CreateRestorePoint: CloseProcesses: EmptyTemp: HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Ograniczenia <==== UWAGA HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Ograniczenia <==== UWAGA HKU\S-1-5-21-1222897976-441945649-1625005035-1001\...\MountPoints2: {2b3f4782-5a6b-11ec-a206-e86a64ad5381} - "F:\DPFMate.exe" HKU\S-1-5-21-1222897976-441945649-1625005035-1001\...\MountPoints2: {2b9d77fb-19be-11eb-9e58-f8a2d6f5a352} - "F:\HiSuiteDownLoader.exe" HKU\S-1-5-21-1222897976-441945649-1625005035-1001\...\MountPoints2: {5f53c826-b31c-11ec-a31e-e86a64ad5381} - "F:\DPFMate.exe" BootExecute: autocheck autochk * SmartDefragBootTime.exe HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA HKLM\SOFTWARE\Policies\Google: Ograniczenia <==== UWAGA Task: {CCE160F0-F281-4658-984F-CEACAF637D98} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe [5311304 2023-09-13] (Microsoft Windows -> Microsoft Corporation) Task: {03F2E768-0E3F-4F6C-AB1C-992AE619E6C8} - System32\Tasks\Lenovo\Vantage\Schedule\VantageTelemetryAddinTask => C:\Program Files (x86)\Lenovo\VantageService\3.6.15.0\ScheduleEventAction.exe VantageTelemetryAddinTask (Brak pliku) Task: {13736BCE-CDE1-4669-BA9B-CBD99DD07D97} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe /checkin (Brak pliku) Task: {18C083D9-6A6F-4C86-AC4A-08D484B5DAF1} - System32\Tasks\Office 2019 Statique Activation Planificateur => C:\Users\4.6.20\Desktop\Microsoft Office 2019 Pro Plus\acto19\ActO19.cmd -renewalonly (Brak pliku) Task: {D4B54CA6-DC4E-4EDF-A5F4-01FFB4CB0E37} - System32\Tasks\Opera scheduled Autoupdate 1591337271 => C:\Program Files\Opera\launcher.exe [2820000 2023-10-16] (Opera Norway AS -> Opera Software) Tcpip\..\Interfaces\{ceea3ce7-f827-40f9-8a08-0ab75159fd8b}: [DhcpNameServer] 192.168.0.1 FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [Brak pliku] S3 dosvc; C:\WINDOWS\System32\svchost.exe [55320 2022-07-13] (Microsoft Windows Publisher -> Microsoft Corporation) <==== UWAGA (Brak ServiceDLL) S3 dosvc; C:\WINDOWS\SysWOW64\svchost.exe [46504 2022-07-13] (Microsoft Windows Publisher -> Microsoft Corporation) <==== UWAGA (Brak ServiceDLL) S2 UsoSvc; C:\WINDOWS\system32\svchost.exe [55320 2022-07-13] (Microsoft Windows Publisher -> Microsoft Corporation) <==== UWAGA (Brak ServiceDLL) S2 UsoSvc; C:\WINDOWS\SysWOW64\svchost.exe [46504 2022-07-13] (Microsoft Windows Publisher -> Microsoft Corporation) <==== UWAGA (Brak ServiceDLL) S2 wuauserv; C:\WINDOWS\system32\svchost.exe [55320 2022-07-13] (Microsoft Windows Publisher -> Microsoft Corporation) <==== UWAGA (Brak ServiceDLL) S2 wuauserv; C:\WINDOWS\SysWOW64\svchost.exe [46504 2022-07-13] (Microsoft Windows Publisher -> Microsoft Corporation) <==== UWAGA (Brak ServiceDLL) S3 EuGdiDrv; \SystemRoot\system32\EuGdiDrv.sys [X] S3 WinRing0_1_2_0; \??\C:\Users\4.6.20\AppData\Local\Temp\tmpAFA8.tmp [X] <==== UWAGA 2023-10-18 08:00 - 2020-06-14 12:40 - 000003982 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1591337271 CustomCLSID: HKU\S-1-5-21-1222897976-441945649-1625005035-1001_Classes\CLSID\{58624db6-e4cf-4ed6-a097-e489720c719b}\localserver32 -> "C:\Users\4.6.20\Desktop\[PORTABLE] TECHSMITH CAMTASIA V23.0.2.45178 64 BIT - ENG (14 Luglio 2023) by GRISU\App\CamtasiaStudio\CamtasiaStudio.exe" -ToastActivated => Brak pliku ContextMenuHandlers1: [AlcoholShellEx] -> {32020A01-506E-484D-A2A8-BE3CF17601C3} => -> Brak pliku ContextMenuHandlers2: [AlcoholShellEx] -> {32020A01-506E-484D-A2A8-BE3CF17601C3} => -> Brak pliku ContextMenuHandlers2: [AlcoholShellEx64] -> {AF67B665-D752-424E-9A03-C7C218F2844F} => -> Brak pliku HKU\S-1-5-21-1222897976-441945649-1625005035-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.pl/ BHO-x32: Brak nazwy -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> Brak pliku Handler: mso-minsb-roaming.16 - Brak wartości CLSID Handler: mso-minsb.16 - Brak wartości CLSID Handler: osf-roaming.16 - Brak wartości CLSID Handler: osf.16 - Brak wartości CLSID FirewallRules: [{E86AA49A-8475-4F83-ACF5-C0073665422E}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe => Brak pliku FirewallRules: [{F89CCB31-5685-444A-B319-42F4BFCC6D6F}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe => Brak pliku FirewallRules: [{24D0984E-118A-41C1-BE4F-03259D4FFD41}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe => Brak pliku FirewallRules: [{6E620277-33C0-418E-B724-47A0F7C8A5F7}] => (Allow) D:\Programy\Stacjonarne (22)\11 (11)\Microsoft Office 2019 Pro Plus\acto19\32-bit\vlmcsd.exe => Brak pliku