CloseProcesses:
CreateRestorePoint:
EmptyTemp:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== UWAGA
HKU\S-1-5-21-1006008876-2894502580-1055110232-1001\...\Run: [X] => explorer.exe hxxp://exinariuminix.info <==== UWAGA
VirusTotal: C:\autoexec.bat
Task: {3F68D320-37E2-4D38-8158-20FA3D0305D9} - \Microsoft\Windows\UNP\RunCampaignManager -> Brak pliku <==== UWAGA
Task: {BB6D223D-A874-4F7B-A511-746252459D9F} - System32\Tasks\X => cmd.exe /c REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /f /v X /t REG_SZ /d "explorer.exe hxxp://exinariuminix.info" <==== UWAGA