HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
Task: {26A5581B-8A69-4A11-936C-F6DA1BE2BBF9} - System32\Tasks\Opera scheduled Autoupdate 1629308038 => C:\Users\User\AppData\Local\Programs\Opera beta\launcher.exe <==== UWAGA
Task: {EFA721CA-F8B9-44D0-AF29-25FA92F61FC5} - System32\Tasks\Microsoft\Windows\Google\GoogleUpdateTaskMachineTN => C:\Windows\SysWOW64\IME\shared\Y-1-75-88\BI_1.4.40.98.exe (Odmowa dostępu) <==== UWAGA
Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => Brak pliku
Winsock: Catalog5 09 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => Brak pliku
Winsock: Catalog5-x64 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => Brak pliku
Winsock: Catalog5-x64 09 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => Brak pliku
U1 aswbdisk; Brak ImagePath
C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1629308038
C:\Windows\SysWOW64\IME\shared\Y-1-75-88\BI_1.4.40.98.exe
EmptyTemp:
Error: (10/25/2021 04:35:59 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
StartRegedit:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinDefend]
"Start"=dword:00000002
"Type"=dword:00000020
EndRegedit:
Reboot:
Toolbar: HKU\S-1-5-21-3321119824-607905644-1846369991-1000 -> Brak nazwy - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Brak pliku
Task: {BA800A83-2BFC-47A5-8926-933402AB6B0E} - System32\Tasks\{3537FCEE-CC22-4AE6-9BC9-857970F4F78F} => C:\Windows\system32\pcalua.exe -a "C:\Users\Mirek\Desktop\Słownik Techniczny Pol - Ang Ang - Pol\SETUP.EXE" -d "C:\Users\Mirek\Desktop\Słownik Techniczny Pol - Ang Ang - Pol"
Task: {CE6499FF-5BE8-42DE-A3C0-E748CFA633EE} - System32\Tasks\{BB43D2EE-B214-4D27-958D-4AA51B1F3071} => C:\Windows\system32\pcalua.exe -a A:\Run.EXE -d A:\
Task: {FD9CA7A4-9364-4BD5-8DC5-3EBAA9BA4518} - System32\Tasks\{8BC97067-CD4B-470E-9E22-8D94D6A6FD4F} => C:\Windows\system32\pcalua.exe -a C:\Users\Mirek\AppData\Local\Temp\jre-8u191-windows-au.exe -d C:\Windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1 <==== UWAGA
FF Plugin HKU\S-1-5-21-3321119824-607905644-1846369991-1000: @acestream.net/acestreamplugin,version=3.1.16 -> C:\Users\Mirek\AppData\Roaming\ACEStream\player\npace_plugin.dll [Brak pliku]
S3 WinRing0_1_2_0; \??\C:\Users\Mirek\AppData\Local\Temp\tmpCF91.tmp [X] <==== UWAGA
EmptyTemp:
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 12 gości