Pojawiające się okno cmd na kilka sekund w losowych momentach, podejrzenie wirusa

[imusewindows]

Dobry wieczór, od jakiegoś miesiąca zaczęło pojawiać się okno cmd w losowych momentach na kilka sekund. 

 

Dołączam logi z programu FIRST 

Addition.txt FRST.txt Shortcut.txt

[Illidan]

Cześć. Uruchom FRST. Skopiuj zawartość podaną niżej i nigdzie nie wklejaj-FRST sam znajdzie "fixlist" w schowku systemowym.

Spoiler

Start::
CreateRestorePoint:
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Ograniczenia <==== UWAGA
HKLM\SYSTEM\\CurrentControlSet\Control\Session Manager\Environment\\Path [value contains %Path%] <==== UWAGA
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Edge: Ograniczenia <==== UWAGA
Task: {D23CA1EA-DCCA-4603-9E12-A519F0CABE6C} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [3710456 2026-09-08] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {FB1F60F3-8CF8-47F2-949D-412E02BFFD5E} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem140.0.7272.0{7C9D882A-CFEF-408C-BBAE-CC789A219617} => "C:\Program Files (x86)\Google\GoogleUpdater\140.0.7272.0\updater.exe"  --wake --system (Brak pliku)
Task: {E88D9B2C-DDEA-47B2-9582-085153004DB5} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe  (Brak pliku)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe  (Brak pliku)
Task: {C7804848-3AD0-4B25-BB0A-69AC4697E744} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe  /RunOnAC RebootDialog (Brak pliku)
Task: {C2EA648F-74E7-4CB8-9310-8D9A6E95D975} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe  /RunOnBattery RebootDialog (Brak pliku)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Brak pliku)
Task: {03E38400-655B-41A3-AD72-4BB0B230E9F5} - System32\Tasks\Microsoft\Windows\WindowsUpdate\RUXIM\PLUGScheduler => "%ProgramFiles%\RUXIM\PLUGscheduler.exe"  (Brak pliku)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Brak pliku]
FF Plugin: @videolan.org/vlc,version=3.0.14 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Brak pliku]
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Brak pliku]
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Brak pliku]
FF Plugin: @videolan.org/vlc,version=3.0.19 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Brak pliku]
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Brak pliku]
FF Plugin: @videolan.org/vlc,version=3.0.21 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Brak pliku]
FF Plugin: @videolan.org/vlc,version=3.0.23 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Brak pliku]
S2 GoogleUpdaterInternalService140.0.7272.0; "C:\Program Files (x86)\Google\GoogleUpdater\140.0.7272.0\updater.exe" --system --windows-service --service=update-internal (Brak pliku)
S2 GoogleUpdaterService140.0.7272.0; "C:\Program Files (x86)\Google\GoogleUpdater\140.0.7272.0\updater.exe" --system --windows-service --service=update (Brak pliku)
S3 LibreOfficeMaintenance; "C:\Program Files\LibreOffice\program\update_service.exe" (Brak pliku)
U3 aswBcc; Brak ImagePath
U3 Avast Business Console Client Antivirus Service; Brak ImagePath
CustomCLSID: HKU\S-1-5-21-3189565095-3199924547-3461014298-1001_Classes\CLSID\{23B3E3D8-C162-4A8B-AB0C-0905DCB1DF19}\InprocServer32 -> C:\Users\dell\AppData\Local\Packages\Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe\TempState\RDP\DVCPlugin\x64\Microsoft.Flow.RPA.Desktop.UIAutomation.RDP.DVC.Plugin.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-3189565095-3199924547-3461014298-1001_Classes\CLSID\{f9517764-05a4-a748-620a-95087d06a241}\localserver32 -> "C:\Program Files\Cloudflare\Cloudflare WARP\Cloudflare WARP.exe" -ToastActivated => Brak pliku
CustomCLSID: HKU\S-1-5-21-3189565095-3199924547-3461014298-1001_Classes\CLSID\{fbcf7bac-3b64-6589-d531-675130a8b3f1}\localserver32 -> "C:\Users\dell\Desktop\HandBrake\HandBrake.exe" -ToastActivated => Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Brak pliku
