CloseProcesses:
CreateRestorePoint:
EmptyTemp:
HKU\S-1-5-21-2684602908-2750127974-2092376734-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-2684602908-2750127974-2092376734-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-2684602908-2750127974-2092376734-1000\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-21-2684602908-2750127974-2092376734-1002\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-2684602908-2750127974-2092376734-1002\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-2684602908-2750127974-2092376734-1002\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-21-2684602908-2750127974-2092376734-1006\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-2684602908-2750127974-2092376734-1006\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-2684602908-2750127974-2092376734-1006\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-21-2684602908-2750127974-2092376734-1006\...\MountPoints2: {56e2953c-28d9-11eb-b30a-d03745245ab1} - F:\AutoRun.exe
HKU\S-1-5-21-2684602908-2750127974-2092376734-1006\...\MountPoints2: {7341a5a1-2bef-11eb-b104-94de80bc5874} - F:\AutoRun.exe
HKU\S-1-5-21-2684602908-2750127974-2092376734-1006\...\MountPoints2: {7d9961f0-37aa-11eb-b14a-806e6f6e6963} - G:\AutoRun.exe
HKU\S-1-5-21-2684602908-2750127974-2092376734-1006\...\MountPoints2: {995a5767-283b-11eb-af32-94de80bc5874} - F:\AutoRun.exe
HKU\S-1-5-21-2684602908-2750127974-2092376734-1006\...\MountPoints2: {995a5774-283b-11eb-af32-94de80bc5874} - F:\AutoRun.exe
HKU\S-1-5-21-2684602908-2750127974-2092376734-1006\...\MountPoints2: {abb1261e-2afa-11eb-b772-d03745245ab1} - F:\AutoRun.exe
HKU\S-1-5-21-2684602908-2750127974-2092376734-1006\...\MountPoints2: {c057e46d-4d28-11eb-af0d-94de80bc5874} - F:\AutoRun.exe
HKU\S-1-5-21-2684602908-2750127974-2092376734-1006\...\MountPoints2: {d8bb669b-2b09-11eb-b11b-d03745245ab1} - F:\AutoRun.exe
IFEO\msiexec.exe: [VerifierDlls] msiesu.dll
GroupPolicy\User: Ograniczenia ? <==== UWAGA
GroupPolicyUsers\S-1-5-21-2684602908-2750127974-2092376734-1002\User: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA
Task: {7132FCA0-A3F0-431E-9945-C2B58D3DFCAF} - System32\Tasks\Patch WU ESU => %SystemRoot%\WuEsu\PatchWU.cmd 0
Tcpip\..\Interfaces\{35F3F494-E87C-4767-8178-875E87E4BD9F}: [NameServer] 185.89.185.1 89.108.202.21
Tcpip\..\Interfaces\{3A775580-A6C6-4AA1-B2E9-1885F07F65C2}: [NameServer] 185.89.185.1 89.108.202.21
Tcpip\..\Interfaces\{7802CD99-E7C6-4A02-B801-E2FF40AE270F}: [NameServer] 185.89.185.1 89.108.202.21
Tcpip\..\Interfaces\{78BDF40C-F932-41EA-89DB-4AD440BBC2A5}: [NameServer] 185.89.185.1 89.108.202.21
Tcpip\..\Interfaces\{BFFA7ADB-8B83-4C7C-B7D1-CAEBBB78D3F5}: [NameServer] 185.89.185.1 89.108.202.21
Tcpip\..\Interfaces\{C3C37A47-53D7-457B-88F4-6ACAA46B5B53}: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{D30EED79-A758-4A02-A79D-1400E90D1F23}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{E895A72B-9D9B-414B-8391-59913300D72B}: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{F322A8E8-FA58-4D50-8267-A77E46B1EF18}: [NameServer] 185.89.185.1 89.108.202.21
FF HKLM\...\Firefox\Extensions: [{8A0D66E3-1C08-49A6-8F6C-7E024029D199}] - C:\Program Files\Norton Family\Engine\3.8.2.18\Exts\{8A0D66E3-1C08-49A6-8F6C-7E024029D199}.xpi => nie znaleziono
