CloseProcesses: CreateRestorePoint: EmptyTemp: File: C:\Windows\system32\winlogui.exe VirusTotal: C:\Windows\system32\svchost.exe VirusTotal: C:\Windows\SysWOW64\svchost.exe HKLM\...\Policies\Explorer: [HideSCAHealth] 1 HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA HKU\S-1-5-21-2327329111-4195501157-308640029-1002\...\MountPoints2: {2e0602f4-2d6d-11ea-8a5b-f0761c17580f} - "E:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2327329111-4195501157-308640029-1002\...\MountPoints2: {967e991c-40dd-11ea-8a5e-f0761c17580f} - "E:\HiSuiteDownLoader.exe" HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> Task: {18A349FE-6384-4B4C-84C6-24338949AE0A} - System32\Tasks\Microsoft\Windows\Application Experience\StartupCheckLibrary => rundll32.exe StartupCheckLibrary.dll,DllMainRunLibrary <==== UWAGA Task: {5C4C2529-FC92-4E79-9442-BADD7B8D74DB} - System32\Tasks\Opera scheduled Autoupdate 1577790336 => C:\Users\greh2\AppData\Local\Programs\Opera\launcher.exe [1517592 2020-06-18] (Opera Software AS -> Opera Software) Task: {8075763C-7BFD-49DF-86A4-AED1A6EBFFB9} - System32\Tasks\Microsoft\Windows\Windows Error Reporting\winrmsrv => C:\Windows\system32\winrmsrv.exe [731136 2020-06-27] (Microsoft Corporation) [Brak podpisu cyfrowego] <==== UWAGA Task: {9A8680D3-ECEB-4584-834A-D77D3D9D4446} - System32\Tasks\Microsoft\Windows\WDI\SrvHost => rundll32.exe winscomrssrv.dll,SrvMainHost <==== UWAGA Task: {D6BB9E81-A65D-481E-8A9D-DF93403927B3} - System32\Tasks\Microsoft\Windows\Wininet\Winlogui => C:\Windows\system32\winlogui.exe [750592 2020-06-27] (Microsoft Corporation) [Brak podpisu cyfrowego] Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe Tcpip\..\Interfaces\{a99d9f13-2466-4947-8a72-a329a1cd9562}: [DhcpNameServer] 31.11.202.254 37.8.214.2 Tcpip\..\Interfaces\{b5992ae6-2b56-4381-8039-754991138cb1}: [NameServer] 8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{b5992ae6-2b56-4381-8039-754991138cb1}: [DhcpNameServer] 31.11.202.254 37.8.214.2 Tcpip\..\Interfaces\{dd324703-f371-4de2-b6c6-13ad850bdcd9}: [DhcpNameServer] 31.11.202.254 37.8.214.2 S2 wuauserv; C:\Windows\system32\svchost.exe [53744 2019-03-19] (Microsoft Windows Publisher -> Microsoft Corporation) <==== UWAGA (Brak ServiceDLL) S2 wuauserv; C:\Windows\SysWOW64\svchost.exe [45448 2019-03-19] (Microsoft Windows Publisher -> Microsoft Corporation) <==== UWAGA (Brak ServiceDLL) S2 QHActiveDefense; "C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe" [X] S3 QHProtected; "C:\Program Files (x86)\360\Total Security\safemon\WscReg.exe" [X] 2020-06-22 14:00 - 2019-12-31 13:05 - 000004248 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1577790336 ContextMenuHandlers1: [SD360] -> {086F171D-5ED1-4ED2-B736-CFF3AD6A128E} => C:\Program Files (x86)\360\Total Security\MenuEx64.dll -> Brak pliku ContextMenuHandlers4: [SD360] -> {086F171D-5ED1-4ED2-B736-CFF3AD6A128E} => C:\Program Files (x86)\360\Total Security\MenuEx64.dll -> Brak pliku ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Brak pliku ContextMenuHandlers6: [SD360] -> {086F171D-5ED1-4ED2-B736-CFF3AD6A128E} => C:\Program Files (x86)\360\Total Security\MenuEx64.dll -> Brak pliku FirewallRules: [TCP Query User{15300500-C747-40F4-B055-94A76B3E036F}C:\users\greh2\appdata\local\programs\opera\65.0.3467.78\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\65.0.3467.78\opera.exe => Brak pliku