Wyłączony defender, zamulony system

[nfcode]

Jak w temacie posiadam problem z zablokowanym działaniem defendera oraz sam komputer jest nieco przymulony

 

W załącznikach załączam log z FRST

Shortcut.txt Addition.txt FRST.txt

[jessica]

Uruchom FRST. Na klawiaturze naciśnij jednocześnie CTRL+Y.
Otworzy się Notatnik - wklej do niego:

Spoiler

HKU\S-1-5-21-2922760720-4043368837-1713385151-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.global-pl.com/
SearchScopes: HKU\S-1-5-21-2922760720-4043368837-1713385151-1001 -> DefaultScope {E27A8949-E562-4E02-833A-E8F1403C6750} URL = hxxp://www.global-pl.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2922760720-4043368837-1713385151-1001 -> {E27A8949-E562-4E02-833A-E8F1403C6750} URL = hxxp://www.global-pl.com/search?q={searchTerms}
FirewallRules: [{3D1272F9-8CC4-4A23-9608-443646FF152E}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Brak pliku
FirewallRules: [{915DD4EA-7E10-44F1-836E-3DC45AFFC9AA}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Brak pliku
FirewallRules: [{CE380615-7967-48E9-B065-946ACD3CB198}] => (Allow) C:\Users\Admin\AppData\Roaming\Zoom\bin\airhost.exe => Brak pliku
FirewallRules: [{4DDEDB65-E101-40CA-BA1E-9D65D6CD00C9}] => (Allow) C:\Users\Admin\AppData\Roaming\Zoom\bin\airhost.exe => Brak pliku
FirewallRules: [TCP Query User{30EAC5C5-2B7E-4445-A78D-5D84478D62EE}C:\users\admin\desktop\sdi\sdi_x64_r2102.exe] => (Allow) C:\users\admin\desktop\sdi\sdi_x64_r2102.exe => Brak pliku
FirewallRules: [UDP Query User{225DB41A-7AF0-405F-AC5D-42C740F93B96}C:\users\admin\desktop\sdi\sdi_x64_r2102.exe] => (Allow) C:\users\admin\desktop\sdi\sdi_x64_r2102.exe => Brak pliku
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\$McRebootA5E6DEAA56$.lnk [2021-05-19]
ShortcutTarget: $McRebootA5E6DEAA56$.lnk ->  (Brak pliku)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA
Task: {E3A9D93F-56F5-498C-94F6-89319B4AB45A} - System32\Tasks\ByteFence => c:\program files\bytefence\ByteFence.exe <==== UWAGA
RemoveDirectory: c:\program files\bytefence
Task: {B039A52D-73D0-42A6-9FC1-85F3030233C0} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe
Task: {350BFACD-3656-4265-AEA8-4CE2AE0E1123} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
Edge HomeButtonPage: HKU\S-1-5-21-2922760720-4043368837-1713385151-1001 -> hxxp://www.global-pl.com/
FF Homepage: Mozilla\Firefox\Profiles\6z2zwmem.default-release -> hxxp://www.global-pl.com/
CHR HomePage: Default -> hxxp://www.global-pl.com/
CHR StartupUrls: Default -> "hxxp://www.global-pl.com/"
CHR DefaultSearchURL: Default -> hxxps://pl.search.yahoo.com/search?fr=mcafee_uninternational&type=E210PL91105G0&p={searchTerms}
CHR Extension: (McAfee® WebAdvisor) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2021-05-19]
C:\WINDOWS\Minidump\*.dmp
RemoveDirectory: C:\ProgramData\boost_interprocess
HOSTS:
Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"}
EmptyTemp:

Na klawiaturze naciśnij jednocześnie CTRL + S.
W FRST kliknij na Fix (NAPRAW).

 

jessi

[nfcode]

Gotowe :) Widzę, że Defender już działa

Fixlog.txt

[jessica]

Dobre i to.

 

jessi