CloseProcesses:
CreateRestorePoint:
EmptyTemp:
ProxyServer: [S-1-5-21-57989841-1715567821-725345543-1003] => 101.50.1.2:80
AutoConfigURL: [S-1-5-21-57989841-1715567821-725345543-1003] => 101.50.1.2:80
VirusTotal: C:\Program Files\Bitcoin\bitcoin-qt.exe
AlternateDataStreams: C:\Program Files\CoinCollector:{6D004E00-7700-3000-5300-4E0036005000} [856]
StandardProfile\AuthorizedApplications: [C:\Program Files\Bitcoin\bitcoin-qt.exe] => Disabled:Bitcoin Core (GUI node for Bitcoin)
GroupPolicy: Ograniczenia ? <==== UWAGA
GroupPolicy\User: Ograniczenia ? <==== UWAGA
CHR HomePage: Profile 3 -> mail.ru/cnt/11956636?rciguc__PARAM__
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 SWDUMon; system32\DRIVERS\SWDUMon.sys [X]
C:\Documents and Settings\All Users\Ulubione\Mail.Ru Агент - используй для общения!.url
C:\Documents and Settings\All Users\Ulubione\Mail.Ru.url
CMD: dir /a "C:\Program Files\CoinCollector"
CMD: dir /a "C:\Program Files\Bitcoin"
RemoveProxy: