Odinstaluj:
AVG AntiVirus Free (HKLM\...\AVG Antivirus) (Version: 24.6.9241.1898 - Gen Digital Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 6.26 - Piriform)
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1208.2 - Piriform Software) Hidden
Combo Cleaner (HKLM\...\{8C9F8853-52F7-46F3-BC78-98001D3FF40C}) (Version: 1.0.63.0 - RCS LT) Hidden
Combo Cleaner (HKLM-x32\...\InstallShield_{8C9F8853-52F7-46F3-BC78-98001D3FF40C}) (Version: 1.0.63.0 - RCS LT)
Wykonaj Fixlist.txt:
CloseProcesses:
AV: Reason Cybersecurity (Disabled - Up to date) {ED4D1201-4876-7014-6F49-4BC9DA784B64}
AV: AVG Antivirus (Enabled - Up to date) {18A975F9-A60C-37D8-E30B-4BEF31AD3411}
HKU\S-1-5-21-2993723222-3311219602-3525833767-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://securesearch.org/homepage?hp=2&pId=BT170902&iDate=2022-02-13 06:39:26&iid=256dd9e4-922c-47dc-8218-b0cae58d6518&bName=
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-2993723222-3311219602-3525833767-1002\...\webcompanion.com -> hxxp://webcompanion.com
MSCONFIG\Services: CCleanerPerformanceOptimizerService => 3
MSCONFIG\Services: ComboCleaner.Guard => 2
MSCONFIG\Services: FvSvc => 3
MSCONFIG\Services: McAfee WebAdvisor => 2
MSCONFIG\Services: rsClientSvc => 2
MSCONFIG\Services: rsEDRSvc => 2
MSCONFIG\Services: rsSyncSvc => 2
HKLM\...\StartupApproved\Run: => "Combo Cleaner"
HKU\S-1-5-21-2993723222-3311219602-3525833767-1002\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-2993723222-3311219602-3525833767-1002\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_175E4FA39C9CFE0C5FB4997564F95D34"
(AVG Technologies USA, LLC -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\AVGUI.exe <4>
(C:\Program Files\AVG\Antivirus\AVGSvc.exe ->) (AVG Technologies USA, LLC -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\aswEngSrv.exe
(C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe ->) (Reason Cybersecurity Inc. -> Reason Software Company Inc.) C:\Program Files\ReasonLabs\EPP\rsHelper.exe
(explorer.exe ->) (RCS LT UAB -> RCS LT) C:\Program Files (x86)\Combo Cleaner\ComboCleaner.exe <2>
(Reason Cybersecurity Inc. -> Reason Cybersecurity Ltd.) C:\Program Files\ReasonLabs\Common\Client\v1.4.2\rsAppUI.exe <5>
(services.exe ->) (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\aswidsagent.exe
(services.exe ->) (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\wsc_proxy.exe
(services.exe ->) (AVG Technologies USA, LLC -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\AVGSvc.exe
(services.exe ->) (AVG Technologies USA, LLC -> Gen Digital Inc.) C:\Program Files\AVG\Antivirus\avgToolsSvc.exe
(services.exe ->) (RCS LT UAB -> RCS LT) C:\Program Files (x86)\Combo Cleaner\ComboCleaner.Guard.exe
(services.exe ->) (RCS LT UAB -> RCS LT) C:\Program Files (x86)\Combo Cleaner\ComboCleaner.WinService.exe
(services.exe ->) (Reason Cybersecurity Inc. -> Reason Cybersecurity Ltd.) C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe
(services.exe ->) (Reason Cybersecurity Inc. -> Reason Software Company Inc.) C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe
(services.exe ->) (Reason Cybersecurity Inc. -> Reason Software Company Inc.) C:\Program Files\ReasonLabs\EPP\rsClientSvc.exe
(services.exe ->) (Reason Cybersecurity Inc. -> Reason Software Company Inc.) C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe
(services.exe ->) (Reason Cybersecurity Inc. -> Reason Software Company Inc.) C:\Program Files\ReasonLabs\EPP\rsWSC.exe
HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [464320 2024-07-21] (AVG Technologies USA, LLC -> Gen Digital Inc.)
HKLM\...\Run: [Combo Cleaner] => C:\Program Files (x86)\Combo Cleaner\ComboCleaner.exe [2143976 2024-06-04] (RCS LT UAB -> RCS LT)
HKU\S-1-5-21-2993723222-3311219602-3525833767-1002\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [44970408 2024-07-16] (Gen Digital Inc. -> Piriform Software Ltd)
HKU\S-1-5-21-2993723222-3311219602-3525833767-1002\...\Run: [MicrosoftEdgeAutoLaunch_175E4FA39C9CFE0C5FB4997564F95D34] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4063800 2024-03-27] (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\$McRebootA5E6DEAA56$.lnk [2024-07-21]
ShortcutTarget: $McRebootA5E6DEAA56$.lnk -> (Brak pliku)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
Task: {27B05161-D00B-4BB7-A8A9-5C5F6DEDF150} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [829408 2024-07-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {89451BED-8F18-4257-9000-ACCFF90CAFE9} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [5074848 2024-07-16] (Gen Digital Inc. -> Gen Digital Inc. All rights reserved.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "e3c3cfcf-65d8-4071-91d1-22c13d0754ca" --version "6.26.11169" --silent
Task: {F67C3E95-F3D7-41E2-A838-0FA76B3F22AD} - System32\Tasks\CCleanerSkipUAC - kinga.zakrzewska => C:\Program Files\CCleaner\CCleaner.exe [38931368 2024-07-16] (Gen Digital Inc. -> Piriform Software Ltd)
Task: {A898EF0A-6B07-46C3-AFB1-A99F95362167} - System32\Tasks\CCleanerSkipUAC - kiyu => C:\Program Files\CCleaner\CCleaner.exe [38931368 2024-07-16] (Gen Digital Inc. -> Piriform Software Ltd)
Task: {40EEA8DD-B3E2-4194-9EBD-27C7AD1307E7} - System32\Tasks\YourTaskName => C:\Windows\system32\wscript.exe [196608 2024-07-21] (Microsoft Windows -> Microsoft Corporation) -> "C:\Users\Public\Edge.vbs" <==== UWAGA
C:\Users\Public\Edge.vbs
Task: C:\Windows\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
C:\Users\kiyu\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho
CHR Extension: (McAfee® WebAdvisor) - C:\Users\kiyu\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2024-05-26]
R2 ComboCleaner.Guard; C:\Program Files (x86)\Combo Cleaner\ComboCleaner.Guard.exe [144616 2024-06-04] (RCS LT UAB -> RCS LT)
R2 ComboCleaner.WinService; C:\Program Files (x86)\Combo Cleaner\ComboCleaner.WinService.exe [152296 2024-06-04] (RCS LT UAB -> RCS LT)
R4 rsClientSvc; C:\Program Files\ReasonLabs\EPP\rsClientSvc.exe [672416 2024-07-20] (Reason Cybersecurity Inc. -> Reason Software Company Inc.)
R4 rsEDRSvc; C:\Program Files\ReasonLabs\EDR\rsEDRSvc.exe [162440 2024-05-11] (Reason Cybersecurity Inc. -> Reason Cybersecurity Ltd.)
R2 rsEngineSvc; C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe [366224 2024-07-20] (Reason Cybersecurity Inc. -> Reason Software Company Inc.)
R4 rsSyncSvc; C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe [597400 2023-01-19] (Reason Cybersecurity Inc. -> Reason Software Company Inc.)
R2 rsWSC; C:\Program Files\ReasonLabs\EPP\rsWSC.exe [208416 2024-07-20] (Reason Cybersecurity Inc. -> Reason Software Company Inc.)
R1 rsCamFilter020502; C:\Windows\System32\drivers\rsCamFilter020502.sys [48944 2023-07-16] (Reason CyberSecurity Inc. -> Reason Software Company)
S0 rsElam; C:\Windows\System32\drivers\rsElam.sys [19944 2024-07-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Reason CyberSecurity Inc.)
U3 aswbdisk; Brak ImagePath
2024-07-21 08:06 - 2023-11-21 14:31 - 000002482 _____ C:\Windows\system32\Tasks\YourTaskName
