CreateRestorePoint:

File: C:\WINDOWS\system32\LSMD.exe
FirewallRules: [{CC0C1248-1867-43E3-AF35-E01B6137B2F7}] => (Allow) F:\uTorrentPortable\App\uTorrent\uTorrent.exe => Brak pliku
FirewallRules: [{73D93448-4057-44EC-9D8E-E0DA7C3468E7}] => (Allow) F:\uTorrentPortable\App\uTorrent\uTorrent.exe => Brak pliku
FirewallRules: [{5B89593B-DDB0-4E0F-807C-4E5EDD0C0C58}] => (Allow) C:\Users\Dorota\AppData\Local\Temp\download\MiniThunderPlatform.exe => Brak pliku
FirewallRules: [{F2C05ACD-8071-4656-B0B9-D7F6059EDF3E}] => (Allow) C:\Users\Dorota\AppData\Local\Temp\download\MiniThunderPlatform.exe => Brak pliku
S2 LSMD; C:\WINDOWS\system32\LSMD.exe [4283392 2020-08-14] () [Brak podpisu cyfrowego]
2020-12-13 16:27 - 2020-12-13 16:27 - 000000000 ____D C:\Users\Dorota\AppData\Local\Pivers
2020-12-13 16:26 - 2020-12-13 16:26 - 000032768 _____ C:\Users\Dorota\AppData\Roaming\1607876780367-shm
2020-12-13 16:26 - 2020-12-13 16:26 - 000000000 ____D C:\Users\Public\Thunder Network
2020-12-13 16:26 - 2020-12-13 16:26 - 000000000 ____D C:\ProgramData\Thunder Network
2020-12-13 16:26 - 2020-12-13 16:26 - 000000000 _____ C:\Users\Dorota\AppData\Roaming\1607876780367-wal
2020-12-12 16:20 - 2020-12-12 16:20 - 000000020 _____ C:\WINDOWS\mafosav.INI
2020-12-12 16:18 - 2020-12-12 16:30 - 000000051 _____ C:\WINDOWS\forevermopt.INI