CloseProcesses: CreateRestorePoint: EmptyTemp: File: C:\ProgramData\DeleteMe.bat File: C:\Program Files (x86)\SteamServerBrowser\SteamServerBrowser.exe HKLM\...\Policies\Explorer: [HideSCAHealth] 1 HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA HKU\S-1-5-21-1400354644-193383255-2992175342-1001\...\MountPoints2: {9d636a7d-e857-11e8-abe9-4cedfbcae67c} - "F:\Setup.exe" HKU\S-1-5-21-1400354644-193383255-2992175342-1001\...\MountPoints2: {d7ab39fe-c7d5-11e8-abe2-4cedfbcae67c} - "D:\setup.exe" CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA CHR HKU\S-1-5-21-1400354644-193383255-2992175342-1001\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA Tcpip\..\Interfaces\{6094ee7e-c182-11e8-abdb-806e6f6e6963}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{71e8016e-b05d-48db-be59-1d4feb898b0a}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{71e8016e-b05d-48db-be59-1d4feb898b0a}: [DhcpNameServer] 8.8.8.8 Tcpip\..\Interfaces\{92e83f10-2af2-4245-87e3-b15f055d994e}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{92e83f10-2af2-4245-87e3-b15f055d994e}: [DhcpNameServer] 195.62.64.1 188.241.28.28 178.159.175.247 Tcpip\..\Interfaces\{AF222BCE-17EB-4E15-8F41-5F294A489EEC}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{b9e33e4c-ccf6-49ea-9149-d193474066b2}: [NameServer] 8.8.8.8 SearchScopes: HKLM-x32 -> DefaultScope - brak wartości FF Homepage: Mozilla\Firefox\Profiles\t2789yp1.default -> file:///C:/ProgramData/Quoteexs/ff.HP FF Extension: (Brak nazwy) - C:\Program Files\Mozilla Firefox\browser\features\{1189C9DF-3038-4787-9592-8C6E41CC7F94}.xpi [2019-06-22] [Brak podpisu cyfrowego] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx S3 aswbIDSAgent; "C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe" [X] S2 avast! Antivirus; "C:\Program Files\AVAST Software\Avast\AvastSvc.exe" [X] S3 AvastWscReporter; "C:\Program Files\AVAST Software\Avast\wsc_proxy.exe" /runassvc [X] S2 Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [X] S3 TKFsAvM; C:\Windows\system32\TKFsAv64.sys [198808 2018-03-07] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) <==== UWAGA S3 TKFsFtM; C:\Windows\system32\TKFsFt64.sys [28824 2018-03-07] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) <==== UWAGA S3 TKPcFt; C:\Windows\system32\TKPcFtCb64.sys [54504 2018-01-30] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) <==== UWAGA S3 TKRgAc; C:\Windows\system32\TKRgAc2k64.sys [115760 2018-01-29] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) <==== UWAGA S3 TKRgFt; C:\Windows\system32\TKRgFtXp64.sys [68848 2018-02-04] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) <==== UWAGA S3 TKSP; C:\Windows\system32\TKSPxp64.sys [80824 2018-01-29] (INCA Internet Co.,Ltd. -> INCA Internet Co., Ltd.) <==== UWAGA 2019-08-03 12:21 - 2019-08-03 12:21 - 000000320 _____ () C:\ProgramData\DeleteMe.bat NativeDesktopMediaService (HKLM-x32\...\{4A91D8B3-712F-4815-B29B-E610008C4704}) (Version: 3.6.1 - Jetmedia) <==== UWAGA ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll -> Brak pliku ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll -> Brak pliku ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll -> Brak pliku ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll -> Brak pliku AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`29hfm [0] FirewallRules: [TCP Query User{238822E4-01E2-4E75-B020-D2D0C6DFCA99}E:\gry\need for speed rivals\nfs14.exe] => (Block) E:\gry\need for speed rivals\nfs14.exe Brak pliku FirewallRules: [UDP Query User{8AFA5EB5-8514-4ADE-ABE0-D76703EEA65E}E:\gry\need for speed rivals\nfs14.exe] => (Block) E:\gry\need for speed rivals\nfs14.exe Brak pliku FirewallRules: [TCP Query User{850C2331-CBF6-47DF-B2F1-EC685A020BF4}E:\gry\counter-strike 1.6 v43\hl.exe] => (Block) E:\gry\counter-strike 1.6 v43\hl.exe Brak pliku FirewallRules: [UDP Query User{D21CDF93-D251-4A18-BF09-EF5FD8C01BDF}E:\gry\counter-strike 1.6 v43\hl.exe] => (Block) E:\gry\counter-strike 1.6 v43\hl.exe Brak pliku FirewallRules: [{602875A3-B654-423E-9C63-009BEF64174A}] => (Allow) E:\programy\steam\bin\cef\cef.win7\steamwebhelper.exe Brak pliku FirewallRules: [{FDEF3EDE-9E84-4C0B-9761-596BDCD4612C}] => (Allow) E:\programy\steam\bin\cef\cef.win7\steamwebhelper.exe Brak pliku FirewallRules: [{940AE8AE-0098-441D-8C69-E457C0BCD451}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe Brak pliku FirewallRules: [TCP Query User{230705D2-10A1-4B14-A289-79DD91C4F663}E:\gry\the sims 4\game\bin\ts4.exe] => (Allow) E:\gry\the sims 4\game\bin\ts4.exe Brak pliku FirewallRules: [UDP Query User{DB843D99-5EB0-4006-B89F-7E89901457E8}E:\gry\the sims 4\game\bin\ts4.exe] => (Allow) E:\gry\the sims 4\game\bin\ts4.exe Brak pliku FirewallRules: [TCP Query User{AE34CE8C-81EA-439B-B6E1-512DDFC6EA8C}E:\gry\arma 3\arma3.exe] => (Allow) E:\gry\arma 3\arma3.exe Brak pliku FirewallRules: [UDP Query User{9947BFBA-E9D9-4424-936C-58974A081F69}E:\gry\arma 3\arma3.exe] => (Allow) E:\gry\arma 3\arma3.exe Brak pliku FirewallRules: [{84FA1938-CBB7-4BB6-8D1F-95844B62E627}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe Brak pliku FirewallRules: [{E8DE9260-5E57-4EF6-B659-EADB4A4721FE}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe Brak pliku FirewallRules: [TCP Query User{5DE7C4A6-A252-4E94-949C-3DB38CAF1B59}E:\gry\counter-strike 1.6 v43\hl.exe] => (Block) E:\gry\counter-strike 1.6 v43\hl.exe Brak pliku FirewallRules: [UDP Query User{BF0B0D25-5EBF-434E-931F-8EBA47040FF1}E:\gry\counter-strike 1.6 v43\hl.exe] => (Block) E:\gry\counter-strike 1.6 v43\hl.exe Brak pliku FirewallRules: [{4DCEF19D-9541-474D-A9E7-A444FFD1F7F1}] => (Allow) C:\Program Files (x86)\Anvsoft\Syncios\pdt_syncios.exe Brak pliku FirewallRules: [TCP Query User{708EE970-56D6-45E1-82CC-5B692DE9F82F}E:\gry\diablo iii\x64\diablo iii64.exe] => (Allow) E:\gry\diablo iii\x64\diablo iii64.exe Brak pliku FirewallRules: [UDP Query User{CFA67043-5444-4792-A172-FBAD07E29FE7}E:\gry\diablo iii\x64\diablo iii64.exe] => (Allow) E:\gry\diablo iii\x64\diablo iii64.exe Brak pliku FirewallRules: [{5A773117-6474-4C0B-94F7-999D0910BFC8}] => (Allow) E:\programy\steam\steamapps\common\Dead by Daylight\DeadByDaylight.exe Brak pliku FirewallRules: [{4891E497-571C-45C3-9E2C-3F48ADF5F3C4}] => (Allow) E:\programy\steam\steamapps\common\Dead by Daylight\DeadByDaylight.exe Brak pliku FirewallRules: [TCP Query User{1C7E2F7B-D761-4EB7-83CA-B6FB259B3B7B}E:\programy\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) E:\programy\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe Brak pliku FirewallRules: [UDP Query User{3FABAEDA-6CE3-41D3-808D-2708D4C6040B}E:\programy\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) E:\programy\steam\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe Brak pliku FirewallRules: [{8AB9379A-B071-4E89-A593-DA655793D33B}] => (Allow) E:\programy\steam\steamapps\common\The Testament of Sherlock Holmes\game.exe Brak pliku FirewallRules: [{B046E93B-ADD1-44A7-A073-0BD2E76893DE}] => (Allow) E:\programy\steam\steamapps\common\The Testament of Sherlock Holmes\game.exe Brak pliku FirewallRules: [TCP Query User{A9A9F2C1-8840-40BD-97F5-DFC0D074707E}E:\gry\heroes of the storm\versions\base75132\heroesofthestorm_x64.exe] => (Allow) E:\gry\heroes of the storm\versions\base75132\heroesofthestorm_x64.exe Brak pliku FirewallRules: [UDP Query User{9393DF9F-382B-4FDF-91C0-C4B7E97B2B03}E:\gry\heroes of the storm\versions\base75132\heroesofthestorm_x64.exe] => (Allow) E:\gry\heroes of the storm\versions\base75132\heroesofthestorm_x64.exe Brak pliku FirewallRules: [TCP Query User{25C74A2D-790F-409C-8ED4-7E630CDF8EDC}E:\gry\hearthstone\hearthstone.exe] => (Allow) E:\gry\hearthstone\hearthstone.exe Brak pliku FirewallRules: [UDP Query User{64692FDC-F857-49E1-AA9D-F65FF905970C}E:\gry\hearthstone\hearthstone.exe] => (Allow) E:\gry\hearthstone\hearthstone.exe Brak pliku FirewallRules: [{000EB78D-0117-4EF3-ABB6-42CE442A9A51}] => (Allow) E:\programy\steam\steamapps\common\Grim Dawn\x64\Grim Dawn.exe Brak pliku FirewallRules: [{F424B52A-6B67-4448-B1F5-BF490BAC1ED0}] => (Allow) E:\programy\steam\steamapps\common\Grim Dawn\x64\Grim Dawn.exe Brak pliku FirewallRules: [{5A913A24-1CF7-4BA9-B744-F0A53B1AB752}] => (Allow) E:\programy\steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe Brak pliku FirewallRules: [{0BA8BA8A-CC58-4C92-AFE8-CEEAA062A104}] => (Allow) E:\programy\steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe Brak pliku FirewallRules: [{82219D82-D285-46F8-BEF3-97F59BA10877}] => (Allow) E:\programy\steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe Brak pliku FirewallRules: [{3006FE7D-B078-461D-B0BF-21917EB587CC}] => (Allow) E:\programy\steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe Brak pliku FirewallRules: [{B4FC9DF0-6231-471E-B6CD-C804051B28A3}] => (Allow) E:\programy\steam\steamapps\common\ARK SOTF\ShooterGame\Binaries\Win64\ShooterGame_BE.exe Brak pliku FirewallRules: [{580C7568-84C6-47B8-B3AE-353689478A67}] => (Allow) E:\programy\steam\steamapps\common\ARK SOTF\ShooterGame\Binaries\Win64\ShooterGame_BE.exe Brak pliku Hosts: RemoveProxy: CMD: netsh int ip reset CMD: ipconfig /flushdns