CloseProcesses:
CreateRestorePoint:
EmptyTemp:
VirusTotal: C:\Users\hp\AppData\Local\Temp\mnyBFE5.exe
HKU\S-1-5-21-3423501774-1342951798-379999027-1000\...\MountPoints2: {4ca48b1d-eff4-11e7-8428-028037ec0200} - E:\HiSuiteDownLoader.exe
HKU\S-1-5-21-3423501774-1342951798-379999027-1000\...\MountPoints2: {7b8c0c3f-8942-11e6-81df-028037ec0200} - G:\setup.exe
Startup: C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MassPlanner.lnk [2017-05-21]
ShortcutTarget: MassPlanner.lnk -> C:\Users\hp\AppData\Roaming\MassPlanner2\MassPlannerNew.exe (Brak pliku)
Startup: C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MassPlanner2.lnk [2017-05-07]
ShortcutTarget: MassPlanner2.lnk -> C:\Users\hp\AppData\Roaming\MassPlanner2\MassPlannerNew.exe (Brak pliku)
GroupPolicy: Ograniczenia ? <==== UWAGA
Tcpip\..\Interfaces\{4573ED88-27DF-4F19-B58E-AA1BA6C27686}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{460A1A35-0EC6-4A10-8CA0-99E8BF486206}: [DhcpNameServer] 195.189.32.34 195.189.32.3 192.168.1.1
Tcpip\..\Interfaces\{52581186-9C1D-4087-B617-2393A5A8DB25}: [DhcpNameServer] 192.168.2.1 193.106.244.10 193.106.244.20
Tcpip\..\Interfaces\{6354A037-7686-4EB3-8E5A-EDA2B11F41A7}: [DhcpNameServer] 192.168.42.129
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
CHR HKU\S-1-5-21-3423501774-1342951798-379999027-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
S2 HuaweiHiSuiteService64.exe; "C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe" -/service [X]
S3 dbx; system32\DRIVERS\dbx.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
2017-11-20 19:48 - 2018-07-16 22:07 - 000000075 _____ () C:\Users\hp\AppData\Local\Temp\2ffae468be78c0fe62b06fd33651ec58.dll
2017-11-20 19:47 - 2017-11-20 19:47 - 000000180 _____ () C:\Users\hp\AppData\Local\Temp\7230fefd864f35e6569012bef46d88ae.dll
2018-05-11 18:55 - 2018-05-11 18:37 - 001626328 _____ (CyberGhost S.A.) C:\Users\hp\AppData\Local\Temp\8d96215a-c4ea-4c7e-b3e4-ec20c3307d75.exe
2018-05-11 18:37 - 2018-05-11 18:37 - 001626328 _____ (CyberGhost S.A.) C:\Users\hp\AppData\Local\Temp\cg.exe
2017-12-25 12:03 - 2010-02-22 16:56 - 000145264 _____ (Microsoft(R) Corporation) C:\Users\hp\AppData\Local\Temp\mnyBFE5.exe
2017-05-16 07:43 - 2017-05-16 07:43 - 057906656 _____ (Skype Technologies S.A.) C:\Users\hp\AppData\Local\Temp\SkypeSetup.exe
Task: {4710D6FB-2297-4063-B69A-19DDA59DF578} - System32\Tasks\{3F437C39-4102-4CB8-8A08-1AD0F640BA0B} => C:\Windows\system32\pcalua.exe -a C:\Users\hp\Downloads\USMoneyDlxSunset.exe -d C:\Users\hp\Downloads
Task: {774C7CF9-EBEF-452F-9F5A-F5619E8EF1B9} - System32\Tasks\{4528FFEF-FAC8-43DC-AE8D-90EFFE0210C1} => C:\Windows\system32\pcalua.exe -a C:\Users\hp\Downloads\sp66217.exe -d C:\Users\hp\Downloads
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio\OBS Studio (32bit).lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio\OBS Studio (64bit).lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio\Uninstall.lnk
C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MassPlanner.lnk
C:\Users\hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MassPlanner2.lnk