Cos obciaza procesor, dysk? Sprawdz w Menedzerze zadan oraz w Process Explorer ze strony MS.
Odinstaluj:
WebAdvisor firmy McAfee
Wiesz co to za program?
web control version 3.0.6.7
W Defenderze usun te wszystkie wyjatki:
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Extensions|.vbs
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Extensions|.ps1
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Extensions|.bat
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|c:\program files\mcafee'c:\program files\common files\mcafee'c:\program files (x86)\mcafee'c:\program files (x86)\common files\mcafee'C:\DELL\FD09N'c:\programdata\mcafee
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|%SystemDrive%
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|%APPDATA%
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|%USERPROFILE%
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|%USERPROFILE%\AppData\Roaming
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|%USERPROFILE%\AppData\
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Windows\System32
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\omias\kmsauto++.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\omias\KMSAuto_Files
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Windows\System32\SppExtComObjPatcher.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Windows\System32\SppExtComObjHook.dll
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\omias\AppData\Local\Temp\OUninstall.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|services32.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|system32.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|svchost32.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|lsass32.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|audiodg32.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|cmd.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|conhost.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes|powershell.exe
Wykonaj Fixlist.txt dla FRST:
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
HKU\S-1-5-21-574207891-2958409195-2554845078-1001\...\MountPoints2: {2caa0edd-0c80-11f0-b644-00d49e4be5e1} - "E:\AutoRun.exe"
CHR DefaultSearchURL: Default -> hxxps://pl.search.yahoo.com/search?fr=mcafee&type=E210PL105G91773&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
C:\Users\omias\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho
C:\Users\omias\AppData\Local\Google\Chrome\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb
CHR Extension: (Torrent Scanner) - C:\Users\omias\AppData\Local\Google\Chrome\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb [2023-04-27]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\omias\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2023-09-27]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [943216 2025-04-05] (McAfee, LLC -> McAfee, LLC)
2025-12-27 10:08 - 2025-12-27 10:08 - 000020286 _____ C:\Users\omias\AppData\LocalLow\8b9875efa777fd3e74f42973f6a74542a9afedbc6653c07228fa68e6ab8b9961
2025-12-27 10:08 - 2025-12-27 10:08 - 000002983 _____ C:\Users\omias\AppData\LocalLow\187206635e74ecff57d68258a12ffd7e23a86a98d3533fc29accc5a29da0edeb
2025-12-27 10:08 - 2025-12-27 10:08 - 000002264 _____ C:\Users\omias\AppData\LocalLow\b59a1545c90cacc1dd8bf96ac5402a1f72a1b6afb0b0bbd6e5b6821538fa3beb
2025-12-27 10:08 - 2025-12-27 10:08 - 000000026 _____ C:\Users\omias\AppData\LocalLow\8f9bfaf7de49b5967b14d0a2bf801d24e3975f8e42258a464bfa4ef1662a9267
2025-12-27 10:08 - 2025-12-27 10:08 - 000000026 _____ C:\Users\omias\AppData\LocalLow\8536ce77c26ea844344a627b5b261e4b5a35de281f93b8f1a2a97422748e53cd
2025-12-27 09:59 - 2025-12-27 09:59 - 000002264 _____ C:\Users\omias\AppData\LocalLow\0d095d062103ac0658a258bbfcab4ddd85f52b96f00219e078bc1831dea753a2
2025-12-27 09:58 - 2025-12-27 10:32 - 000221693 _____ C:\Users\omias\AppData\LocalLow\5d08780726bf1c1612ad62ce7fa2463d0a49b3c1b67d7bf26dbb3a2af8519f9c
2025-12-27 09:58 - 2025-12-27 10:13 - 000025076 _____ C:\Users\omias\AppData\LocalLow\73b123f9037713b34a286f7bf7d26803d860f9f3972aa17dfd2fff91638c6cd5
2025-12-27 09:58 - 2025-12-27 10:08 - 000000130 _____ C:\Users\omias\AppData\LocalLow\dc2a86853ecd3d9a68fc4a96d87aad1605d69fc2478b785db334cc5069386ef1
2025-12-27 09:58 - 2025-12-27 09:58 - 000000026 _____ C:\Users\omias\AppData\LocalLow\c3a2176b921293835919486342a0e5a427fcd3add7ccdfcf624a1969b88e9f90
2025-12-27 09:57 - 2025-12-27 09:59 - 000000130 _____ C:\Users\omias\AppData\LocalLow\17b919acecc84e1f248f3a1f866c1b31e370354d0b475895218733a46d50bd7f
2025-12-27 09:57 - 2025-12-27 09:57 - 000005636 _____ C:\Users\omias\AppData\LocalLow\dd2e866a3a0a9a5184fafc56463ad1c285db233f81e7c771320ab6eea723d79d
2025-12-24 12:40 - 2025-12-27 10:08 - 000000130 _____ C:\Users\omias\AppData\LocalLow\aff087c2bdee22d1feb93bc1077b8b120ac1ae394cdd601d629fee5c8398530e
2025-12-24 12:40 - 2025-12-27 10:08 - 000000130 _____ C:\Users\omias\AppData\LocalLow\4182628cfd0282f0bd819c17ba06a66087ccf69afcdbd9969b6147ef02af0905
2025-12-24 12:40 - 2025-12-24 12:40 - 000005904 _____ C:\Users\omias\AppData\LocalLow\7843d5c425e8df881a08311029d578960788b752c1b22d0971902c1f338569a0
2025-12-19 19:32 - 2025-12-19 19:32 - 000000026 _____ C:\Users\omias\AppData\LocalLow\340bb85cca746be61ce63439da15325035de59efc7a60496e81b6ca2077e26d5
2025-12-19 19:22 - 2025-12-19 19:22 - 000002264 _____ C:\Users\omias\AppData\LocalLow\8f889857eeb19acb6f390eff4c28f2a8fe721a935162ae76e92e7edeaa699914
2023-05-01 12:33 - 2023-04-26 19:03 - 000491520 _____ (Microsoft Corporation) C:\Users\Public\Uni.bat.exe
Ewentualnie pozbadz sie Eset'a i sprawdz czy cos sie zmienia.