FF HKLM-x32\...\Firefox\Extensions: [{8A0D66E3-1C08-49A6-8F6C-7E024029D199}] - C:\Program Files\Norton Family\Engine\3.8.2.18\Exts\{8A0D66E3-1C08-49A6-8F6C-7E024029D199}.xpi => nie znaleziono
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
CustomCLSID: HKU\S-1-5-21-2684602908-2750127974-2092376734-1006_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\RAFONIX\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll => Brak pliku
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Brak pliku
AlternateDataStreams: C:\ProgramData:NT [40]
AlternateDataStreams: C:\ProgramData:NT2 [884]
AlternateDataStreams: C:\Users\All Users:NT [40]
AlternateDataStreams: C:\Users\All Users:NT2 [884]
AlternateDataStreams: C:\ProgramData\Application Data:NT [40]
AlternateDataStreams: C:\ProgramData\Application Data:NT2 [884]
AlternateDataStreams: C:\ProgramData\Dane aplikacji:NT [40]
AlternateDataStreams: C:\ProgramData\Dane aplikacji:NT2 [884]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 [884]
AlternateDataStreams: C:\Users\RAFONIX\Dane aplikacji:NT [40]
AlternateDataStreams: C:\Users\RAFONIX\Dane aplikacji:NT2 [884]
AlternateDataStreams: C:\Users\RAFONIX\AppData\Roaming:NT [40]
AlternateDataStreams: C:\Users\RAFONIX\AppData\Roaming:NT2 [884]
HKU\S-1-5-21-2684602908-2750127974-2092376734-1006\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxps://www.msn.com/pl-pl/?ocid=iehp
SearchScopes: HKU\S-1-5-21-2684602908-2750127974-2092376734-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2684602908-2750127974-2092376734-1002 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = &gct=kwd&qsrc=2869
Toolbar: HKU\S-1-5-21-2684602908-2750127974-2092376734-1002 -> Brak nazwy - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Brak pliku
FirewallRules: [SPPSVC-In-TCP] => (Allow) C:\Windows\system32\sppsvc.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) C:\Windows\system32\sppsvc.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [TCP Query User{B08ECFA9-4B52-453E-B58C-A3B3C060922E}E:\sdi_rus\sdi_rus.1.19.04\sdi_x64_r1904.exe] => (Allow) E:\sdi_rus\sdi_rus.1.19.04\sdi_x64_r1904.exe => Brak pliku
FirewallRules: [UDP Query User{2EFF6F01-2C96-4691-AD77-8D1E3E2D8945}E:\sdi_rus\sdi_rus.1.19.04\sdi_x64_r1904.exe] => (Allow) E:\sdi_rus\sdi_rus.1.19.04\sdi_x64_r1904.exe => Brak pliku
FirewallRules: [TCP Query User{85D776FF-9232-4148-84B9-151E18C7AF83}C:\users\rafonix\desktop\among.us.v2020.10.22s\among us\among us.exe] => (Block) C:\users\rafonix\desktop\among.us.v2020.10.22s\among us\among us.exe => Brak pliku
FirewallRules: [UDP Query User{A3D6D446-5D72-473A-BC44-EF8B1A839BC8}C:\users\rafonix\desktop\among.us.v2020.10.22s\among us\among us.exe] => (Block) C:\users\rafonix\desktop\among.us.v2020.10.22s\among us\among us.exe => Brak pliku
FirewallRules: [TCP Query User{EA036C31-54BF-4030-B6EC-2196B32CB51F}C:\program files (x86)\common files\oracle\java\javapath_target_15332449\java.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_15332449\java.exe
FirewallRules: [UDP Query User{D26CDB9A-4D7B-4154-A2BF-E959C1219B79}C:\program files (x86)\common files\oracle\java\javapath_target_15332449\java.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_15332449\java.exe
