CloseProcesses:
CreateRestorePoint:
EmptyTemp:
File: C:\ProgramData\Microsoft\Windows\OFFICEICON.vbs
HKU\S-1-5-21-4085276616-2606691923-1543173674-1001\...\MountPoints2: {b7bf3b92-b7d8-11e6-be79-342387f10a18} - "G:\.\StartModem.exe" 
Task: {42A62381-52C7-440A-A780-D5720112C99F} - System32\Tasks\OFFICE2013ACT => C:\ProgramData\Microsoft\Windows\OFFICEICON.vbs [133 2012-03-08] () [Brak podpisu cyfrowego]
Task: {511733F1-89E5-471A-BBAC-5148C1808318} - \Microsoft\Windows\UNP\RunCampaignManager -> Brak pliku <==== UWAGA
Tcpip\..\Interfaces\{0cb06889-02e4-4fda-b803-6e736c13c4ed}: [NameServer] 212.2.96.51 
Tcpip\..\Interfaces\{1fb4ad0f-b7fb-4813-92b8-b2ee914bcd75}: [DhcpNameServer] 169.254.131.49
Tcpip\..\Interfaces\{42309fa9-4cb9-48c6-b604-5c49dec7107b}: [NameServer] 212.2.96.51 
Tcpip\..\Interfaces\{67402f70-633b-40e9-9c85-826ac611294e}: [DhcpNameServer] 10.10.10.254 8.8.8.8
Tcpip\..\Interfaces\{7871c9eb-7f65-465d-8656-c595cbe17e85}: [NameServer] 212.2.127.253 
HKU\S-1-5-21-4085276616-2606691923-1543173674-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.pl/
HKU\S-1-5-21-4085276616-2606691923-1543173674-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-4085276616-2606691923-1543173674-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
SearchScopes: HKU\S-1-5-21-4085276616-2606691923-1543173674-1001 -> DefaultScope {E34CBBAB-D786-40A6-9BFC-68CBEC094D74} URL = 
SearchScopes: HKU\S-1-5-21-4085276616-2606691923-1543173674-1001 -> {E34CBBAB-D786-40A6-9BFC-68CBEC094D74} URL = 
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => nie znaleziono
FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\mcafee\msc\npMcSnFFPl64.dll [Brak pliku]
FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll [Brak pliku]
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Brak pliku
C:\Users\Default\Favorites\AmazonBrowserBar.url
C:\Users\Default User\Favorites\AmazonBrowserBar.url
C:\Users\Emblemat\Favorites\AmazonBrowserBar.url
RemoveProxy: