CloseProcesses: CreateRestorePoint: HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== UWAGA Tcpip\..\Interfaces\{961b5748-49dd-4d33-b45b-7860748630ad}: [DhcpNameServer] 40.33.1.66 HKU\S-1-5-21-2426750712-9147397-1863245831-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP HKU\S-1-5-21-2426750712-9147397-1863245831-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer15.msn.com/?pc=ACTE SearchScopes: HKU\S-1-5-21-2426750712-9147397-1863245831-1001 -> DefaultScope {9F6428A8-3E2C-42F0-9753-BFEC1BCF934B} URL = BHO-x32: Amazon Assistant -> {0ddcea2a-7b00-4349-8acb-af7ba6da251f} -> C:\Windows\system32\mscoree.dll [2017-09-29] (Microsoft Corporation) FF user.js: detected! => C:\Users\igi20\AppData\Roaming\Mozilla\Firefox\Profiles\m0uks2rn.default-1515861209220\user.js [2018-01-13] FF Extension: (Mozilla Partner Defaults) - C:\Users\igi20\AppData\Roaming\Mozilla\Firefox\Profiles\m0uks2rn.default-1515861209220\Extensions\partnerdefaults@mozilla.com [2018-01-13] [Przestarzałe] FF Extension: (Amazon Assistant for Firefox) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\abb-acer@amazon.com [2017-03-03] [Przestarzałe] FF Extension: (Mozilla Partner Defaults) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\partnerdefaults@mozilla.com [2017-03-03] [Przestarzałe] 2018-01-20 19:29 - 2018-01-20 19:56 - 000000000 ____D C:\AdwCleaner Amazon Assistant (HKLM-x32\...\{EDA2A064-F600-47BA-9EBA-58BE807BF6D2}) (Version: 10.17.0926 - Amazon) <==== UWAGA ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Brak pliku Task: {986A4C82-5922-4E0D-AE69-D81A3B2CC578} - System32\Tasks\FUBTrackingByPLD => C:\OEM\Preload\FubTracking\FubTracking.exe [2015-05-14] () Task: {CDF1E18F-89B4-4F03-B808-B2D592B24BF5} - \Microsoft\Windows\UNP\RunCampaignManager -> Brak pliku <==== UWAGA Task: {F4CB83AA-27F4-4D67-AB03-DA01B7BDBF7A} - System32\Tasks\Driver Booster SkipUAC (igi20) => C:\Program Files (x86)\IObit\Driver Booster\5.0.3\DriverBooster.exe Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe IE trusted site: HKU\S-1-5-21-2426750712-9147397-1863245831-1001\...\amazon.com -> amazon.com EmptyTemp: