CreateRestorePoint: CloseProcesses: EmptyTemp: HKLM\...\Run: [HotKeysCmds] => "C:\Windows\system32\hkcmd.exe" (Brak pliku) HKU\S-1-5-21-2509295673-1620548796-4227655383-1000\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize (Brak pliku) HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA Tcpip\..\Interfaces\{502C363E-7918-4F23-BADD-D105D83B894D}: [DhcpNameServer] 192.168.43.1 HKU\S-1-5-21-2509295673-1620548796-4227655383-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://securesearch.org/homepage?hp=2&pId=DS210601&iDate=2021-12-09 04:40:14&iid=6295649a-1418-4450-bcde-b8dc59c60455&bName= SearchScopes: HKU\S-1-5-21-2509295673-1620548796-4227655383-1000 -> {993F5746-4C15-42BC-99C1-064A1764271B} URL = hxxps://securesearch.org?q={searchTerms} IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com IE trusted site: HKU\S-1-5-21-2509295673-1620548796-4227655383-1000\...\webcompanion.com -> hxxp://webcompanion.com FirewallRules: [{8F9B5614-97F1-4525-BEA5-710048DC68E2}] => (Allow) C:\Users\tomasz\AppData\Roaming\Zoom\bin\airhost.exe => Brak pliku FirewallRules: [{4AEC7E5A-429B-4B2B-BFAF-20F358775C56}] => (Allow) C:\Users\tomasz\AppData\Roaming\Zoom\bin\airhost.exe => Brak pliku CHR HomePage: Default -> hxxp://www.v9.com/?utm_source=b&utm_medium=vlt2&from=vlt2&uid=ST9500325AS_S2WF93S4____S2WF93S4&ts=1353693902 CHR StartupUrls: Default -> "hxxp://www.google.pl/","hxxp://www.gazeta.pl/0,0.html?p=150","hxxp://mises.pl/","hxxp://gmail.com/","hxxp://dorzeczy.pl/","hxxp://www.google.com/","hxxp://www.mystartsearch.com/?type=hp&ts=1421400461&from=wpc&uid=ST500LT012-9WS142_W0VEG1BGXXXXW0VEG1BG","hxxp://www.gazeta.pl/0,0.html?p=190" Hosts: RemoveProxy: