Podczas otwierania spakowanych plikow? Wszystkich czy tylko ktoregos dokladnie?
Fixlist.txt dla FRST:
CloseProcesses:
HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (Brak pliku)
HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (Brak pliku)
HKU\S-1-5-21-2039460041-3107153439-808921278-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner.exe [39138608 2025-01-14] (Gen Digital Inc. -> Gen Digital Inc.)
HKU\S-1-5-21-2039460041-3107153439-808921278-1000\...\MountPoints2: {c888af61-22dc-11dd-97ec-001b77b5b744} - D:\AutoRun.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk [2021-01-13] <==== UWAGA
ShortcutTarget: Adobe Reader Speed Launch.lnk -> C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated) [Brak podpisu cyfrowego] <==== UWAGA
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TMMonitor.lnk [2021-12-09] <==== UWAGA
ShortcutTarget: TMMonitor.lnk -> C:\Program Files\ArcSoft\TotalMedia 3.5\TMMonitor.exe (ArcSoft, Inc.) [Brak podpisu cyfrowego] <==== UWAGA
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Utility.lnk [2024-12-25] <==== UWAGA
ShortcutTarget: TP-LINK Wireless Utility.lnk -> C:\Program Files\TP-LINK\COMMON\TWCU.exe (TP-LINK TECHNOLOGIES CO., LTD.) [Brak podpisu cyfrowego] <==== UWAGA
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ZDWLan Utility.lnk [2024-12-25] <==== UWAGA
ShortcutTarget: ZDWLan Utility.lnk -> C:\Users\DELLIK\Downloads\ZDWlan.exe () [Brak podpisu cyfrowego] <==== UWAGA
GroupPolicy: Ograniczenia ? <==== UWAGA
Policies: C:\ProgramData\NTUSER.pol: Ograniczenia <==== UWAGA
Task: {19516E42-52E2-4B3E-8947-B679EBA1E6C6} - System32\Tasks\{1A138537-D762-40B0-BE42-09E8BDF7EC46} => C:\Windows\System32\pcalua.exe [8192 2015-02-03] (Microsoft Windows -> Microsoft Corporation) -> -a "C:\Program Files\AIDA32 - Enterprise System Information\aida32.exe" -d C:\Users\DELLIK\Desktop <==== UWAGA
Task: {89E45932-8DDD-4E9C-AAC6-F2AFCD2880C5} - System32\Tasks\{1E463C33-2573-406D-881D-47C0243C7C9F} => C:\Windows\System32\pcalua.exe [8192 2015-02-03] (Microsoft Windows -> Microsoft Corporation) -> -a "C:\Program Files\SDR-RADIO-PRO.com\x86\vcredist_x86.exe" -d "C:\Program Files\SDR-RADIO-PRO.com\x86"
Task: {5D684416-4E6B-4AE4-87A4-6699C619F246} - System32\Tasks\{299BFCE0-F24A-46F3-9019-01FDC8DAC461} => C:\Windows\System32\pcalua.exe [8192 2015-02-03] (Microsoft Windows -> Microsoft Corporation) -> -a C:\Dell\Drivers\R50953\Setup.exe -d C:\Dell\Drivers\R50953
Task: {4B618B23-9635-4962-B025-EE706EC67648} - System32\Tasks\{2EEE4BE9-5F33-4D74-BD92-341E4C2588D6} => C:\Windows\System32\pcalua.exe [8192 2015-02-03] (Microsoft Windows -> Microsoft Corporation) -> -a "F:\HDD ATA SERIAL\vcredist_x86.exe" -d "F:\HDD ATA SERIAL"
Task: {ECACC420-A900-4848-A1E9-138903693DF7} - System32\Tasks\{30578347-ADEB-4AEA-A7BC-6FD2793343A1} => C:\Users\DELLIK\Desktop\SDR Console.exe (Brak pliku)
Task: {3FD5F686-E48B-4D64-A131-4CB403082C1E} - System32\Tasks\{3375CF49-48E4-49C8-B377-DF95828C0384} => C:\Windows\System32\pcalua.exe [8192 2015-02-03] (Microsoft Windows -> Microsoft Corporation) -> -a E:\A867R_AP6.9.1.5.15071301_Drv_8.0.x.65_150827.exe -d E:\
Task: {EDC97383-E2CE-4FF6-B79F-2F598D5DA84F} - System32\Tasks\{3D29921B-A387-45EF-B0A7-07BC9AE36CCD} => C:\Users\DELLIK\Desktop\SDR Console.exe (Brak pliku)
Task: {4458252D-37CD-4517-944A-415D23147CFA} - System32\Tasks\{4A518D35-D640-4F21-B387-07891232E503} => C:\Windows\System32\pcalua.exe [8192 2015-02-03] (Microsoft Windows -> Microsoft Corporation) -> -a C:\Windows\system32\BACSCPL.cpl -c Broadcom Control Suite 2
Task: {51511AD4-7521-4842-BFD4-9E60FF531F37} - System32\Tasks\{65092A8E-3FDD-4EA9-A7E3-A8DFA22FF087} => C:\Windows\System32\pcalua.exe [8192 2015-02-03] (Microsoft Windows -> Microsoft Corporation) -> -a E:\R179525\Setup.exe -d E:\R179525
Task: {F0AB0D8E-280F-4262-B018-9DB25FF2DC58} - System32\Tasks\{6DC0B6F2-E28F-49B5-BFAC-B839C9892344} => C:\Windows\System32\pcalua.exe [8192 2015-02-03] (Microsoft Windows -> Microsoft Corporation) -> -a C:\Users\DELLIK\Downloads\free-usb-analyzer.exe -d C:\Users\DELLIK\Downloads <==== UWAGA
Task: {9C22D926-9308-4DBD-8FAA-DBF08E4BCED1} - System32\Tasks\{7BDF2D20-2AC1-498D-AD5E-DDBF8D3B7F23} => C:\Windows\System32\pcalua.exe [8192 2015-02-03] (Microsoft Windows -> Microsoft Corporation) -> -a C:\Users\DELLIK\Downloads\dupecare.exe -d C:\Users\DELLIK\Downloads <==== UWAGA
Task: {D91D2ABB-E27A-4431-A38F-1BEB90793393} - System32\Tasks\{A8E36D45-9985-4067-9882-593AEA99BBA0} => C:\Users\DELLIK\Desktop\SDR Console.exe (Brak pliku)
Task: {FEABCE18-768B-4A70-B5EC-AEE6A7F5A1BD} - System32\Tasks\{BFBF9B10-4BE7-477C-82ED-056401817193} => C:\Windows\System32\pcalua.exe [8192 2015-02-03] (Microsoft Windows -> Microsoft Corporation) -> -a "C:\Program Files\AVerMedia\AVerMedia A867 USB DVB-T\InstallTool.exe" -d "C:\Program Files\AVerMedia\AVerMedia A867 USB DVB-T"
Task: {7B2494A5-708A-4785-9763-1981223B1381} - System32\Tasks\{F50C0136-3604-4C24-B815-6D12E6444EC8} => C:\Windows\System32\pcalua.exe [8192 2015-02-03] (Microsoft Windows -> Microsoft Corporation) -> -a C:\Dell\Drivers\R114200\HXFSetup.exe -d C:\Dell\Drivers\R114200
Task: {A6F45181-5654-4BFC-B998-1BF7B02FFADD} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [3480504 2025-01-14] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {F5B9C290-12A3-46D7-A0BB-D0FAD535770C} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [5495600 2025-01-14] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "1338abce-0165-42af-90b9-4adb312771d0" --version "6.11.10455" --silent
Task: {EB96A6DA-48E7-4320-9C27-70E2D947DF35} - System32\Tasks\CCleanerSkipUAC - DELLIK => C:\Program Files\CCleaner\CCleaner.exe [39138608 2025-01-14] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {CE9A2F69-A86B-4CF5-8774-B319B56323A0} - System32\Tasks\klcp_update => C:\Program Files\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2113024 2022-12-14] () [Brak podpisu cyfrowego]
Task: C:\Windows\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
S3 wpscloudsvr; "C:\Program Files\Kingsoft\office6\wpscloudsvr.exe" LocalService [X]
S3 cpuz132; \??\C:\Users\DELLIK\AppData\Local\Temp\cpuz132\cpuz132_x32.sys [X] <==== UWAGA
