CloseProcesses: CreateRestorePoint: EmptyTemp: HKU\S-1-5-21-2156417736-209035461-2079550513-1001\...\MountPoints2: {19f496d8-f16b-11e9-b95e-ec8eb53df2b0} - "F:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2156417736-209035461-2079550513-1001\...\MountPoints2: {a29b86e7-d500-11e7-b933-0c5b8f279a64} - "G:\HiSuiteDownLoader.exe" HKU\S-1-5-21-2156417736-209035461-2079550513-1001\...\MountPoints2: {aa33e483-8d2a-11ea-b963-ec8eb53df2b0} - "F:\HiSuiteDownLoader.exe" FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA CHR HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA Task: {2FFE748F-BC65-4CC8-866C-4FACCDABF37E} - System32\Tasks\Opera scheduled Autoupdate 1552368380 => C:\Users\Olga\AppData\Local\Programs\Opera\launcher.exe Task: {ADAEE47E-489F-46BA-B082-3D83BC4ADF4A} - System32\Tasks\{66EB05F7-27AE-48F2-906D-46579FDF11AA} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Office Setup Controller\setup.exe" -c /uninstall PROPLUS /dll OSETUP.DLL Task: {DBC9353C-417E-47DB-BB25-6DE15993C07C} - \Microsoft\Windows\UNP\RunCampaignManager -> Brak pliku <==== UWAGA Tcpip\..\Interfaces\{03b588cf-8005-4e24-a13e-f20939b6334e}: [DhcpNameServer] 192.168.1.1 192.168.1.1 Tcpip\..\Interfaces\{0b43d67e-b89f-4f49-a09e-95a689f2fc62}: [DhcpNameServer] 192.168.1.1 192.168.1.1 Tcpip\..\Interfaces\{7a25d4ed-d56b-429d-b22e-150d744ca1a7}: [DhcpNameServer] 192.168.1.1 192.168.1.1 Tcpip\..\Interfaces\{9b116fcd-d318-4172-abd8-8de4efe3b6a1}: [NameServer] 194.204.159.1 194.204.152.34 Tcpip\..\Interfaces\{e9f5627a-ff56-4a3b-8763-9565babe24e5}: [DhcpNameServer] 192.168.1.1 192.168.1.1 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp15-comm.msn.com/?pc=HRTE HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?bcutc=sp-006 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp15-comm.msn.com/?pc=HRTE HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp15-comm.msn.com/?pc=HRTE HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp15-comm.msn.com/?pc=HRTE HKU\S-1-5-21-2156417736-209035461-2079550513-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms} HKU\S-1-5-21-2156417736-209035461-2079550513-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?bcutc=sp-006 SearchScopes: HKLM -> {7033E60F-42FE-4794-B094-D0B1DB560589} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms} SearchScopes: HKLM-x32 -> {7033E60F-42FE-4794-B094-D0B1DB560589} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms} SearchScopes: HKU\S-1-5-21-2156417736-209035461-2079550513-1001 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms} SearchScopes: HKU\S-1-5-21-2156417736-209035461-2079550513-1001 -> {1BBAAAD7-8B68-4BB1-8882-366A0EF05A68} URL = hxxp://www.nav-pl.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-21-2156417736-209035461-2079550513-1001 -> {7033E60F-42FE-4794-B094-D0B1DB560589} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKU\S-1-5-21-2156417736-209035461-2079550513-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms} Edge HomeButtonPage: HKU\S-1-5-21-2156417736-209035461-2079550513-1001 -> hxxp://www.nav-pl.com/ CHR HomePage: Default -> hxxp://www.nav-pl.com/ CHR NewTab: Default -> Not-active:"chrome-extension://gfcicjlflhgfajlbdeccghlancpecglg/product.html" S3 AvastSecureBrowserElevationService; "C:\Program Files (x86)\AVAST Software\Browser\Application\77.2.2152.121\elevation_service.exe" [X] FirewallRules: [{5611282F-5484-41B8-B07B-00046CB59754}] => (Allow) C:\Users\Olga\AppData\Local\Programs\Opera\58.0.3135.132\opera.exe => Brak pliku FirewallRules: [{2D3D2AD8-B590-4A49-865F-71110FFD6247}] => (Allow) C:\Users\Olga\AppData\Local\Programs\Opera\58.0.3135.127\opera.exe => Brak pliku FirewallRules: [{4B3F3578-8699-4B89-840A-81AD3C6F1184}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe => Brak pliku RemoveProxy: