CreateRestorePoint: CloseProcesses: EmptyTemp: HKLM\...\Run: [] => [X] HKLM-x32\...\Run: [] => [X] HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Ograniczenia <==== UWAGA HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Ograniczenia <==== UWAGA HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Ograniczenia <==== UWAGA HKU\S-1-5-21-492817890-3778544260-4182791962-1001\...\Run: [] => [X] HKU\S-1-5-21-492817890-3778544260-4182791962-1001\...\Run: [NoxMultiPlayer] => "D:\Program Files\Nox\bin\MultiPlayerManager.exe" -startSource:auto_start (Brak pliku) HKU\S-1-5-21-492817890-3778544260-4182791962-1001\...\Run: [AirBackupHelper] => C:\Program Files (x86)\iMobie\AnyTrans\AirBackupHelper.exe (Brak pliku) HKU\S-1-5-21-492817890-3778544260-4182791962-1001\...\Run: [AnyTransToolHelper] => C:\Program Files (x86)\iMobie\AnyTrans\AnyTransToolHelper.exe (Brak pliku) HKU\S-1-5-21-492817890-3778544260-4182791962-1001\...\MountPoints2: {d9b7f043-4ee9-11ed-aac8-040e3c930de6} - "F:\AutoRun.exe" Startup: C:\Users\dsawik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ipconfig.bat.txt [2022-10-01] () <==== UWAGA [zerobajtowy plik/folder] GroupPolicy-Firefox: Ograniczenia <==== UWAGA Task: {0F4AE263-BC15-442E-92A0-2429F5EADD0E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe /f (Brak pliku) Task: {7C9773B2-13E9-49C3-A3FD-267BD744D6C4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe /send (Brak pliku) Task: {B55F8095-8678-4F50-A6D3-9F980248B69B} - System32\Tasks\Opera scheduled Autoupdate 1663864871 => C:\Users\dsawik\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (Brak pliku) Task: {E3639748-FC04-420C-BB55-112F8378D432} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Opt-in For HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF_Utils.exe /SetTaskbarTask (Brak pliku) Tcpip\..\Interfaces\{c6a2694f-42a9-4b3e-a4fe-dc27e49e7bb5}: [DhcpNameServer] 172.20.10.1 S3 Browser; %SystemRoot%\System32\browser.dll [X] S3 rsDwf; \SystemRoot\system32\DRIVERS\rsDwf.sys [X] ContextMenuHandlers2: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => -> Brak pliku ContextMenuHandlers3: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => -> Brak pliku FirewallRules: [TCP Query User{13370934-D955-4066-BFC8-AF2B0E05B4DD}D:\need for speed heat\needforspeedheat.exe] => (Block) D:\need for speed heat\needforspeedheat.exe => Brak pliku FirewallRules: [UDP Query User{AE421BC9-CD8D-4C7E-938F-22B85249A76E}D:\need for speed heat\needforspeedheat.exe] => (Block) D:\need for speed heat\needforspeedheat.exe => Brak pliku FirewallRules: [{1BD570CC-8056-49DA-A261-A13CD8731638}] => (Allow) C:\GOG Games\Mortal Kombat Trilogy\MKTRILW.exe => Brak pliku FirewallRules: [TCP Query User{AE4C2806-E0DC-435E-ABCC-0D0773E9F1EA}E:\fallout 4\creationkit.exe] => (Block) E:\fallout 4\creationkit.exe => Brak pliku FirewallRules: [UDP Query User{3CA946B3-725E-40A5-9566-994D129793A2}E:\fallout 4\creationkit.exe] => (Block) E:\fallout 4\creationkit.exe => Brak pliku FirewallRules: [TCP Query User{B424EBC8-39FA-4E31-83BF-14C30779BC08}D:\far cry 2\bin\farcry2.exe] => (Block) D:\far cry 2\bin\farcry2.exe => Brak pliku FirewallRules: [UDP Query User{B8F54893-9948-4C62-927F-8CB74AE5CD46}D:\far cry 2\bin\farcry2.exe] => (Block) D:\far cry 2\bin\farcry2.exe => Brak pliku FirewallRules: [TCP Query User{F3CDCFB7-F8AB-4D05-AE9A-B779EDD43DB3}E:\crysis remastered\bin64\crysisremastered.exe] => (Block) E:\crysis remastered\bin64\crysisremastered.exe => Brak pliku FirewallRules: [UDP Query User{9A372D6B-10BE-467C-BA16-40BCD29A4C73}E:\crysis remastered\bin64\crysisremastered.exe] => (Block) E:\crysis remastered\bin64\crysisremastered.exe => Brak pliku FirewallRules: [{30715281-5e40-48d1-a4ed-880d81242f9d}] => (Allow) C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe => Brak pliku FirewallRules: [{4837E7CB-16AD-4BE4-A9BE-19ECA6170700}] => (Allow) C:\Users\dsawik\AppData\Local\Programs\Opera\79.0.4143.22\opera.exe => Brak pliku FirewallRules: [{B2833A00-F6A4-4F97-9E58-4FB0C39A38E1}] => (Allow) C:\Users\dsawik\AppData\Local\Programs\Opera\90.0.4480.84\opera.exe => Brak pliku FirewallRules: [{5066F02A-6330-4F1D-95F0-7F3D5DEEA96F}] => (Allow) D:\Program Files\Nox\bin\Nox.exe => Brak pliku FirewallRules: [{BF5F95BC-4512-4933-A4A6-9DA24C303148}] => (Allow) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe => Brak pliku FirewallRules: [TCP Query User{B25DEDAA-20FF-4DCD-A2CF-E4DEA04CBADF}D:\resident evil village\re8.exe] => (Block) D:\resident evil village\re8.exe => Brak pliku FirewallRules: [UDP Query User{7CAC4D77-AA79-44F1-BD45-E50868471D34}D:\resident evil village\re8.exe] => (Block) D:\resident evil village\re8.exe => Brak pliku FirewallRules: [TCP Query User{91FEB45A-D126-4985-8810-D8268A1A0780}D:\murdered soul suspect\binaries\win64\murdered.exe] => (Block) D:\murdered soul suspect\binaries\win64\murdered.exe => Brak pliku FirewallRules: [UDP Query User{F51A0F26-2BAA-460A-8060-E4185DF4E36D}D:\murdered soul suspect\binaries\win64\murdered.exe] => (Block) D:\murdered soul suspect\binaries\win64\murdered.exe => Brak pliku FirewallRules: [{FE38C857-CAE1-413E-B73E-6A8F5293F5AA}] => (Allow) C:\Program Files (x86)\iMobie\AnyTrans\xldownload\download\MiniThunderPlatform.exe => Brak pliku FirewallRules: [{B59BF5CE-EE1A-4873-8466-B2BF3DF16437}] => (Allow) C:\Program Files (x86)\iMobie\AnyTrans\xldownload\download\MiniThunderPlatform.exe => Brak pliku FirewallRules: [TCP Query User{9A273C09-A0D1-4902-9980-944EA07247BD}C:\program files (x86)\imobie\anytrans\anytrans.exe] => (Block) C:\program files (x86)\imobie\anytrans\anytrans.exe => Brak pliku FirewallRules: [UDP Query User{24E34195-0A0C-40C6-B569-ABB660987B40}C:\program files (x86)\imobie\anytrans\anytrans.exe] => (Block) C:\program files (x86)\imobie\anytrans\anytrans.exe => Brak pliku FirewallRules: [TCP Query User{B0B4DEDF-420C-4D08-BBC7-CCE093BD8FC3}C:\program files (x86)\imobie\anytrans\airbackuphelper.exe] => (Block) C:\program files (x86)\imobie\anytrans\airbackuphelper.exe => Brak pliku FirewallRules: [UDP Query User{8BA11BCF-7F0F-4E4E-9519-39C02F821245}C:\program files (x86)\imobie\anytrans\airbackuphelper.exe] => (Block) C:\program files (x86)\imobie\anytrans\airbackuphelper.exe => Brak pliku FirewallRules: [{480C6602-A8F0-4CD4-AA2D-AB8069EA5E9D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.65.78.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Brak pliku FirewallRules: [{9E6EFAB9-EFA3-4B1E-B67D-E4ECCBA59176}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.65.78.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Brak pliku FirewallRules: [{01DF0815-250E-4BEF-A399-C43432F6D46B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.65.78.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Brak pliku FirewallRules: [{C9B70DF6-3CB5-42AC-9DE3-6A0E1C192420}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.65.78.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Brak pliku