CloseProcesses: CreateRestorePoint: EmptyTemp: HKLM-x32\...\Run: [LManager] => [X] HKLM-x32\...\Run: [] => [X] Winlogon\Notify\igfxcui: igfxdev.dll [X] HKU\S-1-5-21-2800467092-1565473494-1444545960-1001\...\Policies\Explorer: [] HKU\S-1-5-21-2800467092-1565473494-1444545960-1001\...\MountPoints2: F - "F:\MoWAS_Setup.exe" HKU\S-1-5-21-2800467092-1565473494-1444545960-1001\...\MountPoints2: {02537b28-b36c-11e7-bef9-20898483a7ea} - "F:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2800467092-1565473494-1444545960-1001\...\MountPoints2: {02537b3f-b36c-11e7-bef9-20898483a7ea} - "F:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2800467092-1565473494-1444545960-1001\...\MountPoints2: {02537b81-b36c-11e7-bef9-20898483a7ea} - "F:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2800467092-1565473494-1444545960-1001\...\MountPoints2: {2a1e2cef-7e94-11e7-bef2-20898483a7ea} - "J:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2800467092-1565473494-1444545960-1001\...\MountPoints2: {2a1e2d26-7e94-11e7-bef2-20898483a7ea} - "J:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2800467092-1565473494-1444545960-1001\...\MountPoints2: {2a1e2d77-7e94-11e7-bef2-20898483a7ea} - "J:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2800467092-1565473494-1444545960-1001\...\MountPoints2: {3602c713-0bdc-11e7-bed8-20898483a7ea} - "J:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2800467092-1565473494-1444545960-1001\...\MountPoints2: {6b939981-4493-11e7-bee7-20898483a7ea} - "J:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2800467092-1565473494-1444545960-1001\...\MountPoints2: {7b84f19a-e1c1-11e7-bf03-20898483a7ea} - "I:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2800467092-1565473494-1444545960-1001\...\MountPoints2: {bab77def-2fdd-11e7-bedf-20898483a7ea} - "G:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2800467092-1565473494-1444545960-1001\...\MountPoints2: {bab77df6-2fdd-11e7-bedf-20898483a7ea} - "G:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2800467092-1565473494-1444545960-1001\...\MountPoints2: {c2fd5dd0-4ddf-11e8-bf36-20898483a7ea} - "I:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2800467092-1565473494-1444545960-1001\...\MountPoints2: {c498abcb-6aab-11e5-be76-20898483a7ea} - "G:\AutoRun.exe" HKU\S-1-5-21-2800467092-1565473494-1444545960-1001\...\MountPoints2: {ca852129-3673-11e7-bee3-20898483a7ea} - "F:\MoWAS_Setup.exe" HKU\S-1-5-21-2800467092-1565473494-1444545960-1001\...\MountPoints2: {eec67379-bb28-11e6-becc-20898483a7ea} - "F:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2800467092-1565473494-1444545960-1001\...\MountPoints2: {feb46b26-1c61-11e8-bf1f-806e6f6e6963} - "I:\HiSuiteDownLoader.exe" HKU\S-1-5-18\...\Run: [] => [X] BootExecute: autocheck autochk * SearchScopes: HKU\S-1-5-21-2800467092-1565473494-1444545960-1001 -> DefaultScope {FE9ED37F-2686-4346-A155-192D2C4C292F} URL = SearchScopes: HKU\S-1-5-21-2800467092-1565473494-1444545960-1001 -> {FE9ED37F-2686-4346-A155-192D2C4C292F} URL = FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => nie znaleziono CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx S3 Steam Client Service; "C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService [X] Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x64 Hosting Support - PTB (HKLM\...\{E237254B-36A1-3D27-815E-B37C13BE0796}) (Version: 11.0.51108 - Microsoft Corporation) Hidden Pacote de Idiomas do Microsoft Visual Studio Tools for Applications 2012 x86 Hosting Support - PTB (HKLM-x32\...\{03077B58-6ACF-32CA-B42A-EAA458C295A1}) (Version: 11.0.51108 - Microsoft Corporation) Hidden Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x64) - RUS (HKLM\...