CloseProcesses: CreateRestorePoint: EmptyTemp: ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => -> Brak pliku ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => -> Brak pliku ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => -> Brak pliku ShellIconOverlayIdentifiers-x32: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => -> Brak pliku AlternateDataStreams: C:\Users\Tomasz\Desktop\orz1.jpeg:3or4kl4x13tuuug3Byamue2s4b [85] AlternateDataStreams: C:\Users\Tomasz\Desktop\orz1.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Tomasz\Desktop\orz2.jpeg:3or4kl4x13tuuug3Byamue2s4b [85] AlternateDataStreams: C:\Users\Tomasz\Desktop\orz2.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Tomasz\Desktop\orz3.jpeg:3or4kl4x13tuuug3Byamue2s4b [85] AlternateDataStreams: C:\Users\Tomasz\Desktop\orz3.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] FirewallRules: [{F01E310C-354F-4CE8-8833-F06C6768C957}] => (Allow) %LocalAppData%\HPConnectedMusic\Application\spotify_helper.exe Brak pliku FirewallRules: [{89944405-1AB3-4D8A-931D-719C821A0E0C}] => (Allow) %LocalAppData%\HPConnectedMusic\Application\spotify_helper.exe Brak pliku FirewallRules: [{24610DF3-96ED-4CE4-A7A4-9A197009FB7B}] => (Allow) %LocalAppData%\HPConnectedMusic\Application\HPConnectedMusic.exe Brak pliku FirewallRules: [{46FC1159-F6D1-437B-BD37-CB35F4E1A1E1}] => (Allow) %LocalAppData%\HPConnectedMusic\Application\HPConnectedMusic.exe Brak pliku FirewallRules: [{9564E98A-634E-42B7-A346-19C31265A693}] => (Allow) C:\Users\Administrator\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe Brak pliku HKLM\...\Run: [NortonSupport] => "C:\Program Files\Norton Security\Engine\22.17.2.46\symerr.exe" /supportreboot HKLM-x32\...\Run: [] => [X] HKU\S-1-5-21-491584586-2121166311-210182509-1002\...\Run: [Norton Download Manager{NIS2250215-SHPD-FSD51083}] => C:\Users\Public\Downloads\Norton\{NIS2250215-SHPD-FSD51083}\FSDUI_Custom.exe /m /SHOWONECLICK /WIN10_UPGRADE "C:\Users\Tomasz\AppData\Local\Temp\{002BFFA3-2AC3-4739-9A1B-988DC4D55820}\Upgrade.exe" <==== UWAGA HKU\S-1-5-21-491584586-2121166311-210182509-1002\...\Run: [BingSvc] => C:\Users\Tomasz\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2016-04-12] (Microsoft Corporation -> © 2015 Microsoft Corporation) HKU\S-1-5-21-491584586-2121166311-210182509-1002\...\Run: [Norton Download Manager{NS2210085-SHPD-FSD510041}] => C:\Users\Tomasz\AppData\Local\Temp\{B5991D1A-A295-46A4-9EB8-31BB4E9C3C1A}\Upgrade.exe [2225296 2019-05-25] (Symantec Corporation -> Symantec Corporation) <==== UWAGA HKU\S-1-5-21-491584586-2121166311-210182509-1002\...\MountPoints2: {168817a2-0185-11e8-bef0-0c5b8f279a64} - "G:\SISetup.exe" HKU\S-1-5-21-491584586-2121166311-210182509-1002\...\MountPoints2: {25b06ec8-3e8b-11e9-bf39-a0481c1f9ee4} - "H:\AutoRun.exe" HKU\S-1-5-21-491584586-2121166311-210182509-1002\...