CloseProcesses:
CreateRestorePoint:
EmptyTemp:
URLSearchHook: [S-1-5-21-2000041979-1871357136-1592836177-500] UWAGA => Brak domyślnego URLSearchHook
CHR HomePage: Default -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBVRmzv2pJwNObeR_98Utx3C8ptCIbHpqQr_nOmgGDmAvL7DeTQZl9VNe0zcnfeREulAw9i7KNZERK_bdexpOUwYkBN2Zkq8ino2gviVacjNXi_SxEdiIXyZszLNfyJrQDT0a2lvPpAWvSpyYRZy7Yp9BHghYgZMKZFs5n32m2TYDzr-YVVLbXq
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
2018-10-09 20:04 - 2018-09-06 12:10 - 000000008 __RSH C:\Users\Administrator\ntuser.pol
2018-10-09 20:04 - 2018-09-06 12:05 - 000000008 __RSH C:\ProgramData\ntuser.pol
ContextMenuHandlers1: [WinRAR32] -> [CC]{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>  -> Brak pliku
Task: {0E7A2BF7-7256-491D-8232-AAEFCC9E2688} - System32\Tasks\OperaUpdateService => C:\Windows\system32\OpenWith.exe [2014-10-29] (Microsoft Corporation)
Task: {9607E0D4-1525-4028-A255-70BB4945D94D} - System32\Tasks\TzltYpotJgryG2 => C:\Windows\system32\wscript.exe "C:\ProgramData\vAtgRIojrOIejiVB\fgHbHcX.wsf"