CreateRestorePoint:
CloseProcesses:

EmptyTemp:
File: C:\Users\mahbo\AppData\Roaming\Decompress\Decompress.exe
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKU\S-1-5-21-98668958-1393185345-2044570580-1001\...\MountPoints2: {a36d9d9e-a449-11ea-a688-b42e99946a6a} - "G:\AutoRun.exe" --autorun
HKU\S-1-5-21-98668958-1393185345-2044570580-1001\...\MountPoints2: {a36d9da4-a449-11ea-a688-b42e99946a6a} - "H:\AutoRun.exe" --autorun
HKU\S-1-5-21-98668958-1393185345-2044570580-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [38400 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-18\...\Run: [] => [X]
IFEO\CNC3.exe: [Debugger] 
IFEO\CNC3EP1.exe: [Debugger] 
IFEO\generals.exe: [Debugger] 
IFEO\RA3.exe: [Debugger] 
Task: {C97BDC09-9A5C-40E9-85CE-36724439D253} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe /NOUACCHECK
Task: {D25F68AB-0657-46CF-BF45-0F7A7B86BF9E} - System32\Tasks\FirewallManagement => C:\Users\mahbo\AppData\Roaming\Decompress\Decompress.exe [277434198 2020-10-27] (Unpacker) [Brak podpisu cyfrowego]
Tcpip\..\Interfaces\{c3df94df-f846-4db5-9c35-04f8055d9445}: [DhcpNameServer] 192.168.1.16
Tcpip\..\Interfaces\{d6dc9a8a-3b47-44df-ab25-a3590b775706}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{e00e9637-781e-487c-bfd1-e92ee9db7b44}: [DhcpNameServer] 192.168.100.1
S2 GLCKIO2; \??\C:\Program Files (x86)\GIGABYTE\RGBFusion\GLCKIO2.sys [X]
ShellIconOverlayIdentifiers: [
 MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\mahbo\AppData\Local\MEGAsync\ShellExtX64.dll -> Brak pliku
ShellIconOverlayIdentifiers: [
 MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\mahbo\AppData\Local\MEGAsync\ShellExtX64.dll -> Brak pliku
ShellIconOverlayIdentifiers: [
 MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\mahbo\AppData\Local\MEGAsync\ShellExtX64.dll -> Brak pliku
ShellIconOverlayIdentifiers-x32: [
 MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\mahbo\AppData\Local\MEGAsync\ShellExtX64.dll -> Brak pliku
ShellIconOverlayIdentifiers-x32: [
 MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\mahbo\AppData\Local\MEGAsync\ShellExtX64.dll -> Brak pliku
ShellIconOverlayIdentifiers-x32: [
 MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\mahbo\AppData\Local\MEGAsync\ShellExtX64.dll -> Brak pliku
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\mahbo\AppData\Local\MEGAsync\ShellExtX64.dll -> Brak pliku
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\mahbo\AppData\Local\MEGAsync\ShellExtX64.dll -> Brak pliku
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\mahbo\AppData\Local\MEGAsync\ShellExtX64.dll -> Brak pliku
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\mahbo\AppData\Local\MEGAsync\ShellExtX64.dll -> Brak pliku
AlternateDataStreams: C:\Users\mahbo\Dane aplikacji:b2471a6db8deb9681d22d6d26ae65e4b [394]
AlternateDataStreams: C:\Users\mahbo\AppData\Roaming:b2471a6db8deb9681d22d6d26ae65e4b [394]
FirewallRules: [{896600A6-7F7F-4181-8748-9A83BC818EA4}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Brak pliku
FirewallRules: [{1E712B03-9798-46D2-A294-F7C0F8A837D0}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Brak pliku
FirewallRules: [{AC27A385-5CFC-463E-A65C-BC4E6328F69E}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe => Brak pliku
FirewallRules: [{9317011E-0539-4782-A43B-EF95564D73CB}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe => Brak pliku
FirewallRules: [{3131B74C-B6FA-4C50-A01C-3883FC7D8988}] => (Allow) C:\Program Files\BitComet\BitComet.exe => Brak pliku
FirewallRules: [{3AF8E818-C4F0-4280-A0DC-8081E96C2083}] => (Allow) C:\Program Files\BitComet\BitComet.exe => Brak pliku
FirewallRules: [{97F4554E-1DED-46CC-9962-983F76073AD5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe => Brak pliku
FirewallRules: [{26A49376-85F2-47E2-85CA-6145C7F7E96F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe => Brak pliku
FirewallRules: [{D87FF711-ACB2-4160-B0AE-777A258C44B1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\VRMark Demo\bin\x64\VRMark.exe => Brak pliku
FirewallRules: [{CD18811D-12ED-4B94-90EE-48494D832B0E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\VRMark Demo\bin\x64\VRMark.exe => Brak pliku
FirewallRules: [{7F2C8F52-71C2-4229-BF42-F6D9AFE120E0}] => (Allow) D:\SteamAlt\steamapps\common\SourceFilmmaker\game\sfm.exe => Brak pliku
FirewallRules: [{41449F28-CDC3-4B1A-A82A-99DB467B2255}] => (Allow) D:\SteamAlt\steamapps\common\SourceFilmmaker\game\sfm.exe => Brak pliku
FirewallRules: [{327D313B-4455-4A20-BC59-7BDC32FA5888}] => (Allow) D:\SteamAlt\steamapps\common\SourceFilmmaker\game\bin\qsdklauncher.exe => Brak pliku
FirewallRules: [{F7139C9A-DB77-42EF-967A-E27B643ADBF7}] => (Allow) D:\SteamAlt\steamapps\common\SourceFilmmaker\game\bin\qsdklauncher.exe => Brak pliku
FirewallRules: [{A2CE14FA-E7B1-44B9-8739-66200BE2EE7E}] => (Allow) D:\SteamAlt\steamapps\common\Warframe\Tools\Launcher.exe => Brak pliku
FirewallRules: [{D9E56454-87F8-400A-866E-B7DADFF038D9}] => (Allow) D:\SteamAlt\steamapps\common\Warframe\Tools\Launcher.exe => Brak pliku
FirewallRules: [{037169B6-BAC9-4565-9AAA-4018B93D74E3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SteamVR\bin\win32\vrstartup.exe => Brak pliku
FirewallRules: [{A1CF5DB4-EDA5-4340-A739-79248FFF6F0B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SteamVR\bin\win32\vrstartup.exe => Brak pliku