CloseProcesses: CreateRestorePoint: EmptyTemp: HKLM-x32\...\Run: [] => [X] URLSearchHook: HKU\S-1-5-21-2297107216-2948167871-251712987-1001 - (Brak nazwy) - {ad708c09-d51b-45b3-9d28-4eba2681febf} - Brak pliku SearchScopes: HKU\S-1-5-21-2297107216-2948167871-251712987-1001 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1269415 Toolbar: HKLM-x32 - Brak nazwy - {ad708c09-d51b-45b3-9d28-4eba2681febf} - Brak pliku CHR HKLM-x32\...\Chrome\Extension: [amhlacfinnaffmhfohbpecabbjfhkdji] - C:\Users\PIRAT\AppData\Local\Temp\amhlacfinnaffmhfohbpecabbjfhkdji.crx Task: {72F5A488-8245-4E44-8BB0-9A02C5364590} - \Microsoft\Windows\UNP\RunCampaignManager -> Brak pliku <==== UWAGA Task: {5617B3DD-22F1-4A6F-A95F-ADC67F1C527A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-11-19] (Google Inc.) Task: {90BF5069-91BA-45EB-AB11-61F126999414} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-11-19] (Google Inc.) FirewallRules: [TCP Query User{8F8FB2EA-0350-42EB-BD95-68D85F0A3CBE}D:\easysetupassistant\easysetupassistant.exe] => (Allow) D:\easysetupassistant\easysetupassistant.exe FirewallRules: [UDP Query User{85AC0F8F-6455-4D55-90CF-EE4C3FF6461B}D:\easysetupassistant\easysetupassistant.exe] => (Allow) D:\easysetupassistant\easysetupassistant.exe Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"}