FirewallRules: [UDP Query User{28105F05-553C-4859-AD76-22E6B80B2FBF}C:\users\dell\appdata\local\temp\scoped_dir9608_2049745005\anydesk.exe] => (Allow) C:\users\dell\appdata\local\temp\scoped_dir9608_2049745005\anydesk.exe => Brak pliku
FirewallRules: [TCP Query User{ACA3D84F-AB66-4C09-845B-C5737CF94BF4}C:\users\dell\appdata\local\temp\scoped_dir9608_2049745005\anydesk.exe] => (Allow) C:\users\dell\appdata\local\temp\scoped_dir9608_2049745005\anydesk.exe => Brak pliku
FirewallRules: [UDP Query User{4AD036F8-FDB0-4F0B-AE77-AE3553CA23B7}C:\program files (x86)\droidcam\droidcamapp.exe] => (Allow) C:\program files (x86)\droidcam\droidcamapp.exe => Brak pliku
FirewallRules: [TCP Query User{146AB268-D2D1-4C31-9E66-861B93A2E732}C:\program files (x86)\droidcam\droidcamapp.exe] => (Allow) C:\program files (x86)\droidcam\droidcamapp.exe => Brak pliku
FirewallRules: [{40AC22A6-D201-469B-96C6-9A85085179C8}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed III\AC3MP.exe => Brak pliku
FirewallRules: [{E50E4DB6-297E-4DE7-A821-3BEC1A20438F}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed III\AC3MP.exe => Brak pliku
FirewallRules: [{CFEEEB2D-5A6F-4307-89C2-7FDAB3606F70}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed III\AC3SP.exe => Brak pliku
FirewallRules: [{2A440778-11EC-4EF8-94EC-8EE123E7F541}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Assassin's Creed III\AC3SP.exe => Brak pliku
FirewallRules: [{510C2697-5ADE-4793-9691-E1BA7A7C7721}] => (Allow) C:\Users\dell\AppData\Local\Temp\7zS284C\HP.EasyStart.exe => Brak pliku
FirewallRules: [{78C1EC5B-5DBD-467D-8AA7-0CE52FC31B1E}] => (Allow) C:\Users\dell\AppData\Local\Temp\7zS7C32\HP.EasyStart.exe => Brak pliku
FirewallRules: [{A1D0BE83-E7BA-4245-9F71-C479A3F669EF}] => (Allow) C:\Users\dell\AppData\Local\Temp\scoped_dir2844_522634331\ultfone-android-system-repair.exe => Brak pliku
FirewallRules: [{CF8073A1-A402-4E4A-9289-A67B9482F1A6}] => (Allow) C:\Users\dell\AppData\Local\Temp\scoped_dir2844_522634331\ultfone-android-system-repair.exe => Brak pliku
FirewallRules: [UDP Query User{4511F651-4869-458E-A5D1-FFE7890F7725}C:\program files\epic games\gtav\gta5.exe] => (Allow) C:\program files\epic games\gtav\gta5.exe => Brak pliku
FirewallRules: [TCP Query User{CC507C01-63E7-4B62-B9C2-8B7902CC4592}C:\program files\epic games\gtav\gta5.exe] => (Allow) C:\program files\epic games\gtav\gta5.exe => Brak pliku
FirewallRules: [UDP Query User{9A1E52D4-FC16-4482-B737-BBF6F4847F8D}C:\users\dell\downloads\kdenlive-22.12.0_standalone\bin\kdenlive.exe] => (Allow) C:\users\dell\downloads\kdenlive-22.12.0_standalone\bin\kdenlive.exe => Brak pliku
FirewallRules: [TCP Query User{5809319C-DE5E-40F9-B15B-5CDF91FE754D}C:\users\dell\downloads\kdenlive-22.12.0_standalone\bin\kdenlive.exe] => (Allow) C:\users\dell\downloads\kdenlive-22.12.0_standalone\bin\kdenlive.exe => Brak pliku
FirewallRules: [UDP Query User{01761214-E652-49D3-8DD5-F3E6F555D7D7}C:\users\dell\appdata\local\programs\opera\78.0.4093.231\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\78.0.4093.231\opera.exe => Brak pliku
FirewallRules: [TCP Query User{8C79AA0F-A430-4F6E-9196-6DBC4113DE7F}C:\users\dell\appdata\local\programs\opera\78.0.4093.231\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\78.0.4093.231\opera.exe => Brak pliku
FirewallRules: [UDP Query User{CC15E3A3-6DE1-49AD-886E-0922E4E0C822}C:\users\dell\appdata\local\programs\opera\78.0.4093.184\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\78.0.4093.184\opera.exe => Brak pliku
FirewallRules: [TCP Query User{6EF954D4-4BDB-4248-95F2-0AF24706D05A}C:\users\dell\appdata\local\programs\opera\78.0.4093.184\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\78.0.4093.184\opera.exe => Brak pliku
