Odinstaluj:
App Explorer (HKU\S-1-5-19\...\Host App Service) (Version: 0.273.4.452 - SweetLabs) <==== UWAGA
App Explorer (HKU\S-1-5-20\...\Host App Service) (Version: 0.273.4.452 - SweetLabs) <==== UWAGA
App Explorer (HKU\S-1-5-21-3416664767-2594263177-2893300690-1001\...\Host App Service) (Version: 0.273.4.918 - SweetLabs) <==== UWAGA
App Explorer (HKU\S-1-5-21-3416664767-2594263177-2893300690-1007\...\Host App Service) (Version: 0.273.4.452 - SweetLabs) <==== UWAGA
Uzyj Adwcleaner oraz Mbam i usun to co wykryja.
Wykonaj Fixlist.txt dla FRST:
CloseProcesses:
C:\Users\tgrus\AppData\Roaming\clbcatq\
C:\Users\tgrus\AppData\Roaming\80c6bf70bf3f8f\
C:\ProgramData\pinterests\
(svchost.exe ->) (SweetLabs Inc -> SweetLabs, Inc) C:\Users\tgrus\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe
HKU\S-1-5-21-3416664767-2594263177-2893300690-1001\...\Run: [tgrus] => cmd.exe /c start www.pongponger.click (Brak pliku) <==== UWAGA
StartupDir: C:\Users\tgrus\AppData\Local\Temp\4fdb51ccdc <==== UWAGA
Task: {8F4CC7EB-22F2-47F1-8B8B-E896D0A26186} - System32\Tasks\App Explorer => C:\Users\tgrus\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe [8868120 2024-10-21] (SweetLabs Inc -> SweetLabs, Inc) <==== UWAGA
Task: {FF33123D-E74F-4B85-A560-FA7719909D7D} - System32\Tasks\tgrus => C:\Windows\System32\cmd.exe [344064 2025-08-30] (Microsoft Windows -> Microsoft Corporation) -> /c reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v tgrus /t REG_SZ /d "cmd.exe /c start www.pongponger.click" /f <==== UWAGA
Task: {611A4889-0F22-447A-A4F7-B5D79E4AA9A1} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program Service\Framework\TriggerFramework.exe [342672 2022-06-01] (Acer Incorporated -> Acer Incorporated)
2025-09-21 00:12 - 2023-12-31 12:33 - 000000000 __SHD C:\ProgramData\pinterests
2025-09-21 00:12 - 2023-12-31 12:33 - 000000000 ____D C:\Users\tgrus\AppData\Roaming\80c6bf70bf3f8f
2025-09-21 00:11 - 2023-12-31 12:32 - 000000000 ____D C:\Users\tgrus\AppData\Roaming\clbcatq
