Wyskakujące okienko cmd.exe Win 8.1

[Bartek1212]

Witam
Podczas ładowania systemu wyskakuje okienko cmd.exe i niestety jestem unieruchomiony 
Pulpit wyskakuje tylko po tym jak wpiszę explorer.exe
w załączniku wstawiłem pliki z FRST
z góry dziękuje za pomoc 

Shortcut.txt FRST.txt Addition.txt

[jessica]

Jest infekcja SOUNDMODULE!

 

1) Spróbuj odinstalować progran

ByteFence Anti-Malware (HKLM-x32\...\ByteFence) (Version: 5.5.0.1 - Byte Technologies LLC) <==== UWAGA

 

2)

....

[Bartek1212]

Okey, jest możliwość aby to jakoś usunąć ?

[jessica]

za wcześnie odpowiedziałeś wróć najpierw do mojego poprzedniego postu, a ja zaraz podam tu, w tym poście dalsze usuwanie

 

Uruchom FRST. Na klawiaturze naciśnij jednocześnie CTRL+Y.
Otworzy się Notatnik - wklej do niego:

Spoiler

HKU\S-1-5-21-968159076-530178348-4023363429-1001\...\Winlogon: [Shell] %comspec% <==== UWAGA
HKU\S-1-5-21-968159076-530178348-4023363429-1001\...\Command Processor: @mode 20,5 & tasklist /FI "IMAGENAME eq SoundModule.exe" 2>NUL | find /I /N "SoundModule.exe">NUL && exit & if exist ( start /MIN "" & tasklist /FI "IMAGENAME eq explorer.exe" 2>NUL | find /I /N "explorer.exe">NUL && exit & explorer.exe & exit ) else ( tasklist /FI "IMAGENAME eq explorer.exe" 2>NUL | find /I /N "explorer.exe">NUL && exit & explorer.exe & exit ) <==== UWAGA
Task: {A5697C56-41F5-402B-97CE-5A6A972322F5} - System32\Tasks\ByteFence => C:\Program Files\ByteFence\ByteFence.exe [3917128 2019-11-20] (Byte Technologies LLC -> Byte Technologies LLC) <==== UWAGA
RemoveDirectory: C:\Program Files\ByteFence
R2 ByteFenceService; C:\Program Files\ByteFence\ByteFenceService.exe [160584 2019-11-20] (Byte Technologies LLC -> Byte Technologies LLC) <==== UWAGA
R2 rtop; c:\program files\bytefence\rtop\bin\rtop_svc.exe [297288 2019-12-02] (Byte Technologies LLC -> Byte Technologies LLC.) <==== UWAGA
2019-12-02 10:06 - 2019-12-02 10:06 - 000001041 _____ C:\Users\Kamil\Desktop\ByteFence Anti-Malware.lnk
2019-12-02 10:06 - 2019-12-02 10:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ByteFence Anti-Malware
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ByteFence
DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ByteFence
HOSTS:
Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"}
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
Task: {E61C4C3C-7354-4184-B6DB-4004358CE7EB} - System32\Tasks\Microsoft\Windows\Maintenance\InstallWinSAT => C:\Windows\system32\Maintenance.vbs [1131 2018-07-21] () [Brak podpisu cyfrowego]
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> A:\bin\ssv.dll => Brak pliku
HKU\S-1-5-21-968159076-530178348-4023363429-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.global-pl.com/
HKU\S-1-5-21-968159076-530178348-4023363429-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
SearchScopes: HKU\S-1-5-21-968159076-530178348-4023363429-1001 -> DefaultScope {19FB89A4-9E8A-44F5-8046-CED817A05382} URL = hxxp://www.global-pl.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-968159076-530178348-4023363429-1001 -> {19FB89A4-9E8A-44F5-8046-CED817A05382} URL = hxxp://www.global-pl.com/search?q={searchTerms}
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll [2012-02-13] (Microsoft Corporation -> Microsoft Corporation.)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.1.362.0\BingExt.dll [2012-02-13] (Microsoft Corporation -> Microsoft Corporation.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> A:\bin\dtplugin\npDeployJava1.dll [Brak pliku]
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> A:\bin\plugin2\npjp2.dll [Brak pliku]
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [X]
S2 GamingApp_Service; "D:\Gaming APP\GamingApp_Service.exe" [X]
S2 GamingHotkey_Service; D:\Gaming APP\GamingHotkey_Service.exe [X]
S3 NTIOLib_MBAPI; \??\D:\Gaming APP\Lib\NTIOLib_X64.sys [X]
FirewallRules: [TCP Query User{BEEF588C-28C3-4016-99A0-B3A68B4B61B2}C:\users\kamil\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\kamil\appdata\local\mycomgames\mycomgames.exe Brak pliku
FirewallRules: [UDP Query User{4D589828-8706-4E7D-933A-C5CEF6E1BAB4}C:\users\kamil\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\kamil\appdata\local\mycomgames\mycomgames.exe Brak pliku
FirewallRules: [{D431779C-FA34-4F57-B77F-C9BE6802808C}] => (Block) C:\users\kamil\appdata\local\mycomgames\mycomgames.exe Brak pliku
FirewallRules: [{C988A2C4-75C8-46E8-A0DD-721D9910F935}] => (Block) C:\users\kamil\appdata\local\mycomgames\mycomgames.exe Brak pliku
FirewallRules: [{6333CD2F-CA06-4DAB-B80E-B21DD09535C3}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin_LE\TS4.exe Brak pliku
FirewallRules: [{71E4C671-FD0E-4C8B-9855-1B246AAB7AD3}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin_LE\TS4.exe Brak pliku
FirewallRules: [{E916B9B7-FB62-4298-B63F-062306AD0D3C}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe Brak pliku
FirewallRules: [{5BCDD3A3-0AB6-466B-843E-2145AE94EDBF}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe Brak pliku
EmptyTemp:

Na klawiaturze naciśnij jednocześnie CTRL+S.
W FRST kliknij na Fix (NAPRAW).

 

Albo zrób nowe logi FRST, albo napisz, czy problem znikł?

 

jessi

[Bartek1212]

ByteFence Anti-Malware odinstalowane 

[Bartek1212]

Problem znikł , dziękuje bardzo za pomoc
Pozdrawiam