallRules: [TCP Query User{A832D60B-50B1-4105-A19B-71258CD4F5A7}C:\program files (x86)\altium\ad14\dxp.exe] => (Allow) C:\program files (x86)\altium\ad14\dxp.exe => Brak pliku
FirewallRules: [UDP Query User{CD5A82D2-99EB-48B4-AC59-B8F9A29967B1}C:\program files (x86)\altium\ad14\dxp.exe] => (Allow) C:\program files (x86)\altium\ad14\dxp.exe => Brak pliku
FirewallRules: [TCP Query User{CF245D7F-A458-4EBA-B208-C1A4E22DE94B}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe => Brak pliku
FirewallRules: [UDP Query User{DFE5D72B-8FC7-4AD1-9FB5-979BE9BEC773}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe => Brak pliku
FirewallRules: [{68586225-1EA8-4D2F-AF80-199AE51195E2}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe => Brak pliku
FirewallRules: [{C95A401F-D517-441A-A589-166F6BE55793}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe => Brak pliku
FirewallRules: [TCP Query User{29CBB3AD-6580-4DE9-8D30-69807CE0C16B}C:\st\stm32cubeide_1.6.1\stm32cubeide\stm32cubeide.exe] => (Allow) C:\st\stm32cubeide_1.6.1\stm32cubeide\stm32cubeide.exe => Brak pliku
FirewallRules: [UDP Query User{3A631080-55FF-4B7B-B719-6AC14D15DB11}C:\st\stm32cubeide_1.6.1\stm32cubeide\stm32cubeide.exe] => (Allow) C:\st\stm32cubeide_1.6.1\stm32cubeide\stm32cubeide.exe => Brak pliku
FirewallRules: [TCP Query User{78741BF2-5839-440B-B302-1F9B341DABB3}C:\st\stm32cubeide_1.6.1\stm32cubeide\plugins\com.st.stm32cube.ide.mcu.externaltools.stlink-gdb-server.win32_1.6.0.202101291314\tools\bin\st-link_gdbserver.exe] => (Allow) C:\st\stm32cubeide_1.6.1\stm32cubeide\plugins\com.st.stm32cube.ide.mcu.externaltools.stlink-gdb-server.win32_1.6.0.202101291314\tools\bin\st-link_gdbserver.exe => Brak pliku
FirewallRules: [UDP Query User{3FBFB664-D68E-44DE-84B9-F8B625160408}C:\st\stm32cubeide_1.6.1\stm32cubeide\plugins\com.st.stm32cube.ide.mcu.externaltools.stlink-gdb-server.win32_1.6.0.202101291314\tools\bin\st-link_gdbserver.exe] => (Allow) C:\st\stm32cubeide_1.6.1\stm32cubeide\plugins\com.st.stm32cube.ide.mcu.externaltools.stlink-gdb-server.win32_1.6.0.202101291314\tools\bin\st-link_gdbserver.exe => Brak pliku
FirewallRules: [TCP Query User{5FA9EAEB-C254-489C-BF93-144F3AA4B7A6}E:\carel_software\anydesk(2).exe] => (Allow) E:\carel_software\anydesk(2).exe => Brak pliku
FirewallRules: [UDP Query User{BDF76949-6A65-43A9-BD07-9E6C15E76108}E:\carel_software\anydesk(2).exe] => (Allow) E:\carel_software\anydesk(2).exe => Brak pliku
CMD: sfc /scannow
EmptyEventLogs:
EmptyTemp:Plik naprawczy przeznaczony jest tylko dla autora wątku!
Po wykonaniu skryptu i ponownym uruchomieniu załącz utworzony
fixlog.txt
4) Wykonaj profilaktyczne skanowanie:
- RogueKiller Anti Malware→
https://www.adlice.com/roguekiller/#alt_download Zalecane pobranie wersji przenośnej (portable). Przed uruchomieniem pełnego skanowania należy włączyć w ustawieniach bezsygnaturowy „moduł MaIPE (BETA)”; opcjonalnie „skanuj z pełną wydajnością” (ustawienia → ustawienia skanowania).
- AdwCleaner →
https://pl.malwarebytes.com/adwcleaner/ Po skończonym skanowaniu pomiń linie oznaczone jako preinstalowane.
Resztę odnalezionych elementów przenieś do kwarantanny.
5) Załącz nowe logi FRST. Daj znać, czy problem dalej występuje. 
