CloseProcesses:
CreateRestorePoint:
EmptyTemp:
VirusTotal: C:\Windows\AAct_Tools\AAct.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\fcbd.bat [2018-07-19] () [Brak podpisu cyfrowego]
Task: {0DED67D5-E0C2-4F34-A7EE-A14B614ED07C} - System32\Tasks\AAct => C:\Windows\AAct_Tools\AAct.exe [1452000 2018-12-14] (WZTeam -> )
Tcpip\..\Interfaces\{6b3549e2-2ded-4143-929a-7766f1cc8991}: [DhcpNameServer] 8.8.8.8 8.8.4.4
CustomCLSID: HKU\S-1-5-21-2653410707-3690619221-3330334112-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\sluzb\AppData\Local\Microsoft\OneDrive\19.192.0926.0012\amd64\FileSyncShell64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-2653410707-3690619221-3330334112-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\sluzb\AppData\Local\Microsoft\OneDrive\19.192.0926.0012\amd64\FileSyncShell64.dll => Brak pliku
CustomCLSID: HKU\S-1-5-21-2653410707-3690619221-3330334112-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\sluzb\AppData\Local\Microsoft\OneDrive\19.192.0926.0012\amd64\FileSyncShell64.dll => Brak pliku
AlternateDataStreams: C:\ProgramData\TEMP:D8999815 [223]
HKLM\...\StartupApproved\StartupFolder: => "fcbd.bat"
HKU\S-1-5-21-2653410707-3690619221-3330334112-1001\...\StartupApproved\StartupFolder: => "Wysyłanie do programu OneNote.lnk"
HKU\S-1-5-21-2653410707-3690619221-3330334112-1001\...\StartupApproved\StartupFolder: => "Send to OneNote.lnk"
FirewallRules: [{51B832D2-3AA8-499D-8046-275F150678A7}] => (Allow) C:\Program Files\Firefox Nightly\firefox.exe Brak pliku