CloseProcesses:
CreateRestorePoint:
MSCONFIG\startupfolder: C:^Users^User^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^GamerHash.lnk => C:\Windows\pss\GamerHash.lnk.Startup
MSCONFIG\startupfolder: C:^Users^User^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MEGAsync.lnk => C:\Windows\pss\MEGAsync.lnk.Startup
MSCONFIG\startupfolder: C:^Users^User^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^SHU.lnk => C:\Windows\pss\SHU.lnk.Startup
FirewallRules: [TCP Query User{92AF00EC-2B32-4CF2-A199-7584158D1C2F}C:\users\user\appdata\local\gamerhash\miners\claymore_cryptonote_v1\nscpucnminer64.gh] => (Block) C:\users\user\appdata\local\gamerhash\miners\claymore_cryptonote_v1\nscpucnminer64.gh
FirewallRules: [UDP Query User{5ED05A58-DCB8-4D2F-BA1C-38D8D6AB1957}C:\users\user\appdata\local\gamerhash\miners\claymore_cryptonote_v1\nscpucnminer64.gh] => (Block) C:\users\user\appdata\local\gamerhash\miners\claymore_cryptonote_v1\nscpucnminer64.gh
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends\League of Legends.lnk
C:\Users\User\Desktop\GamerHash.lnk
C:\Users\User\Desktop\Wszystko\AVG PC TuneUp.lnk
C:\Users\User\Desktop\Wszystko\AVG.lnk
C:\Users\User\Desktop\Wszystko\ELEX.lnk
C:\Users\User\Desktop\Wszystko\Epic Games Launcher.lnk
C:\Users\User\Desktop\Wszystko\League of Legends.lnk
C:\Users\User\Desktop\Wszystko\Malwarebytes.lnk
C:\Users\User\Desktop\Wszystko\MEGAsync.lnk
C:\Users\User\Desktop\Wszystko\Trials Fusion.lnk
C:\Users\User\Desktop\Wszystko\TruckersMP.lnk
C:\Users\User\Desktop\Wszystko\xp-AntiSpy.lnk
C:\Users\User\Desktop\Wszystko\Gierki\Gameforge Live.lnk
C:\Users\User\Desktop\Wszystko\Gierki\Grand Theft Auto V.lnk
C:\Users\User\Desktop\Wszystko\Gierki\Minecraft.lnk
C:\Users\User\Desktop\Wszystko\Gierki\SimCity.lnk
C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\xp-AntiSpy\Dokumentacja.lnk
C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\xp-AntiSpy\Homepage.lnk
C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\xp-AntiSpy\Odinstaluj.lnk
C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\xp-AntiSpy\xp-AntiSpy.lnk
2018-02-07 15:34 - 2018-01-06 22:14 - 000000000 ____D C:\Users\User\AppData\Local\GamerHash
Tcpip\..\Interfaces\{7C9624D5-3C3A-4605-BD33-A61D25B9F01C}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{7D59FF45-F2FF-4ED2-BCFD-5EAEC4F25645}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{9FB8A1B0-7156-4E41-990A-08D41F0D0026}: [DhcpNameServer] 31.11.202.254 37.8.214.2