CloseProcesses:
CreateRestorePoint:
EmptyTemp:
HKU\S-1-5-21-1680573326-224836866-1369222185-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-1680573326-224836866-1369222185-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssText3d.scr [221184 2019-03-19] (Microsoft Corporation) [Brak podpisu cyfrowego]
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA
Winsock: Catalog5 01 C:\WINDOWS\SysWOW64\napinsp.dll [54784 2019-03-19] (Microsoft Corporation) [Brak podpisu cyfrowego]
Winsock: Catalog5 02 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70656 2019-03-19] (Microsoft Corporation) [Brak podpisu cyfrowego]
Winsock: Catalog5 03 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70656 2019-03-19] (Microsoft Corporation) [Brak podpisu cyfrowego]
Winsock: Catalog5 05 C:\WINDOWS\SysWOW64\winrnr.dll [23552 2019-03-19] (Microsoft Corporation) [Brak podpisu cyfrowego]
Winsock: Catalog5 06 C:\WINDOWS\SysWOW64\NLAapi.dll [70144 2019-03-19] (Microsoft Corporation) [Brak podpisu cyfrowego]
Winsock: Catalog5 07 C:\WINDOWS\SysWOW64\wshbth.dll [50688 2019-03-19] (Microsoft Corporation) [Brak podpisu cyfrowego]
Winsock: Catalog5-x64 01 C:\Windows\system32\napinsp.dll [68096 2019-03-19] (Microsoft Corporation) [Brak podpisu cyfrowego]
Winsock: Catalog5-x64 02 C:\Windows\system32\pnrpnsp.dll [86528 2019-03-19] (Microsoft Corporation) [Brak podpisu cyfrowego]
Winsock: Catalog5-x64 03 C:\Windows\system32\pnrpnsp.dll [86528 2019-03-19] (Microsoft Corporation) [Brak podpisu cyfrowego]
Winsock: Catalog5-x64 05 C:\Windows\System32\winrnr.dll [31232 2019-03-19] (Microsoft Corporation) [Brak podpisu cyfrowego]
Winsock: Catalog5-x64 06 C:\Windows\system32\NLAapi.dll [93184 2019-10-10] (Microsoft Corporation) [Brak podpisu cyfrowego]
Winsock: Catalog5-x64 07 C:\Windows\system32\wshbth.dll [64000 2019-03-19] (Microsoft Corporation) [Brak podpisu cyfrowego]
Tcpip\..\Interfaces\{36e5efc0-eee8-4a74-93b8-54b7e158aa46}: [DhcpNameServer] 192.168.1.254
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
BHO: Brak nazwy -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> Brak pliku
U3 aswbdisk; Brak ImagePath
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Brak pliku
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} =>  -> Brak pliku
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Brak pliku
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} =>  -> Brak pliku
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} =>  -> Brak pliku
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} =>  -> Brak pliku
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Brak pliku
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} =>  -> Brak pliku
AlternateDataStreams: C:\WINDOWS\system32\AERTAC64.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\AERTAR64.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\btcoinst.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\BtContextMenu.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\cdpreference.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\centel.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\DdcWnsListener.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\difx64.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\EXT2800.DLL:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\gfxSrvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\GfxUI.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\hccutils.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\hkcmd.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\IccLibDll_x64.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\ig4icd64.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igd10umd64.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igdde64.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igdumd64.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfx11cmrt64.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxcmjit64.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxcmrt64.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxCoIn_v4459.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxcpl.cpl:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxdev.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\IGFXDEVLib.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxdo.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxexps.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxext.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxpers.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxpph.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrara.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrchs.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrcht.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrcsy.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrdan.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrdeu.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrell.lrc:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\igfxrenu.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxresn.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxress.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrfin.lrc:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\igfxrfra.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrheb.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrhrv.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrhun.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrita.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrjpn.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrkor.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrnld.lrc:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\igfxrnor.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrplk.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrptb.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrptg.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrrom.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrrus.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrsky.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrslv.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrsve.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrtha.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxrtrk.lrc:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxsrvc.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxsrvc.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxTMM.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\igfxtray.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\iglhcp64.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\iglhsip64.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\indexeddbserver.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\JpgLib.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO20.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO30.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioEQ64.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\MaxxVolumeSDAPO.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\mshtmlmedia.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\OV550Ext.ax:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\OvtFBoot.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\RdpGroupPolicyExtension.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\RtCRX64.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\RTNUninst64.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\SETB740.tmp:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\UtcResources.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\OvtWia.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\PCDLIB32.DLL:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\RtCRU64.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\comctl32.ocx:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_43.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\GPhotos.scr:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\HexUniRTFBox.ocx:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\ig4icd32.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\igd10umd32.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\igdde32.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\igdumd32.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\igfx11cmrt32.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\igfxcmjit32.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\igfxcmrt32.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\igfxdv32.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\igfxexps32.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\iglhcp32.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\iglhsip32.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\ijl15.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\indexeddbserver.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\MRT.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\mshtmlmedia.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\SysWOW64\msmapi32.ocx:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\PaintX.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\PDFDocScout.DLL:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\unicows.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\WISPTIS.EXE:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\athrx.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\btath_bus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\CFRMD.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\FilmScan.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\igdkmd64.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\pccsmcfdx64.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\Rt64win7.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\TeeDriverW8x64.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\SysWOW64\Drivers\afc.sys:$CmdTcID [64]
AlternateDataStreams: C:\Users\laptop\Documents\KeePass.exe:$CmdTcID [64]
RemoveProxy:
CMD: netsh winsock reset