Wyskakujące okno – analiza FRST.txt i Addition.txt z programu Fabar – co dalej?

Witam,

Od kilku dni na pulpicie wyskakuje komunikat (załącznik), mógłby ktoś pomóc mi to naprawić?
Wygenerowałem plik FRST.txt oraz Addition.txt w programie Farbar. I co dalej mam zrobić?

Odinstaluj:
CCleaner
Wise Registry Cleaner 10.8.5

Wykonaj Fixlist.txt:
CloseProcesses:
AV: McAfee VirusScan (Enabled - Up to date) {F682A51C-4EAD-6A3A-F460-B9C1D4A2DB09}
FW: McAfee Firewall (Enabled) {CEB92439-04C2-6B62-DF3F-10F42A719C72}
HKU\S-1-5-21-46021679-2703494987-2506465736-1001\...\StartupApproved\StartupFolder: => "rig.vbs.lnk"
HKU\S-1-5-21-46021679-2703494987-2506465736-1001\...\StartupApproved\Run: => "64FTM5A7WD"
HKU\S-1-5-21-46021679-2703494987-2506465736-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45715776 2025-05-21] (Gen Digital Inc. -> Gen Digital Inc.)
HKU\S-1-5-21-46021679-2703494987-2506465736-1001\...\Run: [ProductAuthenticationService] => C:\Users\48889\AppData\Roaming\ProductAuthenticationService\pas.exe [1004072 2019-05-07] (ResolveDevOps Limited -> ResolveDevOps Limited) <==== UWAGA
HKU\S-1-5-21-46021679-2703494987-2506465736-1001\...\Run: [64FTM5A7WD] => "C:\Users\48889\AppData\Local\Temp\kms.js" (Brak pliku) <==== UWAGA
HKU\S-1-5-21-46021679-2703494987-2506465736-1001\...\MountPoints2: {f44a726b-4a8f-11ef-affc-ce6f3c6425ea} - "G:\setup.EXE" /AUTORUN
HKU\S-1-5-21-46021679-2703494987-2506465736-1001\...\MountPoints2: {fcab3fc1-48e2-11ef-affc-ce6f3c6425ea} - "F:\setup.EXE" /AUTORUN
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Startup: C:\Users\48889\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\dy.vbs.lnk [2024-07-29]
ShortcutTarget: dy.vbs.lnk -> C:\ProgramData\dy.vbs () [Brak podpisu cyfrowego]
Startup: C:\Users\48889\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rig.vbs.lnk [2024-07-29]
ShortcutTarget: rig.vbs.lnk -> C:\ProgramData\rig.vbs () [Brak podpisu cyfrowego]
BootExecute:
GroupPolicy: Ograniczenia - Chrome <==== UWAGA
Policies: C:\ProgramData\NTUSER.pol: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Edge: Ograniczenia <==== UWAGA
Task: {E44D3B2C-1294-4F0F-9AAC-BD028841CE25} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [3480504 2025-05-21] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {7138E3C6-D3F2-4E11-ACDE-33F0C0F8FF76} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [6139704 2025-05-21] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "a7d7ad10-5a72-44d1-95a0-191ee85b399b" --version "6.36.0.11508" --silent
Task: {A4B74B39-3245-4CF2-BC1D-ADBD56AC7302} - System32\Tasks\CCleanerSkipUAC - 48889 => C:\Program Files\CCleaner\CCleaner.exe [39558464 2025-05-21] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {12D0A5B1-609F-4FD7-88CC-EEFEDDAF7C31} - System32\Tasks\CCleanerSkipUAC - Dom => C:\Program Files\CCleaner\CCleaner.exe [39558464 2025-05-21] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {2CA93407-9CD8-479E-8B06-340092462B15} - System32\Tasks\HEU KMS Renewal => %WINDIR%\HEUKMS\HEU_KMS_Renewal.exe /smart /nologo (Brak pliku)
Task: {A459B82C-D5B3-4DF3-92B6-84FFC5C4D022} - System32\Tasks\Skype => C:\Users\48889\AppData\Local\Temp\kms.js (Brak pliku) <==== UWAGA
Task: {2C18AB17-C798-4468-8813-781246FD9243} - System32\Tasks\WiseCleaner\WRCSkipUAC => C:\Program Files (x86)\Wise\Wise Registry Cleaner\WiseRegCleaner.exe [11194104 2022-12-09] (Lespeed Technology Co., Ltd -> WiseCleaner.com) [Brak podpisu cyfrowego] -> C:\Program Files (x86)\Wise\Wise Registry Cleaner\\$UAC
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
CHR HKU\S-1-5-21-46021679-2703494987-2506465736-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo]
R3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1079608 2025-05-21] (Gen Digital Inc. -> Gen Digital Inc.)
2025-06-05 02:05 - 2025-06-05 02:05 - 000000080 _____ C:\ProgramData\rig.wsh
2024-06-05 20:58 - 2024-05-30 00:43 - 000000103 _____ () C:\ProgramData\dy.vbs
2024-07-29 11:01 - 2024-01-09 16:14 - 000000043 _____ () C:\ProgramData\rig.cmd
2024-07-29 11:01 - 2024-01-09 16:13 - 000000101 _____ () C:\ProgramData\rig.vbs
2024-06-05 20:58 - 2024-05-30 00:40 - 000000058 _____ () C:\ProgramData\start.cmd

Dziękuję pięknie! Wszystko działa prawidłowo.