\MountPoints2: {e41c5719-fad6-11e7-8562-a0481c1f9ee4} - "F:\AutoRun.exe" Task: {00B8FF85-D2A3-4C05-BFA1-4E6943E974FB} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Brak pliku <==== UWAGA Task: {1853C778-D3DF-465F-A3B0-4B8F8C3C6A92} - System32\Tasks\Norton Security\Norton Security Error Analyzer => C:\Program Files\Norton Security\Engine\22.17.2.46\SymErr.exe Task: {29632935-30A4-4C6F-91F7-77737DA8FD72} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Brak pliku <==== UWAGA Task: {3C97D573-0F79-44C8-87CB-28A945E2BC67} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Brak pliku <==== UWAGA Task: {48B2A01B-EDCD-44AD-8DC6-9711AD487804} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Brak pliku <==== UWAGA Task: {4E51DF07-31A7-4042-968C-A1120E1CABAC} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.6.0.27\SymErr.exe Task: {5887A7C2-5836-4ABB-A9EC-7E032025617B} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Brak pliku <==== UWAGA Task: {74C9DBEB-8E8A-4430-B27C-10FE4441F80D} - System32\Tasks\Norton Security\Norton Security Error Processor => C:\Program Files\Norton Security\Engine\22.17.2.46\SymErr.exe Task: {760969E3-38FC-4A77-964B-DAAF3CFABE6A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Brak pliku <==== UWAGA Task: {840AD075-937B-43EC-98D4-F91D1942CDD4} - System32\Tasks\Norton Security\Norton Security Autofix => C:\Program Files\Norton Security\Engine\22.17.2.46\SymErr.exe Task: {860226E2-9008-4982-A2D6-9D8424A936BE} - \WPD\SqmUpload_S-1-5-21-491584586-2121166311-210182509-1002 -> Brak pliku <==== UWAGA Task: {90E42A0D-3483-445F-81E5-AE04DF5D7133} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Brak pliku <==== UWAGA Task: {96F69543-45D0-43FE-B2A9-A135ACC9E9FC} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.6.0.27\SymErr.exe Task: {BB8ACBAC-128A-4578-AF15-5B0C5CE36612} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Brak pliku <==== UWAGA Task: {CA03A2C0-CEAC-4E46-B8EF-7E16AECE94CA} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Brak pliku <==== UWAGA Task: {D5D6CB58-F054-407C-AE97-F7E448239AB4} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Brak pliku <==== UWAGA Task: {E2E6F4C6-E68D-4286-9583-8CA152DEF9C0} - \Microsoft\Windows\UNP\RunCampaignManager -> Brak pliku <==== UWAGA Task: {F30E9397-B3FB-4184-904A-C870AC4D9ACF} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Brak pliku <==== UWAGA Task: {FF20BA56-BFD3-481B-A711-D16ECD4E8177} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Brak pliku <==== UWAGA Tcpip\..\Interfaces\{2e7ffa8c-1f78-4a2c-b573-ee7c4b192ac3}: [DhcpNameServer] 192.168.8.1 192.168.8.1 Tcpip\..\Interfaces\{9e96ebe2-7db1-4ecc-b71c-b0258a452250}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{c45c7e02-d1e1-4a50-a7e9-591ab5a7871d}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{ca9d45d4-7d77-4442-bd69-3baf1b31ad9f}: [DhcpNameServer] 192.168.8.1 192.168.8.1 Tcpip\..\Interfaces\{e1feb4e2-8d7d-4286-8945-38a5b5a67141}: [NameServer] 8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{e1feb4e2-8d7d-4286-8945-38a5b5a67141}: [DhcpNameServer] 192.168.8.1 192.168.8.1 SearchScopes: HKLM -> {EEC0E921-9FCA-4034-A447-CBCCE5093924} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM-x32 -> {EEC0E921-9FCA-4034-A447-CBCCE5093924} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-491584586-2121166311-210182509-1002 -> {EEC0E921-9FCA-4034-A447-CBCCE5093924} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-491584586-2121166311-210182509-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx S4 SymEvnt; \??\C:\Program Files\Norton Security\NortonData\22.9.3.14\SymPlatform\SymEvnt.sys [X] C:\Users\Default\Favorites\Links\Amazon.co.uk – Online Shopping.url C:\Users\Tomasz\Favorites\Links\Amazon.co.uk – Online Shopping.url