CloseProcesses: CreateRestorePoint: EmptyTemp: HKU\S-1-5-21-2132564808-1856626862-1006256512-1000\...\MountPoints2: E - "E:\AutoRun.exe" HKU\S-1-5-21-2132564808-1856626862-1006256512-1000\...\MountPoints2: {17935329-17ef-11e8-b1dd-d69ba25d0c19} - "H:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2132564808-1856626862-1006256512-1000\...\MountPoints2: {617f8308-8540-11e8-b238-001999b24905} - "E:\AutoRun.exe" HKU\S-1-5-21-2132564808-1856626862-1006256512-1000\...\MountPoints2: {9f76aab4-6cb5-11e8-b22c-92e26c455190} - "E:\AutoRun.exe" S4 EasyAntiCheatSys; Brak ImagePath S3 cpuz136; \??\C:\WINDOWS\TEMP\cpuz136\cpuz136_x64.sys [X] S3 GPUZ; \??\C:\WINDOWS\TEMP\GPUZ.sys [X] U3 idsvc; Brak ImagePath ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku Task: {021D6BDB-EE5D-45C5-B5F2-0E4F3944A2D3} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe Task: {030A98C4-9798-47F8-8D27-C3136771A858} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe Task: {060FD7A2-7F81-4798-AF3F-5EDA37B2FD09} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {1DF3D11C-012C-491A-8226-9AEFFD107E3F} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {24D3AF1A-2CD1-4904-9FB1-89974BA23CE7} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe Task: {2F90F8D4-9525-4B62-A974-F9CAF86EAB85} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {4FEA3CFB-0DD4-432D-B335-D588BB5FD76A} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe Task: {51121B9E-F037-4D2B-821E-2D16FD4A40BB} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe Task: {5B217906-A729-4B38-8248-6A205D74798A} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe Task: {5E890940-3676-4DF8-B28E-807D9FDE4832} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe Task: {619B6E85-CB26-4BDA-97A9-07F500FDE189} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe Task: {6305E5D2-D35D-463D-85B0-C9698B055437} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {68F20002-12A3-4568-9218-B6580FFCBAA4} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {72BAD357-80F6-42B2-9553-3C1A297A846E} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe Task: {7533DB9B-BC51-4031-BAC8-083676BAC2E2} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe Task: {9BF8F3DC-7F31-4CF7-8930-2E22FDF533F9} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {A17077DC-651C-41FF-AB24-7F531546DAEE} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {A6221B23-39B3-46A1-844D-B24F0E655D8E} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {A9EB7AA4-C338-4E95-8917-9B5897E4CA68} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe Task: {CB4DBC15-898B-4311-B78E-D8F9A1538E35} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {CE6E0C05-261D-4E27-8C59-19BBBD30825C} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe AlternateDataStreams: C:\Users\Public\AppData:CSM [480] AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [484] Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"} CMD: ipconfig /flushdns