CloseProcesses: CreateRestorePoint: EmptyTemp: ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Brak pliku ContextMenuHandlers1: [JZContextMenuExt] -> {9175E343-1C41-4490-B178-14F36504F07E} => -> Brak pliku ContextMenuHandlers1: [JZipShlExt] -> {9175E343-1C41-4490-B178-14F36504F07E} => -> Brak pliku Task: {06A156B7-A7D2-475A-A8E4-D6635A2A3039} - System32\Tasks\{E8803201-8C8E-4DF9-B795-F1882E56F545} => C:\Windows\system32\pcalua.exe -a G:\Install_64-bit\setup.exe -d G:\Install_64-bit Task: {10E6AD80-AB7E-477F-899F-5EDD63452870} - System32\Tasks\{463D1BA6-FAFB-47F8-B3B9-75208F69E7BC} => C:\Windows\system32\pcalua.exe -a F:\SETUP.EXE -d F:\ Task: {38251B23-CD8F-40E4-84F7-6893750FE7C9} - System32\Tasks\{5982FA6E-C15E-455A-8144-5DED12028F62} => C:\Windows\system32\pcalua.exe -a "E:\Zdjecia biofizyka\avira_en_av_56c5d13eca615__ws.exe" -d "E:\Zdjecia biofizyka" Task: {F3E5664F-B0B8-4FD2-8D83-473827B622EF} - System32\Tasks\{C70B8AB2-8CD0-4FA2-BCFA-903E6040CA7C} => C:\Windows\system32\pcalua.exe -a C:\Users\Jakub\Downloads\SideKickSetup.exe -d C:\Users\Jakub\Downloads Task: {F7761595-40E2-465A-996E-554558A2E659} - System32\Tasks\{FCEE3F63-2B09-4BCF-8907-43CCC4755E16} => C:\Windows\system32\pcalua.exe -a E:\ddirect\dxsetup.exe -d E:\ddirect C:\Users\Jakub\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\Google Chrome.lnk AlternateDataStreams: C:\autoexec.bat:$CmdTcID [64] HKU\S-1-5-21-2732520356-73097215-1946196653-1000\...\Run: [SolitaryStar] => C:\Windows\rss\csrss.exe [2736640 2018-03-08] () <==== UWAGA HKU\S-1-5-21-2732520356-73097215-1946196653-1000\...\MountPoints2: H - H:\LaunchU3.exe -a HKU\S-1-5-21-2732520356-73097215-1946196653-1000\...\MountPoints2: {5bb0711b-c8b0-11e3-95b9-eacfb0f2d47b} - H:\LaunchU3.exe -a Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter GroupPolicy: Ograniczenia <==== UWAGA SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = Toolbar: HKU\S-1-5-21-2732520356-73097215-1946196653-1000 -> Brak nazwy - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - Brak pliku FF ProfilePath: C:\Users\Jakub\AppData\Roaming\Firefox\Firefox\Profiles\ng75x27z.default-1474723428033 [2017-02-15] <==== UWAGA CHR Profile: C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2018-03-14] <==== UWAGA R2 WinDefender; C:\Windows\windefender.exe [0 ] () <==== UWAGA (zerobajtowy plik/folder) S1 ESProtectionDriver; Brak ImagePath S3 MBAMProtection; Brak ImagePath S3 MBAMWebProtection; Brak ImagePath R3 Winmon; C:\Windows\System32\drivers\Winmon.sys [0 ] () <==== UWAGA (zerobajtowy plik/folder) R3 WinmonFS; C:\Windows\System32\drivers\WinmonFS.sys [0 ] (Windows (R) Win 7 DDK provider) <==== UWAGA (zerobajtowy plik/folder) S3 MBAMFarflt; system32\DRIVERS\farflt.sys [X] VirusTotal: C:\Windows\rss\csrss.exe VirusTotal: C:\Users\Jakub\AppData\Roaming\Jaundice.hYL VirusTotal: C:\Program Files\Mouse\Amoumain.exe