CloseProcesses:
CreateRestorePoint:
EmptyTemp:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
VirusTotal: C:\Program Files\wufuc\wufuc.dll
Folder: C:\Program Files\wufuc
CHR HomePage: Default -> hxxp://www.funnysearching.com/
2018-03-04 11:25 - 2018-03-04 11:25 - 000000008 __RSH C:\ProgramData\ntuser.pol
2018-02-25 10:04 - 2018-03-04 11:25 - 000000008 __RSH C:\Users\Wojtek\ntuser.pol
Task: {C48A5C41-5BDB-4B8D-87F9-91A4875E1A0A} - System32\Tasks\wufuc.{72EEE38B-9997-42BD-85D3-2DD96DA17307} => C:\Windows\system32\rundll32.exe "C:\Program Files\wufuc\wufuc.dll",Rundll32Entry
C:\Users\Wojtek\AppData\Local\Microsoft\Start Menu\Вoйти в Интeрнeт.lnk
AlternateDataStreams: C:\Users\Public\AppData:CSM [470]
C:\Users\Wojtek\Favorites\Links\Интернет.url