CloseProcesses:
CreateRestorePoint:
EmptyTemp:
VirusTotal: C:\ProgramData\jIxmRfR\protect\protect.exe
VirusTotal: C:\Program Files (x86)\jIxmRfR\jIxmRfR\chrome.exe
U3 idsvc; Brak ImagePath
CustomCLSID: HKU\S-1-5-21-583474275-1036216620-2476001456-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Dell\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\FileSyncApi64.dll => Brak pliku
ContextMenuHandlers3: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Brak pliku
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} =>  -> Brak pliku
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Brak pliku
Task: {05F2790C-A87B-4156-B15D-FFD783434797} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {12CD3128-1A37-450F-A681-76F8C2BD1F4B} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {143E1AAE-413D-4E1C-B719-975FBB3BEEF0} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1A6D8A06-A50F-4BC3-B920-7F464B54AE9F} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {3608DB0D-59B6-4681-B63D-2164332D0F72} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {39EBE709-FE94-4CDD-A7D6-86CD6E4D4E5E} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {3CE84876-EAF0-46CD-8D3F-04498B943D04} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {425385D7-88DF-4ACA-9B60-8E759F6C0777} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {4C1910ED-6E70-4F15-9420-1E1F7BABC0CF} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {67C00465-145A-47CD-B428-025E9D08E2B0} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {6FA0EFE6-EE78-4121-80F3-75C1EB4B294B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7A3EB11D-46AA-4104-B09E-6B3146AFA3DF} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {7BA50803-A971-448E-B4E3-43767028ECE0} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7DEF7553-7B00-46EE-9B4B-83A708F18158} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {86E69189-3CA7-4D75-945D-D94C917FB0AA} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe
Task: {8D59C621-EBE0-4FFE-B1F3-9E296A424B9A} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {BECFD2B2-111D-4A16-9B14-0AF8FB31A03A} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C07D28EE-79A4-4A50-9E31-6A79EA2B4D61} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E39AB7C0-E3C0-4472-96B9-632D1C47D83A} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E44687AF-4236-4336-8085-4026E0D2E86C} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {EE2D7DD9-D130-4F4A-944A-013DE065A3D9} - \Microsoft\Windows\UNP\RunCampaignManager -> Brak pliku <==== UWAGA
Task: {EFCEDABA-BD48-44C0-A9AE-D298A1AC7DC1} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {F1D11034-9D6E-4B11-B81F-42DBC5FBFB2C} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F97E69F7-4986-49C6-A817-1212B85D9CF9} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
AlternateDataStreams: C:\Users\Dell\Desktop\Bike Polska:com.dropbox.attributes [168]
FirewallRules: [{5A3884BF-3D4C-4432-8D95-A995D00DEED2}] => (Allow) C:\ProgramData\jIxmRfR\protect\protect.exe
FirewallRules: [{A5DBD09F-7E7D-438F-914C-0FE97B0380FA}] => (Allow) C:\Program Files (x86)\jIxmRfR\jIxmRfR\chrome.exe
FirewallRules: [{35985BC5-05C1-4603-B5E6-B4C09E5C0179}] => (Allow) C:\Program Files (x86)\jIxmRfR\jIxmRfR\bin\jIxmRfR_server.exe
CMD: dir /a "C:\Program Files (x86)"
CMD: dir /a "C:\ProgramData"