FirewallRules: [UDP Query User{D737F751-04C7-4FF8-B929-FE6A458D6D74}C:\users\dell\appdata\local\programs\opera\78.0.4093.147\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\78.0.4093.147\opera.exe => Brak pliku
FirewallRules: [TCP Query User{DE0BDF51-026C-423E-8134-C06BE4546F6B}C:\users\dell\appdata\local\programs\opera\78.0.4093.147\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\78.0.4093.147\opera.exe => Brak pliku
FirewallRules: [UDP Query User{D9E529CA-4F0F-4F3E-9F7D-1475261236F8}C:\users\dell\appdata\local\programs\opera\78.0.4093.147\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\78.0.4093.147\opera.exe => Brak pliku
FirewallRules: [TCP Query User{0939802B-696F-4DC9-A7EC-2B5113606C3C}C:\users\dell\appdata\local\programs\opera\78.0.4093.147\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\78.0.4093.147\opera.exe => Brak pliku
FirewallRules: [UDP Query User{E4C8BC29-A98A-4589-86FC-0EE642E29CCC}C:\users\dell\appdata\local\programs\opera\77.0.4054.277\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\77.0.4054.277\opera.exe => Brak pliku
FirewallRules: [TCP Query User{08AFFB02-FD92-4BDC-91CB-944FA92BB88D}C:\users\dell\appdata\local\programs\opera\77.0.4054.277\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\77.0.4054.277\opera.exe => Brak pliku
FirewallRules: [UDP Query User{E39DCEA1-4D36-4B67-8987-F8FEDA2543A8}C:\users\dell\appdata\local\programs\opera\77.0.4054.254\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\77.0.4054.254\opera.exe => Brak pliku
FirewallRules: [TCP Query User{3B80DE4F-9C67-4C27-9681-471E7451D2CC}C:\users\dell\appdata\local\programs\opera\77.0.4054.254\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\77.0.4054.254\opera.exe => Brak pliku
FirewallRules: [UDP Query User{A19D1FC2-EFEF-4563-BBC6-203F0591BBF0}C:\users\dell\appdata\local\programs\opera\77.0.4054.203\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\77.0.4054.203\opera.exe => Brak pliku
FirewallRules: [TCP Query User{26D8A43E-5705-4D47-A445-9E303F805469}C:\users\dell\appdata\local\programs\opera\77.0.4054.203\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\77.0.4054.203\opera.exe => Brak pliku
FirewallRules: [UDP Query User{8BDDA380-EC2B-44D7-B9E9-65B2BC186C25}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe => Brak pliku
FirewallRules: [TCP Query User{E021CF3B-FBC1-4BE2-B7E1-C34E4E6A0630}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe => Brak pliku
FirewallRules: [UDP Query User{4E6A7FE7-0888-4F1E-AC51-D5786E67F18C}C:\users\dell\appdata\local\programs\opera\77.0.4054.172\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\77.0.4054.172\opera.exe => Brak pliku
FirewallRules: [TCP Query User{7F0BC222-13DD-46F5-B62F-0D482D25196E}C:\users\dell\appdata\local\programs\opera\77.0.4054.172\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\77.0.4054.172\opera.exe => Brak pliku
FirewallRules: [UDP Query User{DBDD2375-1859-4F4B-ADEA-4CE73636F56F}C:\users\dell\appdata\local\programs\opera\77.0.4054.146\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\77.0.4054.146\opera.exe => Brak pliku
FirewallRules: [TCP Query User{485132B5-5721-4FEA-BC99-8018B57EC890}C:\users\dell\appdata\local\programs\opera\77.0.4054.146\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\77.0.4054.146\opera.exe => Brak pliku
FirewallRules: [UDP Query User{24B12912-F9E4-4D88-83AD-30D6B0E4CC19}C:\users\dell\appdata\local\programs\opera\77.0.4054.90\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\77.0.4054.90\opera.exe => Brak pliku
FirewallRules: [TCP Query User{90311A5E-79B5-4E6B-BDB8-9E402D72136D}C:\users\dell\appdata\local\programs\opera\77.0.4054.90\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\77.0.4054.90\opera.exe => Brak pliku