\{25FB53C5-BE4C-3B6C-A0C9-D49A39227E1E}) (Version: 11.0.51108 - Microsoft Corporation) Hidden Языковой пакет для поддержки размещения набора средств Microsoft Visual Studio Tools для работы с приложениями 2012 (x86) - RUS (HKLM-x32\...\{68DC347D-C1C0-3DE2-A53E-CCC71DA53E57}) (Version: 11.0.51108 - Microsoft Corporation) Hidden ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll -> Brak pliku Task: {014D9A28-B6E5-4805-A4A0-4D172836D379} - System32\Tasks\{DC3F0740-9BA3-4722-8AAD-0636C5711096} => C:\WINDOWS\system32\pcalua.exe -a H:\AutoStarter.exe -d H:\ Task: {0AA67CA7-757A-498D-9824-C265A40DC587} - System32\Tasks\{6F62EF9F-BE49-4140-8F96-23DB19710D3D} => C:\WINDOWS\system32\pcalua.exe -a C:\WARHAMMERRRRRR\AutoStarter.exe -d C:\WARHAMMERRRRRR Task: {3C3CC471-1C90-4233-BD98-A6840954141A} - System32\Tasks\{8093E272-9278-4213-A85D-760581FFB6CE} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.33.0.105&LastError=-3 Task: {528A93F5-87EE-438C-B1FC-7A4DD485FE5C} - System32\Tasks\{54D36743-0042-4BB8-BACD-83F363369F8B} => C:\WINDOWS\system32\pcalua.exe -a "D:\WARHAMMER GRA\Warhammer.exe" -d "D:\WARHAMMER GRA" Task: {5DA726D4-C253-4AF2-9964-D040C047F165} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-04] (Google Inc.) Task: {6A268486-4315-4321-B91E-53DF5860A152} - System32\Tasks\{5186D520-C6DF-4CFF-94B1-87D6C484C546} => C:\WINDOWS\system32\pcalua.exe -a "C:\Users\Paulina Sędłak\Desktop\warhammer install\AutoStarter.exe" -d "C:\Users\Paulina Sędłak\Desktop\warhammer install" Task: {847BA164-3FD2-4BC2-9F47-A2CFFAF30723} - System32\Tasks\SafeZone scheduled Autoupdate 1458999572 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-08-04] (Avast Software) Task: {88E2EFFF-6593-4058-8D8C-4AE48A79F264} - System32\Tasks\{93A68565-000F-49EF-BEA0-EDC88C27F34A} => C:\WINDOWS\system32\pcalua.exe -a D:\Warhamer\AutoStarter.exe -d D:\Warhamer AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`28hfm [0] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPlayCity.com\MyPlayCity Games.lnk C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPlayCity.com\Play Online Games.lnk C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Media Center\Media Center Programs\Company of Heroes.lnk C:\Users\kryst_000\Documents\Corel\Próbki CorelDRAW X7\target.lnk C:\Users\Paulina Sędłak\Documents\Corel\Próbki CorelDRAW X7\target.lnk C:\Users\Paulina Sędłak\Documents\Corel\Próbki Corel PHOTO-PAINT X7\target.lnk C:\Users\Paulina Sędłak\Documents\Corel\Próbki Corel PHOTO-PAINT 2017\target.lnk C:\Users\Paulina Sędłak\Desktop\Paulina\Studia\Kętrzyn\ketrzyn_1_5000_A0_300dpi — skrót.lnk C:\Users\Paulina Sędłak\Desktop\Paulina\Studia\Corel\CorelDRAW X7 (64-Bit).lnk C:\Users\Paulina Sędłak\Desktop\Dziwne rzeczy z pulpitu\CCleaner.lnk C:\Users\Paulina Sędłak\Desktop\Dziwne rzeczy z pulpitu\WildTangent Games App - acer.lnk C:\Users\Paulina Sędłak\Desktop\Dziwne rzeczy z pulpitu\Gry\Fishao Online.lnk C:\Users\Paulina Sędłak\Desktop\Dziwne rzeczy z pulpitu\Gry\Men of War Assault Squad 2 - Men of War Origins.lnk C:\Users\Paulina Sędłak\Desktop\Dziwne rzeczy z pulpitu\Gry\My Free Mahjong.lnk C:\Users\Paulina Sędłak\Desktop\Dziwne rzeczy z pulpitu\Gry\MyPlayCity Games.lnk C:\Users\Paulina Sędłak\Desktop\Dziwne rzeczy z pulpitu\Gry\Play Online Games.lnk C:\Users\Paulina Sędłak\Desktop\Dziwne rzeczy z pulpitu\Corel\Corel Font Manager 2017 (64-Bit).lnk C:\Users\Paulina Sędłak\AppData\Roaming\Microsoft\Windows\Start Menu\MyPlayCity Games.lnk C:\Users\Paulina Sędłak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk C:\Users\Paulina Sędłak\AppData\Roaming\Microsoft\Windows\SendTo\Android (ALLPlayer Pilot).lnk