FirewallRules: [UDP Query User{9E838389-9C41-4F85-AB35-030FF729228A}C:\users\greh2\appdata\local\programs\opera\65.0.3467.78\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\65.0.3467.78\opera.exe => Brak pliku FirewallRules: [{8C571959-4E4E-4E7C-8D65-8C7115DBF81A}] => (Block) C:\users\greh2\appdata\local\programs\opera\65.0.3467.78\opera.exe => Brak pliku FirewallRules: [{21509E82-B96B-430D-A13B-202D723BA112}] => (Block) C:\users\greh2\appdata\local\programs\opera\65.0.3467.78\opera.exe => Brak pliku FirewallRules: [{3ABF7104-B363-453A-AC21-49DD40861E69}] => (Allow) C:\Program Files (x86)\360\Total Security\softmgr\360InstantSetup.exe => Brak pliku FirewallRules: [{811E1F32-6328-44C9-8D58-77A61425250D}] => (Allow) C:\Program Files (x86)\360\Total Security\softmgr\360InstantSetup.exe => Brak pliku FirewallRules: [TCP Query User{BBF8B65B-B8E9-4FFA-AFD2-B5ACD0D1D691}C:\users\greh2\appdata\local\programs\opera\66.0.3515.44\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\66.0.3515.44\opera.exe => Brak pliku FirewallRules: [UDP Query User{7D0B1641-7AD9-4D5A-8205-E43A26BB6606}C:\users\greh2\appdata\local\programs\opera\66.0.3515.44\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\66.0.3515.44\opera.exe => Brak pliku FirewallRules: [{3313A3DF-56B0-4A2E-9EFF-E0EC7697A182}] => (Allow) C:\Program Files (x86)\360\Total Security\LiveUpdate360.exe => Brak pliku FirewallRules: [{260854DF-961F-4AE1-B7BA-97DECF34A46C}] => (Allow) C:\Program Files (x86)\360\Total Security\LiveUpdate360.exe => Brak pliku FirewallRules: [TCP Query User{06AD7D9B-F1BC-4CA9-BF73-06B853008E7A}C:\users\greh2\appdata\local\programs\opera\66.0.3515.72\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\66.0.3515.72\opera.exe => Brak pliku FirewallRules: [UDP Query User{2648CE49-D6D1-4FFD-AD5E-41D108D4A168}C:\users\greh2\appdata\local\programs\opera\66.0.3515.72\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\66.0.3515.72\opera.exe => Brak pliku FirewallRules: [TCP Query User{290A562B-1E26-4B14-BDDF-571D69C652BE}C:\users\greh2\appdata\local\programs\opera\66.0.3515.103\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\66.0.3515.103\opera.exe => Brak pliku FirewallRules: [UDP Query User{6FF004FE-ECAA-4FC9-AA15-B18DE72D2732}C:\users\greh2\appdata\local\programs\opera\66.0.3515.103\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\66.0.3515.103\opera.exe => Brak pliku FirewallRules: [TCP Query User{22C5DC48-EC5F-4216-82F5-D68F054821F9}C:\users\greh2\appdata\local\programs\opera\66.0.3515.103\opera.exe] => (Block) C:\users\greh2\appdata\local\programs\opera\66.0.3515.103\opera.exe => Brak pliku FirewallRules: [UDP Query User{6C671A26-B160-4E9D-B619-6EE692CB4C30}C:\users\greh2\appdata\local\programs\opera\66.0.3515.103\opera.exe] => (Block) C:\users\greh2\appdata\local\programs\opera\66.0.3515.103\opera.exe => Brak pliku FirewallRules: [TCP Query User{DB7A2943-B13B-4634-8B47-41E89AA39840}C:\users\greh2\appdata\local\programs\opera\66.0.3515.115\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\66.0.3515.115\opera.exe => Brak pliku FirewallRules: [UDP Query User{AE9A09B2-E254-4A23-95BC-3A7261F990C1}C:\users\greh2\appdata\local\programs\opera\66.0.3515.115\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\66.0.3515.115\opera.exe => Brak pliku FirewallRules: [TCP Query