CloseProcesses: CreateRestorePoint: EmptyTemp: ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => G:\Notepad++\NppShell_06.dll -> Brak pliku AlternateDataStreams: C:\WINDOWS\system32\AERTAC64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AERTAR64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\btcoinst.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\BtContextMenu.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\cdpreference.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\centel.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DdcWnsListener.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\difx64.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\EXT2800.DLL:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\gfxSrvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\GfxUI.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\hccutils.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\hkcmd.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\IccLibDll_x64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ig4icd64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igd10umd64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igdde64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igdumd64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfx11cmrt64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxcmjit64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxcmrt64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxCoIn_v4459.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxcpl.cpl:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxdev.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\IGFXDEVLib.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxdo.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxexps.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxext.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxpers.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxpph.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrara.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrchs.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrcht.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrcsy.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrdan.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrdeu.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrell.lrc:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\igfxrenu.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxresn.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxress.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrfin.lrc:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\igfxrfra.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrheb.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrhrv.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrhun.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrita.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrjpn.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrkor.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrnld.lrc:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\igfxrnor.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrplk.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrptb.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrptg.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrrom.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrrus.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrsky.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrslv.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrsve.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrtha.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxrtrk.lrc:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxsrvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxsrvc.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxTMM.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxtray.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\iglhcp64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\iglhsip64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\indexeddbserver.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\JpgLib.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO20.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO30.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioEQ64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxVolumeSDAPO.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mshtmlmedia.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\OV550Ext.ax:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\OvtFBoot.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RdpGroupPolicyExtension.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RtCRX64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RTNUninst64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SETB740.tmp:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\UtcResources.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\OvtWia.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\PCDLIB32.DLL:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\RtCRU64.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\comctl32.ocx:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_43.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\GPhotos.scr:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\HexUniRTFBox.ocx:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ig4icd32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\igd10umd32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\igdde32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\igdumd32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\igfx11cmrt32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\igfxcmjit32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\igfxcmrt32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\igfxdv32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\igfxexps32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\iglhcp32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\iglhsip32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ijl15.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\indexeddbserver.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\MRT.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mshtmlmedia.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\msmapi32.ocx:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\PaintX.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\PDFDocScout.DLL:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\unicows.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WISPTIS.EXE:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\athrx.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\btath_bus.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\CFRMD.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\FilmScan.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\igdkmd64.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\pccsmcfdx64.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\Rt64win7.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\TeeDriverW8x64.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Drivers\afc.sys:$CmdTcID [64] AlternateDataStreams: C:\Users\laptop\Documents\KeePass.exe:$CmdTcID [64] HKU\S-1-5-21-1680573326-224836866-1369222185-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] -> FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Ograniczenia <==== UWAGA Task: {04F82568-341A-44BC-8BEA-F69B91750305} - System32\Tasks\Odkurzacz => C:\Program Files (x86)\Odkurzacz\odkurzacz.exe Task: {1B2BB443-826B-432E-AD73-4C49E6EE9A36} - System32\Tasks\SmartDefrag_AutoAnalyze => C:\Program Files (x86)\IObit\Smart Defrag\AutoDefrag.exe Task: {F21A8BAB-B703-426D-BB11-2FED52B568B5} - System32\Tasks\IObitSelfCheckTask => C:\Program Files (x86)\IObit\Smart Defrag\IObitSelfCheck.exe Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe Tcpip\..\Interfaces\{36e5efc0-eee8-4a74-93b8-54b7e158aa46}: [DhcpNameServer] 192.168.1.254 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =