CloseProcesses:
CreateRestorePoint:
EmptyTemp:
GroupPolicy: Ograniczenia ? <==== UWAGA
Task: {06EEFC1C-A28D-4C36-B212-DCCDA12F3140} - \Lenovo\ImController\TimeBasedEvents\97794bb1-0399-4947-a9db-25722cf05223 -> Brak pliku <==== UWAGA
Task: {40257340-9EE8-4A16-B7D6-B9925BF78BFF} - \Lenovo\ImController\TimeBasedEvents\a4889a1f-ae25-4f71-b098-a972e23588fe -> Brak pliku <==== UWAGA
Task: {6C1048EA-EFF2-41D3-8643-ED5EDDAC66CF} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> Brak pliku <==== UWAGA
Task: {78F78FEB-5128-403C-A8A7-219BE43EEFF9} - \Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask -> Brak pliku <==== UWAGA
Task: {7AE0ABA9-C5CC-42E7-841A-3010E9AEAC2E} - \Lenovo\ImController\Lenovo iM Controller Monitor -> Brak pliku <==== UWAGA
Task: {7BE5E091-B83F-428B-B5A4-650AF1105B17} - \Lenovo\ImController\TimeBasedEvents\8e16cf2e-e711-4c77-9595-4daacb648228 -> Brak pliku <==== UWAGA
Task: {9FEED9AB-B2FB-4047-8919-71C005940F84} - \Microsoft\Windows\UNP\RunCampaignManager -> Brak pliku <==== UWAGA
Task: {DC300446-106C-48CD-9C57-72BA13425767} - System32\Tasks\{231DE8CD-F4F8-464B-8836-CD98CD2D7152} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\EA Sports\FIFA 08\FIFA08.exe" -d "C:\Program Files (x86)\EA Sports\FIFA 08"
Task: {F30AC6AD-F944-4A8B-B313-899416249EC1} - \Lenovo\ImController\TimeBasedEvents\4bb871ce-d2df-42b2-bdca-ee74ae66a07e -> Brak pliku <==== UWAGA
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
Tcpip\..\Interfaces\{aa5f17de-1801-4e9a-b6d5-75c19adc3e2a}: [DhcpNameServer] 169.254.224.91
Tcpip\..\Interfaces\{c5320542-7148-442d-9d26-8035616d2df9}: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{d939a437-b118-42ed-acef-63b7e927cf77}: [DhcpNameServer] 10.8.2.1
CHR Notifications: Default -> hxxps://www1.news-back.com
S2 CCSDK; "C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe" [X]
S2 ImControllerService; %SystemRoot%\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [X]
2020-10-19 16:51 - 2018-03-20 23:38 - 000000266 __RSH C:\ProgramData\ntuser.pol
CMD: type C:\Users\1\AppData\Roaming\12.bat
CMD: type C:\Users\1\AppData\Roaming\h.js
CMD: type C:\Users\Default\AppData\Local\b.js
CMD: type C:\Users\Default\AppData\Roaming\h.js
Startup: C:\Users\1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\up.lnk [2017-05-24]
ShortcutTarget: up.lnk -> C:\Users\Default\AppData\Roaming\h.js () [Brak podpisu cyfrowego]
Startup: C:\Users\1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\upd.lnk [2017-05-24]
ShortcutTarget: upd.lnk -> C:\Users\Default\AppData\Local\b.js () [Brak podpisu cyfrowego]
2018-05-22 12:57 - 2016-04-17 21:52 - 000000117 _____ () C:\Users\1\AppData\Local\b.js
2018-05-22 12:57 - 2016-04-16 18:59 - 000000054 _____ () C:\Users\1\AppData\Roaming\12.bat
2018-05-22 12:57 - 2016-04-16 16:09 - 000000141 _____ () C:\Users\1\AppData\Roaming\h.jsContextMenuHandlers1: [CLVDShellExt] -> [CC]{3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} =>  -> Brak pliku
ContextMenuHandlers1: [SHAREit.FileContextMenuExt] -> [CC]{430BD134-576D-4E75-87CD-0F5C6221A82B} =>  -> Brak pliku
ContextMenuHandlers1: [WinRAR] -> [CC]{B41DB860-64E4-11D2-9906-E49FADC173CA} =>  -> Brak pliku
ContextMenuHandlers1: [WinRAR32] -> [CC]{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>  -> Brak pliku
ContextMenuHandlers2: [CLVDShellExt] -> [CC]{3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} =>  -> Brak pliku
ContextMenuHandlers4: [SHAREit.FileContextMenuExt] -> [CC]{430BD134-576D-4E75-87CD-0F5C6221A82B} =>  -> Brak pliku
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Brak pliku
AlternateDataStreams: C:\WINDOWS\system32\Drivers\eywebhww.sys:changelist [382]
HKU\S-1-5-21-479540381-2667628676-1330353147-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo15.msn.com/?pc=LCTE
HKU\S-1-5-21-479540381-2667628676-1330353147-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo15.msn.com/?pc=LCTE
HKU\S-1-5-21-479540381-2667628676-1330353147-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com
SearchScopes: HKU\S-1-5-21-479540381-2667628676-1330353147-1001 -> DefaultScope {A0C1352F-FD45-4426-B32F-D905813CD569} URL = 
SearchScopes: HKU\S-1-5-21-479540381-2667628676-1330353147-1001 -> {A0C1352F-FD45-4426-B32F-D905813CD569} URL = 
BHO-x32: Brak nazwy -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> Brak pliku
FirewallRules: [{17623498-90C0-4037-A432-B6F356F4499B}] => (Allow) C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe => Brak pliku
FirewallRules: [{FF641768-BD97-4CE6-AE99-66255E8FF81F}] => (Allow) C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe => Brak pliku

FilesInDirectory: C:\Users\1\AppData\Local\*.exe;*.dll;*.ini;*.js;*.bat
FilesInDirectory: C:\Users\1\AppData\Roaming\*.exe;*.dll;*.ini;*.js;*.bat
FilesInDirectory: C:\Users\Default\AppData\Local\*.exe;*.dll;*.ini;*.js;*.bat
FilesInDirectory: C:\Users\Default\AppData\Roaming\*.exe;*.dll;*.ini;*.js;*.bat