User{BE677178-4F2D-403E-9583-25A331FE4383}C:\users\greh2\appdata\local\programs\opera\67.0.3575.53\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\67.0.3575.53\opera.exe => Brak pliku FirewallRules: [UDP Query User{F9FCA29A-CFEC-4C0B-BB0C-ABFEAB8AF36A}C:\users\greh2\appdata\local\programs\opera\67.0.3575.53\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\67.0.3575.53\opera.exe => Brak pliku FirewallRules: [{DBB0F38D-F37F-4972-BEE3-39083C9DCE90}] => (Block) C:\users\greh2\appdata\local\programs\opera\67.0.3575.53\opera.exe => Brak pliku FirewallRules: [{1DEF282D-F2C5-48B9-8A84-9CA3B849D532}] => (Block) C:\users\greh2\appdata\local\programs\opera\67.0.3575.53\opera.exe => Brak pliku FirewallRules: [{5C1A8DC9-1E6E-4AAD-9950-F453E01679AE}] => (Allow) C:\Program Files (x86)\360\Total Security\LiveUpdate360.exe => Brak pliku FirewallRules: [{34742B64-C06F-46AE-A200-22C6DB1877D9}] => (Allow) C:\Program Files (x86)\360\Total Security\LiveUpdate360.exe => Brak pliku FirewallRules: [TCP Query User{7DC2660D-3DFA-4D41-8991-EBC7D38AEF59}C:\users\greh2\appdata\local\programs\opera\67.0.3575.79\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\67.0.3575.79\opera.exe => Brak pliku FirewallRules: [UDP Query User{99D0BF2B-CD2B-4ADB-8FF7-CD17DC8ABDB8}C:\users\greh2\appdata\local\programs\opera\67.0.3575.79\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\67.0.3575.79\opera.exe => Brak pliku FirewallRules: [{4420F4D1-032B-4DD7-8F92-1A1A0861148C}] => (Block) C:\users\greh2\appdata\local\programs\opera\67.0.3575.79\opera.exe => Brak pliku FirewallRules: [{F55766F8-1882-476B-BA39-8C1E20406B9E}] => (Block) C:\users\greh2\appdata\local\programs\opera\67.0.3575.79\opera.exe => Brak pliku FirewallRules: [TCP Query User{2171C184-E4C4-4B87-BFF3-D2DD5581B2C8}C:\users\greh2\appdata\local\programs\opera\67.0.3575.97\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\67.0.3575.97\opera.exe => Brak pliku FirewallRules: [UDP Query User{7341499A-778B-4C5B-A74D-286736C316FB}C:\users\greh2\appdata\local\programs\opera\67.0.3575.97\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\67.0.3575.97\opera.exe => Brak pliku FirewallRules: [{43E31EDD-BF21-4342-A480-6F21929258B7}] => (Block) C:\users\greh2\appdata\local\programs\opera\67.0.3575.97\opera.exe => Brak pliku FirewallRules: [{59D4ACA8-5F67-44EE-BF5D-4DA082B28B7C}] => (Block) C:\users\greh2\appdata\local\programs\opera\67.0.3575.97\opera.exe => Brak pliku FirewallRules: [TCP Query User{7170341D-A26F-406D-84B3-61BA6425A967}C:\users\greh2\appdata\local\programs\opera\67.0.3575.115\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\67.0.3575.115\opera.exe => Brak pliku FirewallRules: [UDP Query User{52E51FBE-48B9-49E3-9250-38B7435B7F5C}C:\users\greh2\appdata\local\programs\opera\67.0.3575.115\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\67.0.3575.115\opera.exe => Brak pliku FirewallRules: [{CE84137F-FC48-45BE-85D5-A9C77CAA9644}] => (Block) C:\users\greh2\appdata\local\programs\opera\67.0.3575.115\opera.exe => Brak pliku FirewallRules: [{0D02E9B7-E0E6-4515-958B-52F52298EA3B}] => (Block) C:\users\greh2\appdata\local\programs\opera\67.0.3575.115\opera.exe => Brak pliku FirewallRules: [{9EB7CC52-67A2-42E4-89F0-BBD6E25ADD0A}] => (Allow) C:\Users\greh2\AppData\Roaming\Zoom\bin\airhost.exe => Brak pliku FirewallRules: [TCP Query User{2B57E6E0-3F7C-4459-A5BC-EB85146D6EF6}C:\users\greh2\appdata\local\programs\opera\67.0.3575.137\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\67.0.3575.137\opera.exe => Brak pliku FirewallRules: [UDP Query User{1358E5C7-50B8-4746-96F2-EFAC6B39FDDC}C:\users\greh2\appdata\local\programs\opera\67.0.3575.137\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\67.0.3575.137\opera.exe => Brak pliku FirewallRules: [{233DA749-0E9C-4626-BDA3-A1B784188E17}] => (Block) C:\users\greh2\appdata\local\programs\opera\67.0.3575.137\opera.exe => Brak pliku FirewallRules: [{BE16CE34-33D1-4050-9913-9C0CF0A7B57B}] => (Block) C:\users\greh2\appdata\local\programs\opera\67.0.3575.137\opera.exe => Brak pliku FirewallRules: [TCP Query User{8B59A434-E89F-494C-9A36-670DD6CB521E}C:\users\greh2\appdata\local\programs\opera\68.0.3618.63\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\68.0.3618.63\opera.exe => Brak pliku FirewallRules: [UDP Query User{365ABE62-0523-4331-B58A-35E2558CD6FE}C:\users\greh2\appdata\local\programs\opera\68.0.3618.63\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\68.0.3618.63\opera.exe => Brak pliku FirewallRules: [{27C0C90F-B12A-44CA-AA93-45E2CBEE8367}] => (Block) C:\users\greh2\appdata\local\programs\opera\68.0.3618.63\opera.exe => Brak pliku FirewallRules: [{EAAD601A-AD9E-469A-B8DA-18FA7A4F8D85}] => (Block) C:\users\greh2\appdata\local\programs\opera\68.0.3618.63\opera.exe => Brak pliku FirewallRules: [TCP Query User{1A6E08C0-355F-4773-B102-41D467C7C963}C:\users\greh2\appdata\local\programs\opera\68.0.3618.104\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\68.0.3618.104\opera.exe => Brak pliku FirewallRules: [UDP Query User{B90A05C6-D83F-4235-8CBD-5B93553ABF74}C:\users\greh2\appdata\local\programs\opera\68.0.3618.104\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\68.0.3618.104\opera.exe => Brak pliku FirewallRules: [{C8FF3A9C-C46E-4F78-B2BC-B26854F3B9CC}] => (Block) C:\users\greh2\appdata\local\programs\opera\68.0.3618.104\opera.exe => Brak pliku FirewallRules: [{DB295E5E-1CCE-4F46-AA42-7231A89578C2}] => (Block) C:\users\greh2\appdata\local\programs\opera\68.0.3618.104\opera.exe => Brak pliku FirewallRules: [TCP Query User{FEA785A3-1E6C-4FE3-A17A-D5E72456B5CD}C:\users\greh2\appdata\local\programs\opera\68.0.3618.125\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\68.0.3618.125\opera.exe => Brak pliku FirewallRules: [UDP Query User{81778D22-0FB4-4AF0-8041-51BEAE72B10D}C:\users\greh2\appdata\local\programs\opera\68.0.3618.125\opera.exe] => (Allow) C:\users\greh2\appdata\local\programs\opera\68.0.3618.125\opera.exe => Brak pliku FirewallRules: [{04AFC5ED-CAF2-4EFB-8250-AA5D351766D6}] => (Block) C:\users\greh2\appdata\local\programs\opera\68.0.3618.125\opera.exe => Brak pliku FirewallRules: [{A11DF1A6-9D31-4402-B5A3-F56E361E3285}] => (Block) C:\users\greh2\appdata\local\programs\opera\68.0.3618.125\opera.exe => Brak pliku FirewallRules: [{C1C37B2A-1D54-40C2-AAB5-F39AA49838DA}] => (Allow) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe => Brak pliku FirewallRules: [{B3534147-DCFB-44BF-8289-5FED748F54E9}] => (Allow) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe => Brak pliku FirewallRules: [{D7F92922-DD5F-4DCC-A649-F64CC6F5105F}] => (Allow) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe => Brak pliku FirewallRules: [{FBF7E768-1CFC-40EB-ACA6-2A69A9519D8E}] => (Allow) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe => Brak pliku RemoveProxy: