Po co takie badziewia instalujesz? Do tego wszystko pirackie.
Odinstaluj:
Advanced SystemCare Ultimate (HKLM-x32\...\Advanced SystemCare Ultimate_is1) (Version: 17.0.0 - IObit)
Ashampoo WinOptimizer 19.00.20 (HKLM\...\Ashampoo WinOptimizer_is1) (Version: 19.00.20 - RePack 9649)
Najlepiej tez:
Mini KMS Activator Ultimate 2.2 (HKLM\...\Mini KMS Activator Ultimate 2.2_is1) (Version: 2.2 - )
Pozbadz sie tez na razie:
Kaspersky Total Security (HKLM-x32\...\InstallWIX_{4FC79BE9-AD63-46C0-9626-E4F6BCE6A976}) (Version: 21.3.10.391 - Kaspersky)
Kaspersky VPN (HKLM-x32\...\InstallWIX_{07723C57-89A1-3225-A421-538AE9AF279D}) (Version: 21.23.6.614 - Kaspersky)
Wykonaj Fixlist.txt dla FRST:
CloseProcesses:
AlternateDataStreams: C:\WINDOWS\system32\Drivers\fjbtuoen.sys:changelist [978]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\fpbcylpm.sys:changelist [978]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\zxcmeslh.sys:changelist [858]
AlternateDataStreams: C:\ProgramData\TEMP:1AAB2E68 [183]
AlternateDataStreams: C:\ProgramData\TEMP:D735933A [130]
HKLM\...\StartupApproved\Run32: => "IObit Malware Fighter"
HKU\S-1-5-21-1512624719-2573985483-417533279-1001\...\StartupApproved\Run: => "Advanced SystemCare 8"
HKU\S-1-5-21-1512624719-2573985483-417533279-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKLM\...\Run: [Stormshot] => H:\FunPlus\Stormshot\Launcher.ex (Brak pliku)
HKLM\SOFTWARE\Policies\Microsoft\MRT: Ograniczenia <==== UWAGA
HKU\S-1-5-21-1512624719-2573985483-417533279-1001\...\Run: [Advanced SystemCare 8] => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2426144 2014-11-25] (IObit Information Technology -> IObit)
HKU\S-1-5-21-1512624719-2573985483-417533279-1001\...\Run: [Advanced SystemCare Ultimate] => C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\ASCTray.exe [3832176 2024-07-24] (IObit CO., LTD -> IObit)
HKU\S-1-5-21-1512624719-2573985483-417533279-1001\...\Run: [Advanced SystemCare] => C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\ASCTray.exe [3832176 2024-07-24] (IObit CO., LTD -> IObit)
HKU\S-1-5-21-1512624719-2573985483-417533279-500\...\Run: [Advanced SystemCare Ultimate] => C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\ASCTray.exe [3832176 2024-07-24] (IObit CO., LTD -> IObit)
GroupPolicy: Ograniczenia ? <==== UWAGA
Policies: C:\ProgramData\NTUSER.pol: Ograniczenia <==== UWAGA
Task: {83E42BBD-8940-4335-8448-8587DE9694F5} - System32\Tasks\ASC_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\Monitor.exe [5022064 2024-08-07] (IObit CO., LTD -> IObit) -> C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\\/Task
Task: {58D607C7-95CF-4320-8D80-1CF93A6A0DAE} - System32\Tasks\ASC8_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe [1747744 2014-11-26] (IObit Information Technology -> IObit)
Task: {F6B6E8C8-D493-44FE-B1C3-B2A504F7BF78} - System32\Tasks\ASC8_SkipUac_De5il => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe [5207328 2014-11-26] (IObit Information Technology -> IObit)
Task: {BC41F47E-7D64-4BC8-A1AD-862813A11A5E} - System32\Tasks\ASCU_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\Monitor.exe [5022064 2024-08-07] (IObit CO., LTD -> IObit) -> C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\\/Task
Task: {84E7A220-4972-4949-9D3C-54ACA76E77BB} - System32\Tasks\ASCU_SkipUac_De5il => C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\ASC.exe [11157712 2025-06-27] (IObit CO., LTD -> IObit) [Brak podpisu cyfrowego] -> C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\\/SkipUac
Task: {6121D5D8-A1FB-424B-80BE-DB2745655D32} - System32\Tasks\PCIeBus => C:\Windows\system32\wevtutil.exe [299008 2025-09-20] (Microsoft Windows -> Microsoft Corporation) -> cl Application <==== UWAGA
Task: {E7CAFB03-F36A-48C1-8509-B429EE3FEF14} - System32\Tasks\PCIeBusPower => C:\Windows\system32\vssadmin.exe [167936 2025-09-03] (Microsoft Windows -> Microsoft Corporation) -> delete shadows /all /quiet <==== UWAGA
Task: {5C10C909-91B7-40EB-9DB7-10AB940C6474} - System32\Tasks\PCIeBusQueue => C:\Windows\system32\wevtutil.exe [299008 2025-09-20] (Microsoft Windows -> Microsoft Corporation) -> cl System <==== UWAGA
Task: {799642F1-7E54-4F90-9496-4209215F6150} - System32\Tasks\TrafficMonitor\Autorun for De5il => F:\Users\devil\Desktop\TrafficMonitor_V1.85.1_x64\TrafficMonitor\TrafficMonitor.exe [2021888 2025-02-10] (By ZhongYang) [Brak podpisu cyfrowego]
Task: C:\WINDOWS\Tasks\ASC8_SkipUac_De5il.job => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe
Edge HKU\S-1-5-21-1512624719-2573985483-417533279-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm]
Edge HKU\S-1-5-21-1512624719-2573985483-417533279-500\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm]
S3 cpuz152; \??\C:\Users\devil\AppData\Local\Temp\cpuz152\cpuz152_x64.sys [X] <==== UWAGA
S3 cpuz159; \??\C:\WINDOWS\temp\cpuz159\cpuz159_x64.sys [X] <==== UWAGA
S3 mimkrnl; System32\drivers\mimkrnl.sys [X]
2019-12-12 20:39 - 2021-04-23 21:21 - 000000004 _____ () C:\ProgramData\lock.dat
2019-12-12 20:40 - 2021-04-23 21:24 - 000000004 _____ () C:\ProgramData\rc.dat
2022-07-03 13:30 - 2022-07-03 13:38 - 025282928 _____ (Piriform Software Ltd) C:\ProgramData\Setup.exe
2019-12-12 20:39 - 2019-12-12 20:39 - 000000008 _____ () C:\ProgramData\ts.dat
2022-07-03 13:51 - 2022-07-03 13:51 - 000009836 _____ () C:\Users\devil\cc_20220703_145135.reg