FirewallRules: [UDP Query User{561E9A0D-4179-47FA-A5F3-33AE6921587A}C:\users\dell\appdata\local\programs\opera\77.0.4054.64\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\77.0.4054.64\opera.exe => Brak pliku
FirewallRules: [TCP Query User{D95D52A0-288A-4688-A7B9-9E3F78398822}C:\users\dell\appdata\local\programs\opera\77.0.4054.64\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\77.0.4054.64\opera.exe => Brak pliku
FirewallRules: [UDP Query User{220B98D2-83ED-492E-84FB-65D14F9340C8}C:\users\dell\appdata\local\programs\opera\76.0.4017.177\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\76.0.4017.177\opera.exe => Brak pliku
FirewallRules: [TCP Query User{3E46B625-A009-4EA0-A860-E1DD57A6BC7B}C:\users\dell\appdata\local\programs\opera\76.0.4017.177\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\76.0.4017.177\opera.exe => Brak pliku
FirewallRules: [UDP Query User{E49D1F4F-7A77-4177-8EA7-2A8F0B58802A}C:\users\dell\appdata\local\programs\opera\76.0.4017.175\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\76.0.4017.175\opera.exe => Brak pliku
FirewallRules: [TCP Query User{16E7C357-3118-4069-BDC8-0C45AFC10939}C:\users\dell\appdata\local\programs\opera\76.0.4017.175\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\76.0.4017.175\opera.exe => Brak pliku
FirewallRules: [UDP Query User{C06BBEE9-A77C-4560-AA3C-F3866A5E39A7}C:\users\dell\appdata\local\programs\opera\76.0.4017.154\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\76.0.4017.154\opera.exe => Brak pliku
FirewallRules: [TCP Query User{28F2A2C2-E320-4BA6-9FA8-C782BB3D84E9}C:\users\dell\appdata\local\programs\opera\76.0.4017.154\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\76.0.4017.154\opera.exe => Brak pliku
FirewallRules: [UDP Query User{F801632F-168C-455B-BC5F-8F6CD6164847}C:\users\dell\appdata\local\programs\opera\76.0.4017.123\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\76.0.4017.123\opera.exe => Brak pliku
FirewallRules: [TCP Query User{5C26D355-3B80-4CBD-9CFE-4646E6E0F4EB}C:\users\dell\appdata\local\programs\opera\76.0.4017.123\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\76.0.4017.123\opera.exe => Brak pliku
FirewallRules: [UDP Query User{B4B16397-F961-437F-9E15-06E6EEE445AB}C:\users\dell\appdata\local\programs\opera\76.0.4017.107\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\76.0.4017.107\opera.exe => Brak pliku
FirewallRules: [TCP Query User{22C1C151-AA01-43F0-B460-83ED9A210964}C:\users\dell\appdata\local\programs\opera\76.0.4017.107\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\76.0.4017.107\opera.exe => Brak pliku
FirewallRules: [UDP Query User{0A621F5C-B6EA-4DC5-97BE-D92A859C0C83}C:\users\dell\appdata\local\programs\opera\76.0.4017.94\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\76.0.4017.94\opera.exe => Brak pliku
FirewallRules: [TCP Query User{B4E232D3-9681-401D-91DE-D612D4917062}C:\users\dell\appdata\local\programs\opera\76.0.4017.94\opera.exe] => (Block) C:\users\dell\appdata\local\programs\opera\76.0.4017.94\opera.exe => Brak pliku
C:\Users\dell\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blender\Blender 4.4.lnk
EmptyTemp:
End::

 

Fixlist przeznaczona tylko dla autora tematu!

W FRST kliknij opcję "Napraw" (Fix). Pokaż raport  "fixlog.txt", który otrzymasz po restarcie komputera. Pobierz dodatkowo "Malwaresbytes" . Przeskanuj nim komputer, usuń, jeśli coś zostanie jeszcze wykryte i pokaż raport. Pobierz też darmowy "ADWCleaner" i tak samo, skanowanie,  pokaż raport z usuwania.

Dodatkowo problemy aplikacją od DELL i Libre Office:

1. Napraw lub wyłącz usługę "Dell Data Vault" — przeinstaluj "Dell SupportAssist" albo ustaw usługi DDV na „Wyłączony" w services.msc (błąd nie jest krytyczny).
2. Napraw usługę "LibreOffice" — przeinstaluj "LibreOffice" (naprawa) lub wyłącz usługę w services.msc.