Brak wolnego miejsca, wolna praca

[patrycja88]

Cześć,

 

załączam logi. Nie ma miejsca na dysku w Sequoia View jakieś dziwne pliki typu Installer na dysku C po kilka GB itp.

 

Z gory dziękuję za analizę

Addition.txt Shortcut.txt FRST.txt

[Illidan]

Uruchom FRST. Skopiuj zawartość podaną niżej i nigdzie nie wklejaj-FRST sam znajdzie "fixlist" w schowku systemowym.

Spoiler

Start::

CreateRestorePoint:

CustomCLSID: HKU\S-1-5-21-2525630747-4012409834-2106174525-1002_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4}\localserver32 -> "C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" -ToastActivated => Brak pliku
HKU\S-1-5-21-2525630747-4012409834-2106174525-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://oem17win10.msn.com/?pc=NMTE
HKU\S-1-5-21-2525630747-4012409834-2106174525-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://oem17win10.msn.com/?pc=NMTE
FirewallRules: [{AC47918A-36E8-483F-81EE-EFADFCBE0223}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe => Brak pliku
FirewallRules: [{50DC7EBB-CD2E-4649-9BE1-0333796555EB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe => Brak pliku
FirewallRules: [{5CF95C59-52C5-4527-B349-14A2E3F9BB36}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe => Brak pliku
FirewallRules: [{CDF866F7-6224-4E6E-ABC9-D7FAD6C88C68}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe => Brak pliku
FirewallRules: [{E721C9BA-3DCD-4432-B37B-8C071A9E1FA5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe => Brak pliku
FirewallRules: [{E9EDCDB4-82CA-4A87-AC16-32F792F3976E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe => Brak pliku
FirewallRules: [{413DFA84-C42C-464E-807B-E90F8DD7BF7D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe => Brak pliku
FirewallRules: [{B9A1D11C-AE90-425B-84C4-166ADD62D3F7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe => Brak pliku
FirewallRules: [TCP Query User{8F7A2C1B-B0B3-4FC0-9BE7-B1AC2FABA7BC}C:\users\patry\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\patry\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe => Brak pliku
FirewallRules: [UDP Query User{C9928505-8AF5-4DDF-AB66-5311A6210751}C:\users\patry\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\patry\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe => Brak pliku
FirewallRules: [{ACCDDCF0-7837-4218-8865-33F8EFC13B2E}] => (Allow) C:\Users\patry\AppData\Local\Programs\Opera\106.0.4998.70\opera.exe => Brak pliku
FirewallRules: [{6A3FF07F-AACE-40C3-8A13-FDFF4476BDFF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => Brak pliku
FirewallRules: [{4D9F425A-20F8-47DE-94F7-7428B8FAE0B8}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => Brak pliku
FirewallRules: [{7506FDDB-F1FF-4DE1-8AC3-9351D435B826}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Brak pliku
FirewallRules: [{1195B16F-C8C6-4CCF-95C9-96B7C0CAF950}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Brak pliku
FirewallRules: [TCP Query User{77617428-20F6-4755-84A1-0DA2AE17E002}C:\program files\common files\adobe\adobe desktop common\hex\creative cloud ui helper.exe] => (Block) C:\program files\common files\adobe\adobe desktop common\hex\creative cloud ui helper.exe => Brak pliku
FirewallRules: [UDP Query User{EBAD2479-2FF8-42E7-B7C5-3A957C0CCC0C}C:\program files\common files\adobe\adobe desktop common\hex\creative cloud ui helper.exe] => (Block) C:\program files\common files\adobe\adobe desktop common\hex\creative cloud ui helper.exe => Brak pliku
FirewallRules: [{3AA60AF8-E52F-4ED3-9E30-D2A9D21111E7}] => (Allow) C:\Users\patry\AppData\Local\Programs\Opera\opera.exe => Brak pliku
FirewallRules: [TCP Query User{7E7D67BE-40D9-44FA-89FF-308858693910}C:\users\patry\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe] => (Block) C:\users\patry\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe => Brak pliku
FirewallRules: [UDP Query User{593B2A32-271D-4BE1-BD8D-8BC0952ECF70}C:\users\patry\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe] => (Block) C:\users\patry\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe => Brak pliku
FirewallRules: [{F0BFDB9E-860E-41AB-94A1-64D1AA821478}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12134.4.3008.0_x64__nzyj5cx40ttqa\iTunes.exe => Brak pliku
FirewallRules: [{082A9125-3BE1-4253-9C62-1AB7C15009FD}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12134.4.3008.0_x64__nzyj5cx40ttqa\iTunes.exe => Brak pliku
FirewallRules: [{DCA7FA72-08E2-4089-8C1F-4C61A91B7E52}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12134.4.3008.0_x64__nzyj5cx40ttqa\iTunes.exe => Brak pliku
