CloseProcesses:
CreateRestorePoint:
EmptyTemp:
VirusTotal: C:\ProgramData\OEM\Transactional\amazonx@hermes\AmazonX.exe
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKU\S-1-5-21-3408759812-959770097-193446598-1001\...\Policies\Explorer: [NoSecurityTab] 1
HKU\S-1-5-21-3408759812-959770097-193446598-1001\...\MountPoints2: {4c56b492-51b2-11ea-84c7-1063c8bee2ae} - "D:\AutoRun.exe" 
Task: {9FF9B569-E23F-4F7A-A0CF-7FA1D932E122} - System32\Tasks\AmazonAssistantHelper => C:\ProgramData\OEM\Transactional\amazonx@hermes\AmazonX.exe
Tcpip\..\Interfaces\{695f8c46-a0b0-4063-a942-51f4be4273c2}: [DhcpNameServer] 62.233.233.233 8.8.8.8 192.168.1.1
HKU\S-1-5-21-3408759812-959770097-193446598-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer17win10.msn.com/?pc=ACTE
HKU\S-1-5-21-3408759812-959770097-193446598-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer17win10.msn.com/?pc=ACTE
CHR Extension: (Amazon Assistant for Chrome) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam [2020-03-21]
S2 ClickToRunSvc; "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service [X]
S4 SymEvnt; \??\C:\Program Files\Norton Security\NortonData\22.17.1.50\SymPlatform\SymEvnt.sys [X]
ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} =>  -> Brak pliku
0.0.0.0 tracking.opencandy.com.s3.amazonaws.com
hosts:
RemoveProxy: