Odinstaluj:
Avast Free Antivirus (HKLM\...\Avast Antivirus) (Version: 24.4.6112 - Avast Software)
Avast SecureLine VPN (HKLM\...\Avast SecureLine) (Version: 24.4.9914.11970 - Avast Software)
Safer Web (HKLM\...\ReasonLabs-DNS) (Version: 3.2.2 - Reason Cybersecurity Inc.)
WebAdvisor firmy McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.898 - McAfee, LLC)
Jak masz cierpliwosc to mozesz dodac do Fixlist.txt wszystkie wpisy z addition zawierajace jp2iexp.dll takie jak ten:
CustomCLSID: HKU\S-1-5-21-3850756039-2802528057-471770600-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBC}\InprocServer32 -> C:\Users\adm\Desktop\Nowy folder\bin\jp2iexp.dll => Brak pliku
Jest ich tam cala masa i nie chce ich tutaj wklejac.
Zrob skan przy pomocy mbam oraz adwcleaner i usun to co wykryja.
Pobierz i uruchom:
https://www.tenforums.com/attachments/tutoria...windows-10-a-windows_update_medic_service.reg
Wykonaj taki Fixlist.txt dla FRST:
CloseProcesses:
Hosts:
C:\Users\adm\AppData\Roaming\Google\Libs\
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (Reason Cybersecurity Inc. -> Reason Software Company Inc.) C:\Program Files\ReasonLabs\DNS\rsDNSClientSvc.exe
(services.exe ->) (Reason Cybersecurity Inc. -> Reason Software Company Inc.) C:\Program Files\ReasonLabs\DNS\rsDNSResolver.exe
(services.exe ->) (Reason Cybersecurity Inc. -> Reason Software Company Inc.) C:\Program Files\ReasonLabs\DNS\rsDNSSvc.exe
(services.exe ->) (Reason Cybersecurity Inc. -> Reason Software Company Inc.) C:\Program Files\ReasonLabs\VPN\rsVPNClientSvc.exe
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Ograniczenia <==== UWAGA
HKU\S-1-5-21-3850756039-2802528057-471770600-1001\...\Run: [Microsoft Edge Update] => C:\Users\adm\AppData\Local\Microsoft\EdgeUpdate\1.3.187.37\MicrosoftEdgeUpdateCore.exe [264264 2024-05-08] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3850756039-2802528057-471770600-1001\...\Run: [MicrosoftEdgeAutoLaunch_2C3C3D7FF5870414065392B0D8030407] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4136896 2024-05-17] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3850756039-2802528057-471770600-1001\...\RunOnce: [Application Restart #0] => C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe [2849816 2024-05-22] (Brave Software, Inc. -> Brave Software, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast SecureLine VPN.lnk [2024-05-08]
ShortcutTarget: Avast SecureLine VPN.lnk -> C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe (Avast Software s.r.o. -> Gen Digital Inc.)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
Task: {326E74D1-93FB-46C3-B975-47627FA3067F} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1655837186 => C:\Users\adm\AppData\Local\Programs\Opera GX\launcher.exe [2304416 2024-04-12] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\adm\AppData\Local\Programs\Opera GX\assistant" $(Arg0)
Task: {343FCB1B-67EA-4B05-B08A-844B4EB1D2A7} - System32\Tasks\Opera GX scheduled Autoupdate 1654109116 => C:\Users\adm\AppData\Local\Programs\Opera GX\launcher.exe [2304416 2024-04-12] (Opera Norway AS -> Opera Software)
Task: {3069DDE0-F007-4EE7-AADD-EFAF1629D56D} - System32\Tasks\Opera scheduled Autoupdate 1688930824 => C:\Users\adm\AppData\Local\Programs\Opera\launcher.exe [2717592 2023-07-06] (Opera Norway AS -> Opera Software)
C:\Users\adm\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho
CHR Extension: (McAfee® WebAdvisor) - C:\Users\adm\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2024-04-24]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [879456 2024-05-16] (McAfee, LLC -> McAfee, LLC)
R2 rsDNSClientSvc; C:\Program Files\ReasonLabs\DNS\rsDNSClientSvc.exe [585072 2023-03-05] (Reason Cybersecurity Inc. -> Reason Software Company Inc.)
R2 rsDNSResolver; C:\Program Files\ReasonLabs\DNS\rsDNSResolver.exe [10939248 2023-03-05] (Reason Cybersecurity Inc. -> Reason Software Company Inc.)
R2 rsDNSSvc; C:\Program Files\ReasonLabs\DNS\rsDNSSvc.exe [214384 2023-03-05] (Reason Cybersecurity Inc. -> Reason Software Company Inc.)
R2 rsVPNClientSvc; C:\Program Files\ReasonLabs\VPN\rsVPNClientSvc.exe [639344 2023-03-29] (Reason Cybersecurity Inc. -> Reason Software Company Inc.)
S4 rsVPNSvc; "C:\Program Files\ReasonLabs\VPN\rsVPNSvc.exe" [X]
U1 aswbdisk; Brak ImagePath
S3 rsDwf; \SystemRoot\system32\DRIVERS\rsDwf.sys [X]