FirewallRules: [{C8E5A7F7-F2A5-4CC8-8716-612E5C7BFA8A}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12134.4.3008.0_x64__nzyj5cx40ttqa\iTunes.exe => Brak pliku
FirewallRules: [{0C81C43C-814A-4E9F-A874-946AC8441B56}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12134.4.3008.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe => Brak pliku
FirewallRules: [{6724E5D3-516B-48D8-BC91-4EAF2F8CF8A9}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12134.4.3008.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe => Brak pliku
FirewallRules: [{5C84043D-A198-49E7-A710-9C1F4A7A97C8}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12134.4.3008.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe => Brak pliku
FirewallRules: [{CCCC5DB2-BEC4-4B50-B177-139D27E4A6FF}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12134.4.3008.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe => Brak pliku
FirewallRules: [{CE11620D-349C-4EAE-AF17-605E3CF43458}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.132.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => Brak pliku
FirewallRules: [{A8296204-13E6-4C8A-A6E0-ED5492D45C42}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.132.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => Brak pliku
FirewallRules: [{ECC677AD-1A01-4A88-9C35-3BD5924E085E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.132.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => Brak pliku
FirewallRules: [{CC3FBB05-4278-4605-B77B-9B0D078587EA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.132.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => Brak pliku
FirewallRules: [{323470BF-72CE-4E04-81B8-2DC6F37E52DA}] => (Allow) C:\Program Files\Huawei\PCManager\HWVCR.exe => Brak pliku
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\139.0.7258.155\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --channel=stable (Brak pliku)
HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Edge: Ograniczenia <==== UWAGA
Task: {D83CAB0C-3D34-4C84-8827-46CAEFF16916} - System32\Tasks\Adobe Uninstaller => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe  --sapCode=PPRO --productVersion=24.2.1 --productPlatform=win64 --appletID=AppsPanel_BL --appletVersion=1.0 --appMode=Uninstall (Brak pliku)
Task: {7B6FE95D-2A02-42B3-8A85-B46CD750906E} - System32\Tasks\Launch Adobe CCXProcess => "C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe"  (Brak pliku)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe  (Brak pliku)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe  (Brak pliku)
Task: {0BB36A32-0D9E-4297-AFD7-6BD7B5DB4C9B} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => %windir%\System32\UNP\UpdateNotificationMgr.exe  (Brak pliku)
Task: {418E87D3-2B65-4CE6-8FDC-553FAAB56705} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe  LogonUpdateResults (Brak pliku)
Task: {D5A892A8-2359-4CAE-B6C2-2DE11C459051} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => %systemroot%\system32\MusNotification.exe  Display (Brak pliku)
Task: {2627975D-6EAC-4079-BFC1-A0F82EF0123E} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe  /RunOnAC ReadyToReboot (Brak pliku)
Task: {4D1AAB45-1C0A-497D-AC56-22E0FC1FAC52} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe  /RunOnBattery ReadyToReboot (Brak pliku)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Brak pliku)
Task: {1EBF7F19-8BDC-4B54-94BB-0173B38111F4} - System32\Tasks\Office 2019 Statique Activation Planificateur => E:\Office.2019.ProPlusPL.x86.x64\Nowy  folder\ActO19.cmd -renewalonly (Brak pliku)
Task: {7E35D90C-7F14-4B5C-A2E9-7028C22242D8} - System32\Tasks\Opera scheduled Autoupdate 1700077513 => C:\Users\patry\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe  --scheduledtask --bypasslauncher $(Arg0) (Brak pliku)
FCheck: C:\WINDOWS\system32\MRT.exe [2026-05-25] <==== UWAGA (zerobajtowy plik/folder)
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TLauncher\TLauncher.lnk

Emptytemp:

End::

Fixlist przeznaczona tylko dla autora tematu!

W FRST kliknij opcję "Napraw" (Fix). Pokaż raport  "fixlog.txt", który otrzymasz po restarcie komputera. Pobierz dodatkowo "Malwaresbytes" . Przeskanuj nim komputer, usuń jeśli coś zostanie jeszcze wykryte i pokaż raport. Pobierz też darmowy "ADWCleaner", przeskanuj nim system, nic nie usuwaj, pokaż tylko log ze skanowania.

[patrycja88]

Dziękuję, zrobiłam co wskazano. W załączniku wymagane logi

AdwCleaner[S00].txt Fixlog.txt Malwarebytes Raport z pełnego skanowania 2026-05-26 233845.txt