CloseProcesses:
CreateRestorePoint:
EmptyTemp:
HKU\S-1-5-21-3420617040-1382493334-3915288559-1001\...\Run: [AvastBrowserAutoLaunch_25CF12E9430ED1DA739838613314812E] => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [1808504 2019-06-11] (AVAST Software s.r.o. -> AVAST Software)
HKU\S-1-5-21-3420617040-1382493334-3915288559-1001\...\MountPoints2: {c7adbade-7668-11e9-8b1c-74c63b4b0450} - "F:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-3420617040-1382493334-3915288559-1001\...\MountPoints2: {ea4cb5e7-f59e-11e8-8af0-3497f669f2d4} - "F:\HiSuiteDownLoader.exe" 
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\75.0.1447.81\Installer\chrmstp.exe [2019-07-03] (AVAST Software s.r.o. -> AVAST Software)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
Task: {EAE494F9-2EC3-4A69-B1C0-83D19DF55562} - \Microsoft\Windows\UNP\RunCampaignManager -> Brak pliku <==== UWAGA
Tcpip\..\Interfaces\{16ef3e6c-062a-498c-a259-2b4f0bf95d1d}: [DhcpNameServer] 172.23.0.1 172.23.0.2
Tcpip\..\Interfaces\{8cdcb0d5-15e8-49d7-a15c-3f3ab9142e8c}: [DhcpNameServer] 192.168.8.1 192.168.8.1
HKU\S-1-5-21-3420617040-1382493334-3915288559-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus15.msn.com/?pc=ASTE
HKU\S-1-5-21-3420617040-1382493334-3915288559-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus15.msn.com/?pc=ASTE
SearchScopes: HKU\S-1-5-21-3420617040-1382493334-3915288559-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3420617040-1382493334-3915288559-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Brak pliku]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Brak pliku]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
2016-12-24 23:25 - 2019-07-17 21:56 - 000000184 _____ () C:\Users\Karolina\AppData\Roaming\sp_data.sys
2018-12-08 00:14 - 2018-12-08 00:14 - 000002129 _____ () C:\Users\Karolina\AppData\Local\recently-used.xbel
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Brak pliku
AlternateDataStreams: C:\Users\Public\AppData:CSM [472]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS\ASUS Install.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS\eManual.Lnk
C:\Users\Karolina\Documents\Euro Truck Simulator 2\readme.rtf.lnk
C:\Users\Karolina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitTorrent Web.lnk
C:\Users\Karolina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Przeglądarka Opera.lnk
C:\Users\Karolina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\uTorrent Web.lnk
C:\Users\Karolina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk
C:\Users\Karolina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Uninstall.lnk
C:\Users\Karolina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Przeglądarka Opera.lnk
C:\Users\Karolina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7634a48803fa655b\ASUS GIFTBOX.lnk
C:\Users\Karolina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\4fbc2e5e98f39d18\ASUS GIFTBOX.lnk