FirewallRules: [TCP Query User{20BCED0F-395C-4E8B-8254-F08E6A84290F}C:\users\rafonix\desktop\among.us.v2020.11.17s\among us\among us.exe] => (Allow) C:\users\rafonix\desktop\among.us.v2020.11.17s\among us\among us.exe => Brak pliku
FirewallRules: [UDP Query User{9955CE3C-DD25-4AC9-B14C-BDB48843AE73}C:\users\rafonix\desktop\among.us.v2020.11.17s\among us\among us.exe] => (Allow) C:\users\rafonix\desktop\among.us.v2020.11.17s\among us\among us.exe => Brak pliku
FirewallRules: [{48CDC387-BA28-43E5-BD7E-614347C13B5F}] => (Allow) C:\Program Files\BlueStacks_msi2\HD-Player.exe => Brak pliku
FirewallRules: [TCP Query User{0D9A3B67-95E4-4A18-9A77-9A45F9F5CC65}C:\users\rafonix\appdata\roaming\crystal-launcher\runtime\64\jre1.8.0_211\bin\javaw.exe] => (Allow) C:\users\rafonix\appdata\roaming\crystal-launcher\runtime\64\jre1.8.0_211\bin\javaw.exe => Brak pliku
FirewallRules: [UDP Query User{9FF86F06-9EFE-4455-A6E7-D72559015E29}C:\users\rafonix\appdata\roaming\crystal-launcher\runtime\64\jre1.8.0_211\bin\javaw.exe] => (Allow) C:\users\rafonix\appdata\roaming\crystal-launcher\runtime\64\jre1.8.0_211\bin\javaw.exe => Brak pliku
FirewallRules: [{40B87B8C-1887-43A7-9BFC-355C3FA520A7}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\x64\XSplit.Core.exe => Brak pliku
FirewallRules: [{BFE76072-05B6-4875-86A7-ED064C69FB21}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\x64\XSplit.cam.exe => Brak pliku
FirewallRules: [{0818F8DD-E2EE-4BD0-AA5A-882B0E38E617}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\x64\XSplit.Core.exe => Brak pliku
FirewallRules: [{453E9B37-9A24-44B8-AC65-52D39E8925C3}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Broadcaster\x64\XSplit.cam.exe => Brak pliku
FirewallRules: [{2D70A7FA-62DB-48CC-B3F0-38838F1313E6}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe => Brak pliku
FirewallRules: [{55A93B70-E7D0-4F74-BF12-DED9C81CC070}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe => Brak pliku
FirewallRules: [{B23D4904-52B4-4499-8DB5-3459D2512915}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DaVinciPanelDaemon.exe => Brak pliku
FirewallRules: [{23A27BE7-BA0C-4A97-A33C-987704ACB2E7}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe => Brak pliku
FirewallRules: [{17A38079-D106-4705-813C-FCA0997F4511}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe => Brak pliku
FirewallRules: [{85289184-5238-4975-8301-9161B40E3C1C}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe => Brak pliku
FirewallRules: [{335CBFE2-A395-4296-BEFA-C0B41F839306}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe => Brak pliku
FirewallRules: [{E8E17A35-88E1-47E4-9E94-770DBCFD089C}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\OxygenPanelDaemon.exe => Brak pliku
FirewallRules: [{2123C8C8-46D9-4FAD-9ABE-50862984F05E}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DPDecoder.exe => Brak pliku
FirewallRules: [{71BE99F4-93C6-4009-9DEF-8B2F20A36068}] => (Allow) C:\ProgramData\Blackmagic Design\DaVinci Resolve\Support\QtDecoder\QTDecoder.exe => Brak pliku
FirewallRules: [{8B9A2FAE-B4EB-4C0B-AB47-FD124BBA02C2}] => (Allow) C:\Program Files\ATOMI\ActivePresenter\ActivePresenter.exe => Brak pliku
FirewallRules: [{B01043FC-5949-4F1F-8C52-210EA4FC2F6C}] => (Allow) C:\Program Files\ATOMI\ActivePresenter\rlactivator.exe => Brak pliku