Rezultaty skanu uzupełniającego Farbar Recovery Scan Tool (x64) Wersja: 14-05-2017 Uruchomiony przez Radosław Gwiazda (19-05-2017 11:17:17) Uruchomiony z C:\Users\Radosław Gwiazda\Downloads Windows 7 Professional Service Pack 1 (X64) (2015-09-24 09:09:07) Tryb startu: Normal ========================================================== ==================== Konta użytkowników: ============================= admin (S-1-5-21-875974235-824227338-3367428378-1000 - Administrator - Enabled) => C:\Users\admin Administrator (S-1-5-21-875974235-824227338-3367428378-500 - Administrator - Disabled) Gość (S-1-5-21-875974235-824227338-3367428378-501 - Limited - Disabled) Radosław Gwiazda (S-1-5-21-875974235-824227338-3367428378-1001 - Administrator - Enabled) => C:\Users\Radosław Gwiazda ==================== Centrum zabezpieczeń ======================== (Załączenie wejścia w fixlist spowoduje jego usunięcie.) AV: ESET Endpoint Security 5.0 (Enabled - Up to date) {77DEAFED-8149-104B-25A1-21771CA47CD1} AS: ESET Endpoint Security 5.0 (Enabled - Up to date) {CCBF4E09-A773-1FC5-1F11-1A056723366C} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Zapora osobista (Disabled) {4FE52EC8-CB26-1113-0EFE-8842E2773BAA} ==================== Zainstalowane programy ====================== (W fixlist dozwolone tylko załączanie programów adware z flagą "Hidden" w celu ich uwidocznienia. Programy adware powinny zostać w poprawny sposób odinstalowane.) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 19.0.0.190 - Adobe Systems Incorporated) Adobe Reader X (10.1.16) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.16 - Adobe Systems Incorporated) CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5844 - CDBurnerXP) Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.8000.17 - Dolby Laboratories Inc) easy SportsGraphics (HKLM-x32\...\{6917A8F6-028C-4BA2-A70D-1A1BDA6BF227}) (Version: 1.00.0000 - easySports) Energy Manager (HKLM-x32\...\InstallShield_{AC768037-7079-4658-AC24-2897650E0ABE}) (Version: 1.5.0.18 - Lenovo) Energy Manager (x32 Version: 1.5.0.18 - Lenovo) Hidden ESET Endpoint Security (HKLM\...\{CFDEBB27-4584-4CFF-9E77-4FBAFE02E63A}) (Version: 5.0.2214.5 - ESET, spol. s r.o.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.) Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.22.1760 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.2.1000 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.4.40 - Intel Corporation) Lenovo Bluetooth with Enhanced Data Rate Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.5610 - Broadcom Corporation) Lenovo EasyCamera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10260 - Realtek Semiconductor Corp.) Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.1.0.2619 - CyberLink Corp.) Lenovo OneKey Recovery (Version: 8.1.0.2619 - CyberLink Corp.) Hidden Lenovo_Wireless_Driver (HKLM-x32\...\{5D642A72-8194-4A22-80DA-11FE610CCA8E}) (Version: 6.30.223.201 - Lenovo) LibreOffice 5.2.3.3 (HKLM-x32\...\{30605C95-A3A0-4A08-AD58-9AE7ABA47B70}) (Version: 5.2.3.3 - The Document Foundation) Metric Collection SDK (x32 Version: 1.1.0005.00 - Lenovo Group Limited) Hidden Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation) Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version: - Microsoft Corporation) Microsoft SQL Server 2008 Browser (HKLM-x32\...\{C688457E-03FD-4941-923B-A27F4D42A7DD}) (Version: 10.1.2531.0 - Microsoft Corporation) Microsoft SQL Server 2008 Native Client (HKLM\...\{BBDE8A3D-64A2-43A6-95F3-C27B87DF7AC1}) (Version: 10.1.2531.0 - Microsoft Corporation) Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{59D3F691-179D-4E52-832C-D22B81541AC5}) (Version: 10.1.2531.0 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{0826F9E4-787E-481D-83E0-BC6A57B056D5}) (Version: 10.1.2531.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.8.0.6273 - Mozilla) Mozilla Thunderbird 45.8.0 (x86 pl) (HKLM-x32\...\Mozilla Thunderbird 45.8.0 (x86 pl)) (Version: 45.8.0 - Mozilla) MVJ3 (HKLM-x32\...\{B8BC7FA0-9D2F-42BC-A746-1B251634089E}) (Version: 3.1.2.7 - "JBA" Zb.Staniak) Nuance SafeCom Print Client S82 070.520*03 (HKLM\...\{1F7A5FC1-0845-41B9-AD41-33FD25D67289}_is1) (Version: 10.52.3.8 - Nuance Communications, Inc.) Pakiet sterowników systemu Windows - Lenovo (ACPIVPC) System (09/24/2013 11.19.0.845) (HKLM\...\BD8A640DD72A18DFC3CEF8418113F7170A6CB417) (Version: 09/24/2013 11.19.0.845 - Lenovo) PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.4.1 - pdfforge GmbH) Polar Daemon (HKLM-x32\...\{2BA9320D-E061-4C71-ACCB-AC0E9D4FC82B}) (Version: 2.2.20000 - Polar Electro Oy) Polar Team2 v.1.4.5 (HKLM-x32\...\Polar_Team2_is1) (Version: 1.4.5.0 - Polar Electro Oy.) Polar WebSync (HKLM-x32\...\{A3C03067-855A-4B5B-B08B-A1BFD68FCAF8}) (Version: 2.8.30000 - Polar Electro Oy) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9600.29071 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.78.1218.2013 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7279 - Realtek Semiconductor Corp.) Service Pack 1 for SQL Server 2008 (KB968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation) Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0 - Microsoft Corporation) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.14.85 - Synaptics Incorporated) Team AMS R1 2015 (HKLM-x32\...\Team AMS_is1) (Version: - ) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN) WinRAR 5.11 (64-bitowy) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH) ==================== Niestandardowe rejestracje CLSID (filtrowane): ========================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) ==================== Zaplanowane zadania (filtrowane) ============= (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) Task: {000A6304-4BE2-4866-B1DF-56589FE43469} - System32\Tasks\psv_Ontokeysoft => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Techfix.reg" & del "C:\ProgramData\Quotenamron\Techfix.reg" & SCHTASKS /Delete /TN "psv_Ontokeysoft" /F <==== UWAGA Task: {0086BF76-EDE1-4754-BCA2-EBD4AC6598B6} - System32\Tasks\psv_Freshlam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Flexhold.reg" & del "C:\ProgramData\Quotenamron\Flexhold.reg" & SCHTASKS /Delete /TN "psv_Freshlam" /F <==== UWAGA Task: {00B03E6C-A7C8-4434-839D-E3CB21C77DE0} - System32\Tasks\psv_Dom-Sing => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Newis.reg" & del "C:\ProgramData\Quotenamron\Newis.reg" & SCHTASKS /Delete /TN "psv_Dom-Sing" /F <==== UWAGA Task: {018374FB-11E7-4D45-B150-69E60939E357} - System32\Tasks\psv_Stocknix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Faxdox.reg" & del "C:\ProgramData\Quotenamron\Faxdox.reg" & SCHTASKS /Delete /TN "psv_Stocknix" /F <==== UWAGA Task: {01C8F84A-9A44-4EC2-B016-4479B56A5291} - System32\Tasks\psv_Tontrax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ventodax.reg" & del "C:\ProgramData\Quotenamron\Ventodax.reg" & SCHTASKS /Delete /TN "psv_Tontrax" /F <==== UWAGA Task: {02DAF7A4-1CDB-4ACA-8218-875E64823C32} - System32\Tasks\psv_Rankdox => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Freshla.reg" & del "C:\ProgramData\Quotenamron\Freshla.reg" & SCHTASKS /Delete /TN "psv_Rankdox" /F <==== UWAGA Task: {030B0484-B735-4E95-A27E-68C04CE82F97} - System32\Tasks\psv_Goldhatla => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Sildox.reg" & del "C:\ProgramData\Quotenamron\Sildox.reg" & SCHTASKS /Delete /TN "psv_Goldhatla" /F <==== UWAGA Task: {0412A4C4-1BF5-4023-8779-C69252327BD5} - System32\Tasks\psv_Zumcore => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ventolight.reg" & del "C:\ProgramData\Quotenamron\Ventolight.reg" & SCHTASKS /Delete /TN "psv_Zumcore" /F <==== UWAGA Task: {043B9689-F609-42D8-B3B2-6A1A68EA973F} - System32\Tasks\psv_BioNix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Dingex.reg" & del "C:\ProgramData\Quotenamron\Dingex.reg" & SCHTASKS /Delete /TN "psv_BioNix" /F <==== UWAGA Task: {04E30FEC-0101-4F8A-824A-31D6C1F77A5F} - System32\Tasks\psv_Nimeco => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zaamranstrong.reg" & del "C:\ProgramData\Quotenamron\Zaamranstrong.reg" & SCHTASKS /Delete /TN "psv_Nimeco" /F <==== UWAGA Task: {053E6224-C80D-46A6-BEBD-5A31205EF3D9} - System32\Tasks\psv_Jayfind => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Sanit.reg" & del "C:\ProgramData\Quotenamron\Sanit.reg" & SCHTASKS /Delete /TN "psv_Jayfind" /F <==== UWAGA Task: {0613EE54-B800-4715-9DEB-9406D29A4EB7} - System32\Tasks\psv_Namothold => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\BioTone.reg" & del "C:\ProgramData\Quotenamron\BioTone.reg" & SCHTASKS /Delete /TN "psv_Namothold" /F <==== UWAGA Task: {06BEFAFC-76C2-4130-9200-6C06DB5BABE7} - System32\Tasks\psv_Graveplus => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Biglight.reg" & del "C:\ProgramData\Quotenamron\Biglight.reg" & SCHTASKS /Delete /TN "psv_Graveplus" /F <==== UWAGA Task: {0747AEC0-6D0F-416D-8C1A-51A60363E585} - System32\Tasks\psv_White-Fan => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Silkix.reg" & del "C:\ProgramData\Quotenamron\Silkix.reg" & SCHTASKS /Delete /TN "psv_White-Fan" /F <==== UWAGA Task: {07A1D1CA-6484-4D2E-B81F-0B04112A9DFD} - System32\Tasks\psv_Dommatfix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Goodity.reg" & del "C:\ProgramData\Quotenamron\Goodity.reg" & SCHTASKS /Delete /TN "psv_Dommatfix" /F <==== UWAGA Task: {099E6BEC-43CF-4302-A89C-E4EB5A32B195} - System32\Tasks\psv_Kay-Lax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Qvotough.reg" & del "C:\ProgramData\Quotenamron\Qvotough.reg" & SCHTASKS /Delete /TN "psv_Kay-Lax" /F <==== UWAGA Task: {09B25DB3-E4A0-4DD6-A025-B2D15D399B77} - System32\Tasks\psv_Hotlux => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\LamSandox.reg" & del "C:\ProgramData\Quotenamron\LamSandox.reg" & SCHTASKS /Delete /TN "psv_Hotlux" /F <==== UWAGA Task: {0A04B913-486C-4337-845D-7C44B0C01AC7} - System32\Tasks\psv_DamDubtop => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Spandonron.reg" & del "C:\ProgramData\Quotenamron\Spandonron.reg" & SCHTASKS /Delete /TN "psv_DamDubtop" /F <==== UWAGA Task: {0A5BC227-D926-4282-B9DA-05BFD397F976} - System32\Tasks\psv_La-Lax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Open-Dox.reg" & del "C:\ProgramData\Quotenamron\Open-Dox.reg" & SCHTASKS /Delete /TN "psv_La-Lax" /F <==== UWAGA Task: {0B423828-F69E-4C60-9C6F-8BC9536D02A1} - System32\Tasks\psv_Transhotlab => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\DoubleEx.reg" & del "C:\ProgramData\Quotenamron\DoubleEx.reg" & SCHTASKS /Delete /TN "psv_Transhotlab" /F <==== UWAGA Task: {0B64DB70-0079-4DFE-B0D7-3423FF8C47E8} - System32\Tasks\psv_Lighttip => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\StringCom.reg" & del "C:\ProgramData\Quotenamron\StringCom.reg" & SCHTASKS /Delete /TN "psv_Lighttip" /F <==== UWAGA Task: {0B75A820-7B13-478C-B92E-7283F31D03CF} - System32\Tasks\GoogleUpdateTaskMachineCore1d15d897d530f26 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-24] (Google Inc.) Task: {0BA14571-3374-43A5-A69D-0A56A7C764FA} - System32\Tasks\psv_Zer-Fan => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Mattech.reg" & del "C:\ProgramData\Quotenamron\Mattech.reg" & SCHTASKS /Delete /TN "psv_Zer-Fan" /F <==== UWAGA Task: {0BFF5807-F3CB-4651-BBB4-11962042A89A} - System32\Tasks\psv_MathLux => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Donstock.reg" & del "C:\ProgramData\Quotenamron\Donstock.reg" & SCHTASKS /Delete /TN "psv_MathLux" /F <==== UWAGA Task: {0CB87C74-7416-4B40-872F-5C7EC852300D} - System32\Tasks\psv_Hottom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Aplax.reg" & del "C:\ProgramData\Quotenamron\Aplax.reg" & SCHTASKS /Delete /TN "psv_Hottom" /F <==== UWAGA Task: {0CCEA6E6-C9A5-41EB-8FA1-C55C6D25AC54} - System32\Tasks\psv_Sail-Kix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Flex-Fan.reg" & del "C:\ProgramData\Quotenamron\Flex-Fan.reg" & SCHTASKS /Delete /TN "psv_Sail-Kix" /F <==== UWAGA Task: {0CD813E2-FFC7-450F-B3C5-0F4554AC4B03} - System32\Tasks\psv_Yeartop => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Roundflex.reg" & del "C:\ProgramData\Quotenamron\Roundflex.reg" & SCHTASKS /Delete /TN "psv_Yeartop" /F <==== UWAGA Task: {0D6E7BB9-AFD3-42F0-A20E-6E4BBB5E8C01} - System32\Tasks\psv_IndigoSanstrong => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\U--Top.reg" & del "C:\ProgramData\Quotenamron\U--Top.reg" & SCHTASKS /Delete /TN "psv_IndigoSanstrong" /F <==== UWAGA Task: {0D9E9C89-15BA-4320-9031-767AC1CF863E} - System32\Tasks\psv_Airstring => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zonhome.reg" & del "C:\ProgramData\Quotenamron\Zonhome.reg" & SCHTASKS /Delete /TN "psv_Airstring" /F <==== UWAGA Task: {0DB31A98-229E-4E83-BEC2-701CD87A5B92} - System32\Tasks\psv_Ran-Tip => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Jobzap.reg" & del "C:\ProgramData\Quotenamron\Jobzap.reg" & SCHTASKS /Delete /TN "psv_Ran-Tip" /F <==== UWAGA Task: {0E44A073-5B55-482A-87EF-56EE8D2394B5} - System32\Tasks\psv_Funtrax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\LabRedcof.reg" & del "C:\ProgramData\Quotenamron\LabRedcof.reg" & SCHTASKS /Delete /TN "psv_Funtrax" /F <==== UWAGA Task: {0EB0719B-4963-4F26-87AB-CB9DCE1586D9} - System32\Tasks\GoogleUpdateTaskMachineUA1d1ab42fa60e23f => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-24] (Google Inc.) Task: {10029C05-FFE5-4D71-BBB7-6060563E6218} - System32\Tasks\psv_Airdom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\LotDinflex.reg" & del "C:\ProgramData\Quotenamron\LotDinflex.reg" & SCHTASKS /Delete /TN "psv_Airdom" /F <==== UWAGA Task: {10266FC4-06D3-481A-BFDE-D489E4627152} - System32\Tasks\psv_Trislex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zon-Tough.reg" & del "C:\ProgramData\Quotenamron\Zon-Tough.reg" & SCHTASKS /Delete /TN "psv_Trislex" /F <==== UWAGA Task: {130CBE75-E0B6-41B2-A460-37414606D15A} - System32\Tasks\psv_Freetough => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Lat-Tex.reg" & del "C:\ProgramData\Quotenamron\Lat-Tex.reg" & SCHTASKS /Delete /TN "psv_Freetough" /F <==== UWAGA Task: {1330BCF9-9577-4958-9E9D-615A0D4E7F63} - System32\Tasks\psv_Remathold => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Dingtip.reg" & del "C:\ProgramData\Quotenamron\Dingtip.reg" & SCHTASKS /Delete /TN "psv_Remathold" /F <==== UWAGA Task: {13AB2281-6C7B-4456-95B7-1FA68946794F} - System32\Tasks\psv_Domcof => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Vilastring.reg" & del "C:\ProgramData\Quotenamron\Vilastring.reg" & SCHTASKS /Delete /TN "psv_Domcof" /F <==== UWAGA Task: {14013320-FE4F-4DEC-89AB-EBAA43E391FF} - System32\Tasks\psv_Ventohome => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Via-Hold.reg" & del "C:\ProgramData\Quotenamron\Via-Hold.reg" & SCHTASKS /Delete /TN "psv_Ventohome" /F <==== UWAGA Task: {14015642-4BAC-4E47-B7C9-C3DF59899B73} - System32\Tasks\psv_Flexstock => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Lightphase.reg" & del "C:\ProgramData\Quotenamron\Lightphase.reg" & SCHTASKS /Delete /TN "psv_Flexstock" /F <==== UWAGA Task: {167C0F0B-1DA5-4D0C-931D-6C668B9CEFFB} - System32\Tasks\snf => C:\ProgramData\Quotenamron\Quotenamron.exe [2016-04-02] () <==== UWAGA Task: {172938C0-23DD-4B2F-AFB2-A732F3797224} - System32\Tasks\psv_Hotit => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Soltip.reg" & del "C:\ProgramData\Quotenamron\Soltip.reg" & SCHTASKS /Delete /TN "psv_Hotit" /F <==== UWAGA Task: {1825DE44-C08E-4B49-9EA8-4E22E8556F18} - System32\Tasks\psv_Sail-Light => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\K-ovetech.reg" & del "C:\ProgramData\Quotenamron\K-ovetech.reg" & SCHTASKS /Delete /TN "psv_Sail-Light" /F <==== UWAGA Task: {18539AD5-4FCB-4754-9CD9-325F187CCF5F} - System32\Tasks\psv_Sontop => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Lalam.reg" & del "C:\ProgramData\Quotenamron\Lalam.reg" & SCHTASKS /Delete /TN "psv_Sontop" /F <==== UWAGA Task: {189C6CCD-4C73-4B00-8CE0-3921456FFFF0} - System32\Tasks\psv_DaltHatron => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Stock-It.reg" & del "C:\ProgramData\Quotenamron\Stock-It.reg" & SCHTASKS /Delete /TN "psv_DaltHatron" /F <==== UWAGA Task: {18E97F64-DED8-4779-A4A6-963180B329D6} - System32\Tasks\psv_GeoIt => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Opening.reg" & del "C:\ProgramData\Quotenamron\Opening.reg" & SCHTASKS /Delete /TN "psv_GeoIt" /F <==== UWAGA Task: {195EAF13-57DA-4A16-94BF-1C73991A42DA} - System32\Tasks\psv_Kinbam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\KonFind.reg" & del "C:\ProgramData\Quotenamron\KonFind.reg" & SCHTASKS /Delete /TN "psv_Kinbam" /F <==== UWAGA Task: {197755D0-EBDF-494B-B595-6C3C28F0486E} - System32\Tasks\psv_Flexin => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Vilacof.reg" & del "C:\ProgramData\Quotenamron\Vilacof.reg" & SCHTASKS /Delete /TN "psv_Flexin" /F <==== UWAGA Task: {1AECD1B8-D7E7-4D70-990E-A92A8E133D4C} - System32\Tasks\psv_Quadcore => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Tampjob.reg" & del "C:\ProgramData\Quotenamron\Tampjob.reg" & SCHTASKS /Delete /TN "psv_Quadcore" /F <==== UWAGA Task: {1B76E8A8-9E66-4AE8-9AF3-F101AC1AF86D} - System32\Tasks\psv_Hotdex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Drip-Tax.reg" & del "C:\ProgramData\Quotenamron\Drip-Tax.reg" & SCHTASKS /Delete /TN "psv_Hotdex" /F <==== UWAGA Task: {1C06E42C-907B-4D75-9F6F-2735518F4EEB} - System32\Tasks\psv_Freetech => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Keyex.reg" & del "C:\ProgramData\Quotenamron\Keyex.reg" & SCHTASKS /Delete /TN "psv_Freetech" /F <==== UWAGA Task: {1C2504AF-199F-42EB-9A7B-658640C60471} - System32\Tasks\psv_Zummatam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\GrooveSailflex.reg" & del "C:\ProgramData\Quotenamron\GrooveSailflex.reg" & SCHTASKS /Delete /TN "psv_Zummatam" /F <==== UWAGA Task: {1C8BC24D-4B21-4BBB-81EB-CA1BFBE47EB0} - System32\Tasks\psv_Bioin => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Flexhold.reg" & del "C:\ProgramData\Quotenamron\Flexhold.reg" & SCHTASKS /Delete /TN "psv_Bioin" /F <==== UWAGA Task: {1D2F0F3E-ED61-4728-8724-58962B928489} - System32\Tasks\psv_Tontip => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Treefix.reg" & del "C:\ProgramData\Quotenamron\Treefix.reg" & SCHTASKS /Delete /TN "psv_Tontip" /F <==== UWAGA Task: {1D48ABBC-8C3B-40D8-BFAE-BF752BD2A74D} - System32\Tasks\psv_Zummacom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Stansing.reg" & del "C:\ProgramData\Quotenamron\Stansing.reg" & SCHTASKS /Delete /TN "psv_Zummacom" /F <==== UWAGA Task: {1D9D9721-A240-4AF3-821A-1A214EA470FB} - System32\Tasks\psv_Tranlab => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Lamit.reg" & del "C:\ProgramData\Quotenamron\Lamit.reg" & SCHTASKS /Delete /TN "psv_Tranlab" /F <==== UWAGA Task: {1E1EDB23-A67F-4F31-BED6-9CFEC3BA99F2} - System32\Tasks\psv_Antom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Freetam.reg" & del "C:\ProgramData\Quotenamron\Freetam.reg" & SCHTASKS /Delete /TN "psv_Antom" /F <==== UWAGA Task: {1E5B9783-0883-4BD5-B311-FD5D5B588F0D} - System32\Tasks\psv_TampHome => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Silair.reg" & del "C:\ProgramData\Quotenamron\Silair.reg" & SCHTASKS /Delete /TN "psv_TampHome" /F <==== UWAGA Task: {1ECEF601-630C-4D4A-B472-3019E4864E83} - System32\Tasks\psv_Strongsunlax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\ZooTax.reg" & del "C:\ProgramData\Quotenamron\ZooTax.reg" & SCHTASKS /Delete /TN "psv_Strongsunlax" /F <==== UWAGA Task: {1ED85E52-C618-4A1D-A3BB-6FAF28C84653} - System32\Tasks\psv_Sunlax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Donex.reg" & del "C:\ProgramData\Quotenamron\Donex.reg" & SCHTASKS /Delete /TN "psv_Sunlax" /F <==== UWAGA Task: {1EE74FC4-B929-45B8-B1ED-BE5643A60785} - System32\Tasks\psv_Sancom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zummatax.reg" & del "C:\ProgramData\Quotenamron\Zummatax.reg" & SCHTASKS /Delete /TN "psv_Sancom" /F <==== UWAGA Task: {1F19FD55-D6E1-4046-92C0-14156E980319} - System32\Tasks\psv_Whitetom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Dinglex.reg" & del "C:\ProgramData\Quotenamron\Dinglex.reg" & SCHTASKS /Delete /TN "psv_Whitetom" /F <==== UWAGA Task: {1F1E5B51-14E3-4F7B-8F2B-F0DBB85928CF} - System32\Tasks\psv_DoubleSiltouch => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Single-Lam.reg" & del "C:\ProgramData\Quotenamron\Single-Lam.reg" & SCHTASKS /Delete /TN "psv_DoubleSiltouch" /F <==== UWAGA Task: {20866C0F-211C-4B01-9C6D-78DD4E16012D} - System32\Tasks\psv_Lathold => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\QvoTop.reg" & del "C:\ProgramData\Quotenamron\QvoTop.reg" & SCHTASKS /Delete /TN "psv_Lathold" /F <==== UWAGA Task: {21532D47-CC35-4EBB-997D-7FFE7C6B5D09} - System32\Tasks\psv_U-ron => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zim-Lex.reg" & del "C:\ProgramData\Quotenamron\Zim-Lex.reg" & SCHTASKS /Delete /TN "psv_U-ron" /F <==== UWAGA Task: {226EADFB-CC70-456B-9EB5-B8A5B5FDEA81} - System32\Tasks\psv_Statex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\MedPhase.reg" & del "C:\ProgramData\Quotenamron\MedPhase.reg" & SCHTASKS /Delete /TN "psv_Statex" /F <==== UWAGA Task: {24A2562B-9D2E-4B0B-A806-D1953C7F51CE} - System32\Tasks\psv_BlackHotfix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\S-kix.reg" & del "C:\ProgramData\Quotenamron\S-kix.reg" & SCHTASKS /Delete /TN "psv_BlackHotfix" /F <==== UWAGA Task: {257C0C90-4F57-41E3-99D8-1A5412DEBE9E} - System32\Tasks\psv_Nimdax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Blacktop.reg" & del "C:\ProgramData\Quotenamron\Blacktop.reg" & SCHTASKS /Delete /TN "psv_Nimdax" /F <==== UWAGA Task: {260C60FF-1C2B-4385-9F89-2A97F23A25DD} - System32\Tasks\psv_Zumsoft => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Treephase.reg" & del "C:\ProgramData\Quotenamron\Treephase.reg" & SCHTASKS /Delete /TN "psv_Zumsoft" /F <==== UWAGA Task: {26589DBC-8C0C-4E05-99E6-A7ACC371864B} - System32\Tasks\psv_Uno-Tax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Airtouch.reg" & del "C:\ProgramData\Quotenamron\Airtouch.reg" & SCHTASKS /Delete /TN "psv_Uno-Tax" /F <==== UWAGA Task: {265D3C89-4F70-413D-BE1E-F2EDFDC53E33} - System32\Tasks\psv_Domair => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Vaiaphase.reg" & del "C:\ProgramData\Quotenamron\Vaiaphase.reg" & SCHTASKS /Delete /TN "psv_Domair" /F <==== UWAGA Task: {2668F161-B36C-458D-BA8B-FBDBC382B272} - System32\Tasks\psv_InchRon => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Alpha-Eco.reg" & del "C:\ProgramData\Quotenamron\Alpha-Eco.reg" & SCHTASKS /Delete /TN "psv_InchRon" /F <==== UWAGA Task: {27C819F8-7DAA-4E27-B8D5-053E220F7367} - System32\Tasks\psv_Iscom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\ZooTone.reg" & del "C:\ProgramData\Quotenamron\ZooTone.reg" & SCHTASKS /Delete /TN "psv_Iscom" /F <==== UWAGA Task: {27EB5403-DB2C-41B7-903E-726EB6F3DDB2} - System32\Tasks\psv_SubRuntip => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Techzumla.reg" & del "C:\ProgramData\Quotenamron\Techzumla.reg" & SCHTASKS /Delete /TN "psv_SubRuntip" /F <==== UWAGA Task: {2800C013-FF81-4878-8467-DBEA36479310} - System32\Tasks\psv_Unodom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Tech-Lax.reg" & del "C:\ProgramData\Quotenamron\Tech-Lax.reg" & SCHTASKS /Delete /TN "psv_Unodom" /F <==== UWAGA Task: {28705039-DB91-4FD5-A638-380E6349AC8B} - System32\Tasks\psv_Roundbam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\PhysDonlab.reg" & del "C:\ProgramData\Quotenamron\PhysDonlab.reg" & SCHTASKS /Delete /TN "psv_Roundbam" /F <==== UWAGA Task: {29F2DCA7-8040-44B6-9804-F7B3D032D04D} - System32\Tasks\psv_Zonecof => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Santom.reg" & del "C:\ProgramData\Quotenamron\Santom.reg" & SCHTASKS /Delete /TN "psv_Zonecof" /F <==== UWAGA Task: {2AEA1BA2-B132-4096-8C96-980632E37C61} - System32\Tasks\psv_Islam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Latfan.reg" & del "C:\ProgramData\Quotenamron\Latfan.reg" & SCHTASKS /Delete /TN "psv_Islam" /F <==== UWAGA Task: {2BA1ED69-F140-4F2B-A483-D7DFC8CD89DE} - System32\Tasks\psv_Meddox => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\InchAir.reg" & del "C:\ProgramData\Quotenamron\InchAir.reg" & SCHTASKS /Delete /TN "psv_Meddox" /F <==== UWAGA Task: {2BC64D1C-6CAB-4A8A-AB6B-90844A723ED3} - System32\Tasks\psv_HayKeycof => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Bigtip.reg" & del "C:\ProgramData\Quotenamron\Bigtip.reg" & SCHTASKS /Delete /TN "psv_HayKeycof" /F <==== UWAGA Task: {2BC91ED8-FFD0-450F-AE4B-25BF4C64300B} - System32\Tasks\psv_Donstock => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Y-fan.reg" & del "C:\ProgramData\Quotenamron\Y-fan.reg" & SCHTASKS /Delete /TN "psv_Donstock" /F <==== UWAGA Task: {2C258481-318F-42E1-A9BF-383B9734515F} - System32\Tasks\psv_Stanplus => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Runstrong.reg" & del "C:\ProgramData\Quotenamron\Runstrong.reg" & SCHTASKS /Delete /TN "psv_Stanplus" /F <==== UWAGA Task: {2C2F1672-2756-45D4-AD74-D07FAF5597F4} - System32\Tasks\psv_U-flex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Flexex.reg" & del "C:\ProgramData\Quotenamron\Flexex.reg" & SCHTASKS /Delete /TN "psv_U-flex" /F <==== UWAGA Task: {2CFC133F-BBC8-4204-90C8-5105E80B2570} - System32\Tasks\psv_Newstock => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Medtech.reg" & del "C:\ProgramData\Quotenamron\Medtech.reg" & SCHTASKS /Delete /TN "psv_Newstock" /F <==== UWAGA Task: {2FA367A7-F7CD-401D-8931-415403A4BE16} - System32\Tasks\psv_Econamair => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Bamtip.reg" & del "C:\ProgramData\Quotenamron\Bamtip.reg" & SCHTASKS /Delete /TN "psv_Econamair" /F <==== UWAGA Task: {301B0058-C2A2-4D4F-B639-326E4DF14757} - System32\Tasks\psv_LabTodax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\JayNamlax.reg" & del "C:\ProgramData\Quotenamron\JayNamlax.reg" & SCHTASKS /Delete /TN "psv_LabTodax" /F <==== UWAGA Task: {3073474A-1F7B-4B8C-B739-9448447D5463} - System32\Tasks\psv_Ventophase => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ice-Tone.reg" & del "C:\ProgramData\Quotenamron\Ice-Tone.reg" & SCHTASKS /Delete /TN "psv_Ventophase" /F <==== UWAGA Task: {31176B5D-50A9-4C28-A34D-335D2BF5D204} - System32\Tasks\psv_Vilacore => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Finstock.reg" & del "C:\ProgramData\Quotenamron\Finstock.reg" & SCHTASKS /Delete /TN "psv_Vilacore" /F <==== UWAGA Task: {3134C39D-AA99-4745-AAE2-2A76E406D0B2} - System32\Tasks\psv_Zotfix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\GoodTam.reg" & del "C:\ProgramData\Quotenamron\GoodTam.reg" & SCHTASKS /Delete /TN "psv_Zotfix" /F <==== UWAGA Task: {32150674-C23D-4EA1-AFCB-823312841EB1} - System32\Tasks\psv_Sanlam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Kanron.reg" & del "C:\ProgramData\Quotenamron\Kanron.reg" & SCHTASKS /Delete /TN "psv_Sanlam" /F <==== UWAGA Task: {3266B3BB-F447-4163-9E22-109BD347DF76} - System32\Tasks\psv_Saltplus => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Quadcof.reg" & del "C:\ProgramData\Quotenamron\Quadcof.reg" & SCHTASKS /Delete /TN "psv_Saltplus" /F <==== UWAGA Task: {32E52A6C-7374-419A-9D77-2ADF772526A0} - System32\Tasks\psv_Silverstock => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Med-Dex.reg" & del "C:\ProgramData\Quotenamron\Med-Dex.reg" & SCHTASKS /Delete /TN "psv_Silverstock" /F <==== UWAGA Task: {32F7C6DB-FFA0-4E73-9C57-4D2E4338B0F1} - System32\Tasks\psv_Y-namsing => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Overronsoft.reg" & del "C:\ProgramData\Quotenamron\Overronsoft.reg" & SCHTASKS /Delete /TN "psv_Y-namsing" /F <==== UWAGA Task: {3309960A-E0E6-4730-ADDB-3E5FF06F3AF6} - System32\Tasks\psv_StockHotfix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Kansanflex.reg" & del "C:\ProgramData\Quotenamron\Kansanflex.reg" & SCHTASKS /Delete /TN "psv_StockHotfix" /F <==== UWAGA Task: {3392968E-C146-4CB4-8F29-1C9EF1182557} - System32\Tasks\psv_Techronnix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Singlefan.reg" & del "C:\ProgramData\Quotenamron\Singlefan.reg" & SCHTASKS /Delete /TN "psv_Techronnix" /F <==== UWAGA Task: {3392F4F2-4A76-4959-9388-47966144EE28} - System32\Tasks\psv_Konkis => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Solozunjob.reg" & del "C:\ProgramData\Quotenamron\Solozunjob.reg" & SCHTASKS /Delete /TN "psv_Konkis" /F <==== UWAGA Task: {33D09175-0907-4710-8757-810FFA7252CC} - System32\Tasks\psv_Ronair => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Sail-Top.reg" & del "C:\ProgramData\Quotenamron\Sail-Top.reg" & SCHTASKS /Delete /TN "psv_Ronair" /F <==== UWAGA Task: {34913E14-28A4-4C43-9071-AC2FA43578A7} - System32\Tasks\psv_Zoowarm => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zenex.reg" & del "C:\ProgramData\Quotenamron\Zenex.reg" & SCHTASKS /Delete /TN "psv_Zoowarm" /F <==== UWAGA Task: {34B22F01-C36C-4A0D-8CE6-9AFCE719B99E} - System32\Tasks\psv_Anbam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Treswarm.reg" & del "C:\ProgramData\Quotenamron\Treswarm.reg" & SCHTASKS /Delete /TN "psv_Anbam" /F <==== UWAGA Task: {34C798B0-9257-44AD-8238-9E08C1DDE033} - System32\Tasks\psv_Zensoft => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Kondom.reg" & del "C:\ProgramData\Quotenamron\Kondom.reg" & SCHTASKS /Delete /TN "psv_Zensoft" /F <==== UWAGA Task: {356E763A-C36E-49C2-AE6A-78257FF7B409} - System32\Tasks\psv_Lexicore => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zenwarm.reg" & del "C:\ProgramData\Quotenamron\Zenwarm.reg" & SCHTASKS /Delete /TN "psv_Lexicore" /F <==== UWAGA Task: {35A9AAD6-CA14-46F1-9073-35D4A4C01A88} - System32\Tasks\psv_Tran-It => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Onto-Ity.reg" & del "C:\ProgramData\Quotenamron\Onto-Ity.reg" & SCHTASKS /Delete /TN "psv_Tran-It" /F <==== UWAGA Task: {3689BCEA-6FAC-40C6-985D-D1B515047394} - System32\Tasks\psv_Biohome => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Bigdinfresh.reg" & del "C:\ProgramData\Quotenamron\Bigdinfresh.reg" & SCHTASKS /Delete /TN "psv_Biohome" /F <==== UWAGA Task: {36F9E760-2B7A-47E0-8F72-6C8F2AE5694E} - System32\Tasks\psv_Techlux => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Red-Phase.reg" & del "C:\ProgramData\Quotenamron\Red-Phase.reg" & SCHTASKS /Delete /TN "psv_Techlux" /F <==== UWAGA Task: {37B6A16E-0617-4075-ABC5-CA1818DBE7F0} - System32\Tasks\psv_Unarunsing => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Doublerantam.reg" & del "C:\ProgramData\Quotenamron\Doublerantam.reg" & SCHTASKS /Delete /TN "psv_Unarunsing" /F <==== UWAGA Task: {3A5A1418-9A00-4E8F-9B27-015D5A0A29C0} - System32\Tasks\psv_Singlefax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\PhysOzeex.reg" & del "C:\ProgramData\Quotenamron\PhysOzeex.reg" & SCHTASKS /Delete /TN "psv_Singlefax" /F <==== UWAGA Task: {3A5FACD5-740D-45F6-9E1D-8EBE1C197DE3} - System32\Tasks\psv_Strongzap => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Treeis.reg" & del "C:\ProgramData\Quotenamron\Treeis.reg" & SCHTASKS /Delete /TN "psv_Strongzap" /F <==== UWAGA Task: {3A8918B6-6DB6-4C8D-AB1F-487DDB36B470} - System32\Tasks\psv_Newphase => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\BioQuadcore.reg" & del "C:\ProgramData\Quotenamron\BioQuadcore.reg" & SCHTASKS /Delete /TN "psv_Newphase" /F <==== UWAGA Task: {3AA0C7EF-4292-4218-A52B-D4ACA11F3D71} - System32\Tasks\psv_Y-dom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Vialex.reg" & del "C:\ProgramData\Quotenamron\Vialex.reg" & SCHTASKS /Delete /TN "psv_Y-dom" /F <==== UWAGA Task: {3ADD412F-DF11-4D87-A036-099C44ECC87F} - System32\Tasks\psv_BamZoohome => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\StringKeydex.reg" & del "C:\ProgramData\Quotenamron\StringKeydex.reg" & SCHTASKS /Delete /TN "psv_BamZoohome" /F <==== UWAGA Task: {3B826DBE-AFD1-4689-8213-5A22791BE2B9} - System32\Tasks\psv_Ranlam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ding-Ity.reg" & del "C:\ProgramData\Quotenamron\Ding-Ity.reg" & SCHTASKS /Delete /TN "psv_Ranlam" /F <==== UWAGA Task: {3CB6BB4A-0ED6-4085-AE05-37CC6FFABA90} - System32\Tasks\psv_Translax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Good-Lab.reg" & del "C:\ProgramData\Quotenamron\Good-Lab.reg" & SCHTASKS /Delete /TN "psv_Translax" /F <==== UWAGA Task: {3D45534D-5274-4695-A038-AEA6126B608E} - System32\Tasks\psv_TrueZoosoft => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Mednix.reg" & del "C:\ProgramData\Quotenamron\Mednix.reg" & SCHTASKS /Delete /TN "psv_TrueZoosoft" /F <==== UWAGA Task: {3E28EBFC-11C6-4555-9888-F22D5EB14F9D} - System32\Tasks\psv_VoyaDax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Namruntip.reg" & del "C:\ProgramData\Quotenamron\Namruntip.reg" & SCHTASKS /Delete /TN "psv_VoyaDax" /F <==== UWAGA Task: {3E4BC926-3C2F-4555-B9E8-3471DE4D771A} - System32\Tasks\psv_KeyLa => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Faxlab.reg" & del "C:\ProgramData\Quotenamron\Faxlab.reg" & SCHTASKS /Delete /TN "psv_KeyLa" /F <==== UWAGA Task: {3EB7BBF3-E6B9-4379-8B83-EDE85E763E33} - System32\Tasks\psv_Yearstrong => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Flexlex.reg" & del "C:\ProgramData\Quotenamron\Flexlex.reg" & SCHTASKS /Delete /TN "psv_Yearstrong" /F <==== UWAGA Task: {3F07AF5B-E8DF-49FD-85CF-2478D809BFB7} - System32\Tasks\psv_ZimTop => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\CofSaodom.reg" & del "C:\ProgramData\Quotenamron\CofSaodom.reg" & SCHTASKS /Delete /TN "psv_ZimTop" /F <==== UWAGA Task: {3F625EC4-4D8D-44FA-8FCC-29BFE8DDA8FB} - System32\Tasks\psv_TrustSing => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Voyahold.reg" & del "C:\ProgramData\Quotenamron\Voyahold.reg" & SCHTASKS /Delete /TN "psv_TrustSing" /F <==== UWAGA Task: {3FED8E8A-96D0-4F9D-9279-A704E1DDC0D4} - System32\Tasks\psv_Flex-Light => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Physnamphase.reg" & del "C:\ProgramData\Quotenamron\Physnamphase.reg" & SCHTASKS /Delete /TN "psv_Flex-Light" /F <==== UWAGA Task: {40E8C9A7-1426-4539-9AFD-07A40FD93B44} - System32\Tasks\psv_Superfan => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Reeco.reg" & del "C:\ProgramData\Quotenamron\Reeco.reg" & SCHTASKS /Delete /TN "psv_Superfan" /F <==== UWAGA Task: {412C1D0B-FB3B-4E8D-A879-D7EE2A1BF53C} - System32\Tasks\psv_Newtop => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Re-Eco.reg" & del "C:\ProgramData\Quotenamron\Re-Eco.reg" & SCHTASKS /Delete /TN "psv_Newtop" /F <==== UWAGA Task: {4138CADF-ABD0-4808-8605-F3DA4A2A6658} - System32\Tasks\psv_San-String => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zoomphase.reg" & del "C:\ProgramData\Quotenamron\Zoomphase.reg" & SCHTASKS /Delete /TN "psv_San-String" /F <==== UWAGA Task: {41B3BA07-22FC-47A4-9BFA-29CB779967A2} - System32\Tasks\psv_PhysRon => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Xxx-Canlux.reg" & del "C:\ProgramData\Quotenamron\Xxx-Canlux.reg" & SCHTASKS /Delete /TN "psv_PhysRon" /F <==== UWAGA Task: {426008EF-61B9-4731-B8F8-3D6E59BF5A3E} - System32\Tasks\psv_Medkix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Sol-Lax.reg" & del "C:\ProgramData\Quotenamron\Sol-Lax.reg" & SCHTASKS /Delete /TN "psv_Medkix" /F <==== UWAGA Task: {4272B7A3-72BF-4F4F-A670-2CDC8975DD88} - System32\Tasks\psv_Biotech => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\K--Ity.reg" & del "C:\ProgramData\Quotenamron\K--Ity.reg" & SCHTASKS /Delete /TN "psv_Biotech" /F <==== UWAGA Task: {435D9A2D-A1F9-4D53-A5BB-C3B387E0C462} - System32\Tasks\psv_Zaamtom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Hatbam.reg" & del "C:\ProgramData\Quotenamron\Hatbam.reg" & SCHTASKS /Delete /TN "psv_Zaamtom" /F <==== UWAGA Task: {44552E2E-6F17-43BD-A8CD-38C34158FD00} - System32\Tasks\psv_Latfan => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\S-light.reg" & del "C:\ProgramData\Quotenamron\S-light.reg" & SCHTASKS /Delete /TN "psv_Latfan" /F <==== UWAGA Task: {4476A557-5125-4472-A3BF-E2169E77EF5D} - System32\Tasks\psv_Dentofresh => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\MathNix.reg" & del "C:\ProgramData\Quotenamron\MathNix.reg" & SCHTASKS /Delete /TN "psv_Dentofresh" /F <==== UWAGA Task: {470CAC06-13EC-4D67-8A88-18E2B9971E5F} - System32\Tasks\psv_GeoDox => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zathfan.reg" & del "C:\ProgramData\Quotenamron\Zathfan.reg" & SCHTASKS /Delete /TN "psv_GeoDox" /F <==== UWAGA Task: {4775CD19-F077-416C-8940-22CCD2734D6D} - System32\Tasks\psv_Zamtam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Candox.reg" & del "C:\ProgramData\Quotenamron\Candox.reg" & SCHTASKS /Delete /TN "psv_Zamtam" /F <==== UWAGA Task: {477E27FD-16A5-4DBD-B06E-109FA0162931} - System32\Tasks\psv_VilaNimtop => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Lexicom.reg" & del "C:\ProgramData\Quotenamron\Lexicom.reg" & SCHTASKS /Delete /TN "psv_VilaNimtop" /F <==== UWAGA Task: {4866EE30-48A0-4B2A-BCD9-88043B878DC2} - System32\Tasks\psv_ItString => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Super-Ity.reg" & del "C:\ProgramData\Quotenamron\Super-Ity.reg" & SCHTASKS /Delete /TN "psv_ItString" /F <==== UWAGA Task: {4965B4B2-F506-4A21-8AE9-71C855B9F318} - System32\Tasks\psv_Zimdox => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Hot-It.reg" & del "C:\ProgramData\Quotenamron\Hot-It.reg" & SCHTASKS /Delete /TN "psv_Zimdox" /F <==== UWAGA Task: {49877262-5515-4E11-BCC5-A4669D4749FB} - System32\Tasks\psv_LaDubtouch => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Freshhome.reg" & del "C:\ProgramData\Quotenamron\Freshhome.reg" & SCHTASKS /Delete /TN "psv_LaDubtouch" /F <==== UWAGA Task: {49A97856-A9E1-44D9-BF3A-35A4DBEE99F3} - System32\Tasks\psv_Zimdom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Kayphase.reg" & del "C:\ProgramData\Quotenamron\Kayphase.reg" & SCHTASKS /Delete /TN "psv_Zimdom" /F <==== UWAGA Task: {4B9C5864-6742-462F-B4A8-DE32DE6188BC} - System32\Tasks\psv_Treestrong => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Tin-Dax.reg" & del "C:\ProgramData\Quotenamron\Tin-Dax.reg" & SCHTASKS /Delete /TN "psv_Treestrong" /F <==== UWAGA Task: {4C2E53AB-7515-49D0-9FC5-3C01A9223B28} - System32\Tasks\psv_TonRondox => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\TransIn.reg" & del "C:\ProgramData\Quotenamron\TransIn.reg" & SCHTASKS /Delete /TN "psv_TonRondox" /F <==== UWAGA Task: {4C31E6BE-BA45-44CD-8EB7-B5158894FA64} - System32\Tasks\psv_Biokix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Hatstrong.reg" & del "C:\ProgramData\Quotenamron\Hatstrong.reg" & SCHTASKS /Delete /TN "psv_Biokix" /F <==== UWAGA Task: {4D06AAF6-BC43-4A3C-99C9-13104D68D14E} - System32\Tasks\psv_SunHotplus => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Stattip.reg" & del "C:\ProgramData\Quotenamron\Stattip.reg" & SCHTASKS /Delete /TN "psv_SunHotplus" /F <==== UWAGA Task: {4D2725E8-35FA-4857-BB36-4CF72AF4FE9F} - System32\Tasks\psv_Goodsoft => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Damtech.reg" & del "C:\ProgramData\Quotenamron\Damtech.reg" & SCHTASKS /Delete /TN "psv_Goodsoft" /F <==== UWAGA Task: {4D363F24-C012-4F91-AEF6-F906FBBC4A79} - System32\Tasks\psv_Fintax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Hotstrong.reg" & del "C:\ProgramData\Quotenamron\Hotstrong.reg" & SCHTASKS /Delete /TN "psv_Fintax" /F <==== UWAGA Task: {4E5A7A21-36C3-4FAB-9AE1-F9E4C2315D84} - System32\Tasks\psv_X-ovehome => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ronmattech.reg" & del "C:\ProgramData\Quotenamron\Ronmattech.reg" & SCHTASKS /Delete /TN "psv_X-ovehome" /F <==== UWAGA Task: {4E9D552A-3820-49DA-BE48-9FEDDB9763BE} - System32\Tasks\psv_Zon-Core => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Infind.reg" & del "C:\ProgramData\Quotenamron\Infind.reg" & SCHTASKS /Delete /TN "psv_Zon-Core" /F <==== UWAGA Task: {4EB8A892-CAC8-418B-8FEA-8812DE378E03} - System32\Tasks\psv_UnaLamphase => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Bluecore.reg" & del "C:\ProgramData\Quotenamron\Bluecore.reg" & SCHTASKS /Delete /TN "psv_UnaLamphase" /F <==== UWAGA Task: {4EF65BE5-2C77-47C9-AF46-4FD4F0D5DF62} - System32\Tasks\psv_Qvoron => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\RanFind.reg" & del "C:\ProgramData\Quotenamron\RanFind.reg" & SCHTASKS /Delete /TN "psv_Qvoron" /F <==== UWAGA Task: {4F5545FB-6045-4101-92CE-C7D29C37CB7C} - System32\Tasks\psv_Solokix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Duokix.reg" & del "C:\ProgramData\Quotenamron\Duokix.reg" & SCHTASKS /Delete /TN "psv_Solokix" /F <==== UWAGA Task: {4F683614-0A22-40E9-A8A6-438EC79A9D04} - System32\Tasks\PDVDServ Task => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE Task: {50816A82-2ED2-4DF3-8AC9-553102102B7D} - System32\Tasks\psv_FreshOvelux => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Lahold.reg" & del "C:\ProgramData\Quotenamron\Lahold.reg" & SCHTASKS /Delete /TN "psv_FreshOvelux" /F <==== UWAGA Task: {510AFF41-B5BD-44BC-9371-C55B751EAF1B} - System32\Tasks\psv_Trust-Tax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zuntop.reg" & del "C:\ProgramData\Quotenamron\Zuntop.reg" & SCHTASKS /Delete /TN "psv_Trust-Tax" /F <==== UWAGA Task: {5183CEA5-D1F6-497E-B233-10DB3A6C3DF0} - System32\Tasks\psv_Redox => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Viain.reg" & del "C:\ProgramData\Quotenamron\Viain.reg" & SCHTASKS /Delete /TN "psv_Redox" /F <==== UWAGA Task: {524BE069-ACEA-4AC3-A834-FFDBF9329CC0} - System32\Tasks\psv_Daltstrong => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Tinin.reg" & del "C:\ProgramData\Quotenamron\Tinin.reg" & SCHTASKS /Delete /TN "psv_Daltstrong" /F <==== UWAGA Task: {53A8E5BF-1D1D-4E94-B6E9-79805686C681} - System32\Tasks\psv_Techin => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Haykix.reg" & del "C:\ProgramData\Quotenamron\Haykix.reg" & SCHTASKS /Delete /TN "psv_Techin" /F <==== UWAGA Task: {550BD5B7-48F2-4663-9B19-BC78241A186B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-14] (Adobe Systems Incorporated) Task: {55F03CCD-EDAA-408A-963F-BFD012DCA67C} - System32\Tasks\psv_ZoomDomity => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\U-dax.reg" & del "C:\ProgramData\Quotenamron\U-dax.reg" & SCHTASKS /Delete /TN "psv_ZoomDomity" /F <==== UWAGA Task: {573F1AFB-B670-466E-B8DB-B4C0073B59BE} - System32\Tasks\psv_Transplus => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Geocore.reg" & del "C:\ProgramData\Quotenamron\Geocore.reg" & SCHTASKS /Delete /TN "psv_Transplus" /F <==== UWAGA Task: {5752F111-C709-44A9-8B0E-EEF6AB0E1788} - System32\Tasks\psv_Ventodubdox => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\KanHold.reg" & del "C:\ProgramData\Quotenamron\KanHold.reg" & SCHTASKS /Delete /TN "psv_Ventodubdox" /F <==== UWAGA Task: {577F7D21-B918-4FA0-937C-4C9854361E43} - System32\Tasks\psv_Meding => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\GeoFan.reg" & del "C:\ProgramData\Quotenamron\GeoFan.reg" & SCHTASKS /Delete /TN "psv_Meding" /F <==== UWAGA Task: {58A86647-1702-4294-B914-CA51AC1E0AA2} - System32\Tasks\psv_Treela => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ran-Tone.reg" & del "C:\ProgramData\Quotenamron\Ran-Tone.reg" & SCHTASKS /Delete /TN "psv_Treela" /F <==== UWAGA Task: {58B38F45-DE58-48D3-8F37-D3326697D45A} - System32\Tasks\psv_Tamflex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\DomFind.reg" & del "C:\ProgramData\Quotenamron\DomFind.reg" & SCHTASKS /Delete /TN "psv_Tamflex" /F <==== UWAGA Task: {58EF550C-6B6E-4C30-8BE7-172D0C978B3D} - System32\Tasks\psv_Dentocanflex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Trustfax.reg" & del "C:\ProgramData\Quotenamron\Trustfax.reg" & SCHTASKS /Delete /TN "psv_Dentocanflex" /F <==== UWAGA Task: {5A30B4AF-2BF7-40A3-A35A-68C5530BF334} - System32\Tasks\psv_Zonestock => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Softkix.reg" & del "C:\ProgramData\Quotenamron\Softkix.reg" & SCHTASKS /Delete /TN "psv_Zonestock" /F <==== UWAGA Task: {5A7B01C2-E3C6-4E63-9098-35D22EC7CE12} - System32\Tasks\psv_TresFan => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\NamWarm.reg" & del "C:\ProgramData\Quotenamron\NamWarm.reg" & SCHTASKS /Delete /TN "psv_TresFan" /F <==== UWAGA Task: {5AD4C69D-FFA6-4D23-AB56-84AC4A94C2F7} - System32\Tasks\psv_Airfix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Instock.reg" & del "C:\ProgramData\Quotenamron\Instock.reg" & SCHTASKS /Delete /TN "psv_Airfix" /F <==== UWAGA Task: {5BDF742E-8143-4448-B07E-C806FA04DC90} - System32\Tasks\psv_Iszimlax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Techtonjob.reg" & del "C:\ProgramData\Quotenamron\Techtonjob.reg" & SCHTASKS /Delete /TN "psv_Iszimlax" /F <==== UWAGA Task: {5C881F8D-72B7-4815-8205-9BA882A5B42C} - System32\Tasks\psv_Una-Tough => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Quad-Fan.reg" & del "C:\ProgramData\Quotenamron\Quad-Fan.reg" & SCHTASKS /Delete /TN "psv_Una-Tough" /F <==== UWAGA Task: {5E3C9987-5E80-47E7-92FA-899B53894C89} - System32\Tasks\psv_BioOzefind => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Daltcom.reg" & del "C:\ProgramData\Quotenamron\Daltcom.reg" & SCHTASKS /Delete /TN "psv_BioOzefind" /F <==== UWAGA Task: {5EF02B1A-CA7B-4DCD-862F-83F07052FD58} - System32\Tasks\psv_UniFax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zathsing.reg" & del "C:\ProgramData\Quotenamron\Zathsing.reg" & SCHTASKS /Delete /TN "psv_UniFax" /F <==== UWAGA Task: {5F32286E-EBDF-48C2-BAA5-A87F2D578846} - System32\Tasks\psv_Quotecore => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Hotdom.reg" & del "C:\ProgramData\Quotenamron\Hotdom.reg" & SCHTASKS /Delete /TN "psv_Quotecore" /F <==== UWAGA Task: {5F4253C4-8A85-4F27-9B6F-FEC79E09A1EA} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2014-02-13] (Lenovo) Task: {624F20F9-0C3E-4286-B8D3-5DF6DED7A92F} - System32\Tasks\psv_FreeTop => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Konkransing.reg" & del "C:\ProgramData\Quotenamron\Konkransing.reg" & SCHTASKS /Delete /TN "psv_FreeTop" /F <==== UWAGA Task: {6354699B-D144-43F9-A003-E459DDD9575D} - System32\Tasks\psv_Whitehome => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Dripron.reg" & del "C:\ProgramData\Quotenamron\Dripron.reg" & SCHTASKS /Delete /TN "psv_Whitehome" /F <==== UWAGA Task: {64B8E294-85A1-4C39-81E5-09B7CE34BDB4} - System32\Tasks\psv_Alpha-Plus => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Icecore.reg" & del "C:\ProgramData\Quotenamron\Icecore.reg" & SCHTASKS /Delete /TN "psv_Alpha-Plus" /F <==== UWAGA Task: {64F7CF6D-A5E6-4EEC-B5D0-0D60E4096B64} - System32\Tasks\psv_Treestring => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zameco.reg" & del "C:\ProgramData\Quotenamron\Zameco.reg" & SCHTASKS /Delete /TN "psv_Treestring" /F <==== UWAGA Task: {6594FD1C-6EF9-4167-B132-15625670CA0B} - System32\Tasks\psv_Mat-Kix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Alphatip.reg" & del "C:\ProgramData\Quotenamron\Alphatip.reg" & SCHTASKS /Delete /TN "psv_Mat-Kix" /F <==== UWAGA Task: {65C078E0-57BD-473F-B631-554F72901C01} - System32\Tasks\psv_Holdfresh => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Suncom.reg" & del "C:\ProgramData\Quotenamron\Suncom.reg" & SCHTASKS /Delete /TN "psv_Holdfresh" /F <==== UWAGA Task: {666ABE28-9327-4AD1-8C9C-CCAC4342B6C4} - System32\Tasks\psv_Freshcom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Anzap.reg" & del "C:\ProgramData\Quotenamron\Anzap.reg" & SCHTASKS /Delete /TN "psv_Freshcom" /F <==== UWAGA Task: {668104FF-3AC1-4E18-A8F1-505E4D97BD6B} - System32\Tasks\psv_Solotancore => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ventocore.reg" & del "C:\ProgramData\Quotenamron\Ventocore.reg" & SCHTASKS /Delete /TN "psv_Solotancore" /F <==== UWAGA Task: {67018AE7-C03A-41B3-9683-D6C122DD690F} - System32\Tasks\psv_Namcof => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\HayOvedax.reg" & del "C:\ProgramData\Quotenamron\HayOvedax.reg" & SCHTASKS /Delete /TN "psv_Namcof" /F <==== UWAGA Task: {6729CF02-E2E9-498D-B29A-BF1E8EC83B3C} - System32\Tasks\psv_Sunit => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Indigo-Air.reg" & del "C:\ProgramData\Quotenamron\Indigo-Air.reg" & SCHTASKS /Delete /TN "psv_Sunit" /F <==== UWAGA Task: {675F3A95-2EEE-49A6-99AC-FE7B63787213} - System32\Tasks\psv_Templotlux => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Sanla.reg" & del "C:\ProgramData\Quotenamron\Sanla.reg" & SCHTASKS /Delete /TN "psv_Templotlux" /F <==== UWAGA Task: {6877EB1C-7810-4450-8EFC-DC35483C1444} - System32\Tasks\psv_Stocktone => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\DamRanit.reg" & del "C:\ProgramData\Quotenamron\DamRanit.reg" & SCHTASKS /Delete /TN "psv_Stocktone" /F <==== UWAGA Task: {692D4022-2559-4DB0-B465-B58E3E528D99} - System32\Tasks\psv_Softtrax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Touchfind.reg" & del "C:\ProgramData\Quotenamron\Touchfind.reg" & SCHTASKS /Delete /TN "psv_Softtrax" /F <==== UWAGA Task: {69D6690A-4650-453A-AD7C-72E90812726F} - System32\Tasks\psv_Alphasoltex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Saostring.reg" & del "C:\ProgramData\Quotenamron\Saostring.reg" & SCHTASKS /Delete /TN "psv_Alphasoltex" /F <==== UWAGA Task: {69EA47E5-2381-42A4-9E5D-D6321FD52285} - System32\Tasks\psv_Faseex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\X--Fresh.reg" & del "C:\ProgramData\Quotenamron\X--Fresh.reg" & SCHTASKS /Delete /TN "psv_Faseex" /F <==== UWAGA Task: {6A40D3DB-6D97-4FD2-88EF-7834E9CD2F84} - System32\Tasks\psv_Domdax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Jayfan.reg" & del "C:\ProgramData\Quotenamron\Jayfan.reg" & SCHTASKS /Delete /TN "psv_Domdax" /F <==== UWAGA Task: {6A95506B-83C0-44AE-8636-8E9EB9DCC9D8} - System32\Tasks\psv_Koncom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Holdtom.reg" & del "C:\ProgramData\Quotenamron\Holdtom.reg" & SCHTASKS /Delete /TN "psv_Koncom" /F <==== UWAGA Task: {6AC59A7C-C2C0-429E-BEAB-E620BC61C716} - System32\Tasks\psv_Ansoft => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Fixfax.reg" & del "C:\ProgramData\Quotenamron\Fixfax.reg" & SCHTASKS /Delete /TN "psv_Ansoft" /F <==== UWAGA Task: {6B4CA276-AF44-4DC5-89CB-2E1AC83E7605} - System32\Tasks\psv_Lot-Fresh => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Plusnix.reg" & del "C:\ProgramData\Quotenamron\Plusnix.reg" & SCHTASKS /Delete /TN "psv_Lot-Fresh" /F <==== UWAGA Task: {6B941619-20D1-40FC-944C-5C2D6B81889D} - System32\Tasks\{2B7736AC-37AD-4803-9AD3-B1547C9EA042} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\setup.exe" -c -runfromtemp -removeonly Task: {6C11331E-AB1E-4D35-9966-61B21D60570D} - System32\Tasks\psv_Roundair => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Homeex.reg" & del "C:\ProgramData\Quotenamron\Homeex.reg" & SCHTASKS /Delete /TN "psv_Roundair" /F <==== UWAGA Task: {6C99B841-6E51-4E83-8DA7-314CC41FAE72} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-24] (Google Inc.) Task: {6D1EF6F0-FFB2-46F6-BCF6-1C09B85C0058} - System32\Tasks\psv_Hotfind => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Medhome.reg" & del "C:\ProgramData\Quotenamron\Medhome.reg" & SCHTASKS /Delete /TN "psv_Hotfind" /F <==== UWAGA Task: {6D242DA2-1E89-47A7-BD0D-6EAF8760EEF9} - System32\Tasks\psv_MedZimtech => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Salttouch.reg" & del "C:\ProgramData\Quotenamron\Salttouch.reg" & SCHTASKS /Delete /TN "psv_MedZimtech" /F <==== UWAGA Task: {6D49A65E-AB9D-4E94-BB74-EC9D62C43A15} - System32\Tasks\psv_Newdonphase => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Rank-Air.reg" & del "C:\ProgramData\Quotenamron\Rank-Air.reg" & SCHTASKS /Delete /TN "psv_Newdonphase" /F <==== UWAGA Task: {6DBD3189-CDA0-46BA-8F8E-B885C267AB8D} - System32\Tasks\psv_FinEx => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Movedondom.reg" & del "C:\ProgramData\Quotenamron\Movedondom.reg" & SCHTASKS /Delete /TN "psv_FinEx" /F <==== UWAGA Task: {6DFD06BA-CB6C-42A2-A9A8-578D880F911E} - System32\Tasks\psv_Freshbam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\RoundLattip.reg" & del "C:\ProgramData\Quotenamron\RoundLattip.reg" & SCHTASKS /Delete /TN "psv_Freshbam" /F <==== UWAGA Task: {6F7EE658-6B66-40BF-A236-C6C166D90CA0} - System32\Tasks\psv_Kondax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Toughlab.reg" & del "C:\ProgramData\Quotenamron\Toughlab.reg" & SCHTASKS /Delete /TN "psv_Kondax" /F <==== UWAGA Task: {700D54FF-3F26-4D4C-AB4E-0C640A4CDC73} - System32\Tasks\psv_Softkaydax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\GraveZoztrax.reg" & del "C:\ProgramData\Quotenamron\GraveZoztrax.reg" & SCHTASKS /Delete /TN "psv_Softkaydax" /F <==== UWAGA Task: {72308084-6670-460E-8705-FC42540878F0} - System32\Tasks\psv_Ran-Ron => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Isdom.reg" & del "C:\ProgramData\Quotenamron\Isdom.reg" & SCHTASKS /Delete /TN "psv_Ran-Ron" /F <==== UWAGA Task: {72B04019-7C19-4106-BBDC-E03C1E69A2EA} - System32\Tasks\psv_Y-hold => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Y-lab.reg" & del "C:\ProgramData\Quotenamron\Y-lab.reg" & SCHTASKS /Delete /TN "psv_Y-hold" /F <==== UWAGA Task: {7696F29D-A0C8-421A-9850-64949869ADD9} - System32\Tasks\psv_Key-Air => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Holdit.reg" & del "C:\ProgramData\Quotenamron\Holdit.reg" & SCHTASKS /Delete /TN "psv_Key-Air" /F <==== UWAGA Task: {76DEF040-1124-4D43-84D6-8952A86B1774} - System32\Tasks\psv_Solfresh => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\InKix.reg" & del "C:\ProgramData\Quotenamron\InKix.reg" & SCHTASKS /Delete /TN "psv_Solfresh" /F <==== UWAGA Task: {777C1636-E704-4530-B0BE-89756B3E749B} - System32\Tasks\psv_Canhold => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\PlusZamlex.reg" & del "C:\ProgramData\Quotenamron\PlusZamlex.reg" & SCHTASKS /Delete /TN "psv_Canhold" /F <==== UWAGA Task: {7804B062-DECB-4EA3-BCE2-86391AA06967} - System32\Tasks\psv_K-phase => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Sonla.reg" & del "C:\ProgramData\Quotenamron\Sonla.reg" & SCHTASKS /Delete /TN "psv_K-phase" /F <==== UWAGA Task: {78327E52-303C-4B30-93EE-6C448002594D} - System32\Tasks\psv_Superhotdox => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Domdom.reg" & del "C:\ProgramData\Quotenamron\Domdom.reg" & SCHTASKS /Delete /TN "psv_Superhotdox" /F <==== UWAGA Task: {786CFFFB-CDC2-46E3-9600-7BA7C141F225} - System32\Tasks\psv_Tanphase => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Quo-Tough.reg" & del "C:\ProgramData\Quotenamron\Quo-Tough.reg" & SCHTASKS /Delete /TN "psv_Tanphase" /F <==== UWAGA Task: {78B39E85-2BD2-409B-A9F4-794AFDA79D8B} - System32\Tasks\psv_Softtough => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\TipCom.reg" & del "C:\ProgramData\Quotenamron\TipCom.reg" & SCHTASKS /Delete /TN "psv_Softtough" /F <==== UWAGA Task: {792C56E0-621A-45C4-A813-3129BC131768} - System32\Tasks\psv_Zerlam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ranit.reg" & del "C:\ProgramData\Quotenamron\Ranit.reg" & SCHTASKS /Delete /TN "psv_Zerlam" /F <==== UWAGA Task: {7A6AB6F6-5B85-46E1-BE44-8FEBECC7AC1E} - System32\Tasks\psv_Plusdonfind => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\MatString.reg" & del "C:\ProgramData\Quotenamron\MatString.reg" & SCHTASKS /Delete /TN "psv_Plusdonfind" /F <==== UWAGA Task: {7B4409D8-30C3-4415-886B-8A6839F7EB02} - System32\Tasks\psv_Tripple-Plus => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\VivaRemwarm.reg" & del "C:\ProgramData\Quotenamron\VivaRemwarm.reg" & SCHTASKS /Delete /TN "psv_Tripple-Plus" /F <==== UWAGA Task: {7BA81694-7E9C-4BDC-8B24-4EE80F4B482E} - System32\Tasks\psv_Danhotplus => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Openstock.reg" & del "C:\ProgramData\Quotenamron\Openstock.reg" & SCHTASKS /Delete /TN "psv_Danhotplus" /F <==== UWAGA Task: {7BBCBAA5-1FE0-4C34-B138-BB1ECF04F6CC} - System32\Tasks\psv_Opentop => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\RanTouch.reg" & del "C:\ProgramData\Quotenamron\RanTouch.reg" & SCHTASKS /Delete /TN "psv_Opentop" /F <==== UWAGA Task: {7DBCFC9A-4797-451D-9CB4-311D0039AE72} - System32\Tasks\psv_Ronla => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Topfind.reg" & del "C:\ProgramData\Quotenamron\Topfind.reg" & SCHTASKS /Delete /TN "psv_Ronla" /F <==== UWAGA Task: {800F232F-840B-4B60-974F-E6F77DF5EE59} - System32\Tasks\psv_NimCanex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Topstring.reg" & del "C:\ProgramData\Quotenamron\Topstring.reg" & SCHTASKS /Delete /TN "psv_NimCanex" /F <==== UWAGA Task: {803A254E-AACA-4AC4-8457-BF38B429947D} - System32\Tasks\psv_Unocof => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Dripin.reg" & del "C:\ProgramData\Quotenamron\Dripin.reg" & SCHTASKS /Delete /TN "psv_Unocof" /F <==== UWAGA Task: {80413BC4-931E-431E-A938-A0C764535055} - System32\Tasks\psv_Dan-Lax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Aircore.reg" & del "C:\ProgramData\Quotenamron\Aircore.reg" & SCHTASKS /Delete /TN "psv_Dan-Lax" /F <==== UWAGA Task: {813552C1-DA3E-471C-AF93-BB088D7D9C5D} - System32\Tasks\psv_Zun-Tam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Y--Ing.reg" & del "C:\ProgramData\Quotenamron\Y--Ing.reg" & SCHTASKS /Delete /TN "psv_Zun-Tam" /F <==== UWAGA Task: {817DBD4A-C2FB-4A83-BE9C-C42188CFB1A6} - System32\Tasks\psv_Fixfind => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\KonMattouch.reg" & del "C:\ProgramData\Quotenamron\KonMattouch.reg" & SCHTASKS /Delete /TN "psv_Fixfind" /F <==== UWAGA Task: {81832AE3-EEE6-4317-BD46-8AFF5531CFCB} - System32\Tasks\psv_Opentough => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Whitelax.reg" & del "C:\ProgramData\Quotenamron\Whitelax.reg" & SCHTASKS /Delete /TN "psv_Opentough" /F <==== UWAGA Task: {825D37B8-C6D4-479D-B09B-6408B6F65A56} - System32\Tasks\psv_Redtip => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Fasedex.reg" & del "C:\ProgramData\Quotenamron\Fasedex.reg" & SCHTASKS /Delete /TN "psv_Redtip" /F <==== UWAGA Task: {82A8B4E9-3D62-42A0-83A3-731F0D867DE6} - System32\Tasks\psv_Bigdindox => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Runtam.reg" & del "C:\ProgramData\Quotenamron\Runtam.reg" & SCHTASKS /Delete /TN "psv_Bigdindox" /F <==== UWAGA Task: {82C34C6E-3DE8-44CA-9CAD-C5FF6EC38B2A} - System32\Tasks\psv_Finla => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\U-lex.reg" & del "C:\ProgramData\Quotenamron\U-lex.reg" & SCHTASKS /Delete /TN "psv_Finla" /F <==== UWAGA Task: {836F8053-B384-43D1-84FA-20AC9CBC6FB6} - System32\Tasks\psv_Villait => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Qvohome.reg" & del "C:\ProgramData\Quotenamron\Qvohome.reg" & SCHTASKS /Delete /TN "psv_Villait" /F <==== UWAGA Task: {83E3B0C1-ABB7-4EF5-9764-129DA5CC4D3A} - System32\Tasks\psv_Stimdonlex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Doncof.reg" & del "C:\ProgramData\Quotenamron\Doncof.reg" & SCHTASKS /Delete /TN "psv_Stimdonlex" /F <==== UWAGA Task: {846F46E0-7352-4A53-AE1A-E74563548CF4} - System32\Tasks\psv_Sanhold => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Vaia-Tax.reg" & del "C:\ProgramData\Quotenamron\Vaia-Tax.reg" & SCHTASKS /Delete /TN "psv_Sanhold" /F <==== UWAGA Task: {85373EF3-A3DA-4725-A6C5-D3FFAB888725} - System32\Tasks\psv_Zeneco => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Sondox.reg" & del "C:\ProgramData\Quotenamron\Sondox.reg" & SCHTASKS /Delete /TN "psv_Zeneco" /F <==== UWAGA Task: {85BF3317-DDAF-473E-8623-660A1E36BD5A} - System32\Tasks\psv_Zoomtinzap => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Vivalab.reg" & del "C:\ProgramData\Quotenamron\Vivalab.reg" & SCHTASKS /Delete /TN "psv_Zoomtinzap" /F <==== UWAGA Task: {860BF503-3152-4B3F-9555-06B04CDCC0EC} - System32\Tasks\psv_Voltonstock => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\BigIty.reg" & del "C:\ProgramData\Quotenamron\BigIty.reg" & SCHTASKS /Delete /TN "psv_Voltonstock" /F <==== UWAGA Task: {860C00B5-35D0-4CEA-BEA3-48B543FF2D69} - System32\Tasks\psv_Trioanbam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ontofind.reg" & del "C:\ProgramData\Quotenamron\Ontofind.reg" & SCHTASKS /Delete /TN "psv_Trioanbam" /F <==== UWAGA Task: {864988C2-15B2-4757-8C95-5F88D173E2AE} - System32\Tasks\psv_LightTraxnix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\WarmNamfix.reg" & del "C:\ProgramData\Quotenamron\WarmNamfix.reg" & SCHTASKS /Delete /TN "psv_LightTraxnix" /F <==== UWAGA Task: {8655899B-911F-4EEE-93A3-F0F2D21142E8} - System32\Tasks\psv_Voltone => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Tip-Fax.reg" & del "C:\ProgramData\Quotenamron\Tip-Fax.reg" & SCHTASKS /Delete /TN "psv_Voltone" /F <==== UWAGA Task: {8663BEF9-9047-4D73-8F08-46A66B6CBCE7} - System32\Tasks\psv_Zoolab => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Tripplefix.reg" & del "C:\ProgramData\Quotenamron\Tripplefix.reg" & SCHTASKS /Delete /TN "psv_Zoolab" /F <==== UWAGA Task: {8674EBF0-0C7C-4240-9104-641DBFFF4492} - System32\Tasks\psv_SaltCof => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Kayfan.reg" & del "C:\ProgramData\Quotenamron\Kayfan.reg" & SCHTASKS /Delete /TN "psv_SaltCof" /F <==== UWAGA Task: {86BE4297-4941-46FF-94D8-CDFDD8535A34} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => %ProgramFiles(x86)%\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe Task: {87D0D907-E274-4BD0-8D8B-81BE780D2C5E} - System32\Tasks\psv_Greendex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Goldeneco.reg" & del "C:\ProgramData\Quotenamron\Goldeneco.reg" & SCHTASKS /Delete /TN "psv_Greendex" /F <==== UWAGA Task: {88482EF9-1689-4D79-B9BB-0B63D3BF8D26} - System32\Tasks\psv_FreshOtsing => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ozer-Lux.reg" & del "C:\ProgramData\Quotenamron\Ozer-Lux.reg" & SCHTASKS /Delete /TN "psv_FreshOtsing" /F <==== UWAGA Task: {88E67750-341E-4ACD-BB9C-90C67022F916} - System32\Tasks\GoogleUpdateTaskMachineCore1d12e592c612672 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-24] (Google Inc.) Task: {896F454E-00F3-47EF-BF81-092B78C19CA4} - System32\Tasks\psv_Zerdax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\WarmLam.reg" & del "C:\ProgramData\Quotenamron\WarmLam.reg" & SCHTASKS /Delete /TN "psv_Zerdax" /F <==== UWAGA Task: {8980AB71-FF72-4CA3-B78E-AFE72E64EFF4} - System32\Tasks\psv_Bio-Ex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Voltflex.reg" & del "C:\ProgramData\Quotenamron\Voltflex.reg" & SCHTASKS /Delete /TN "psv_Bio-Ex" /F <==== UWAGA Task: {8A294422-60C7-4C1D-8E26-D18E276798D7} - System32\Tasks\psv_Keyfax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\DoubleIty.reg" & del "C:\ProgramData\Quotenamron\DoubleIty.reg" & SCHTASKS /Delete /TN "psv_Keyfax" /F <==== UWAGA Task: {8AC6D84C-D891-4EB5-B10B-F64C169212B6} - System32\Tasks\psv_Tinsaoflex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Singflex.reg" & del "C:\ProgramData\Quotenamron\Singflex.reg" & SCHTASKS /Delete /TN "psv_Tinsaoflex" /F <==== UWAGA Task: {8B4D0376-C420-46DB-AE20-0229C3F5D980} - System32\Tasks\psv_SonDinwarm => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\FreeTop.reg" & del "C:\ProgramData\Quotenamron\FreeTop.reg" & SCHTASKS /Delete /TN "psv_SonDinwarm" /F <==== UWAGA Task: {8C12A883-FFAD-430A-9F92-E5D27F01009D} - System32\Tasks\psv_Sailing => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Mathnix.reg" & del "C:\ProgramData\Quotenamron\Mathnix.reg" & SCHTASKS /Delete /TN "psv_Sailing" /F <==== UWAGA Task: {8C6288CD-6E78-4449-9877-8278BC51D25A} - System32\Tasks\psv_Kaylux => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Anhold.reg" & del "C:\ProgramData\Quotenamron\Anhold.reg" & SCHTASKS /Delete /TN "psv_Kaylux" /F <==== UWAGA Task: {8D312BD9-5F08-444A-BC2C-590AF88DCFBC} - System32\Tasks\psv_Tripplehome => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Jobex.reg" & del "C:\ProgramData\Quotenamron\Jobex.reg" & SCHTASKS /Delete /TN "psv_Tripplehome" /F <==== UWAGA Task: {8DE288C9-CF93-4286-8E5F-A0A2BABBBB98} - System32\Tasks\psv_Ventotough => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Keylotlux.reg" & del "C:\ProgramData\Quotenamron\Keylotlux.reg" & SCHTASKS /Delete /TN "psv_Ventotough" /F <==== UWAGA Task: {8E6D8894-2C6D-4C43-822C-75257406EE23} - System32\Tasks\psv_Greenfax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Donity.reg" & del "C:\ProgramData\Quotenamron\Donity.reg" & SCHTASKS /Delete /TN "psv_Greenfax" /F <==== UWAGA Task: {8F03C886-3CA4-4825-857E-C7DE3EEF9EE9} - System32\Tasks\psv_Lightlax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ontobam.reg" & del "C:\ProgramData\Quotenamron\Ontobam.reg" & SCHTASKS /Delete /TN "psv_Lightlax" /F <==== UWAGA Task: {8F0BCB38-C08E-4077-BF90-76DC2A2D58BF} - System32\Tasks\psv_Laming => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Truerantrax.reg" & del "C:\ProgramData\Quotenamron\Truerantrax.reg" & SCHTASKS /Delete /TN "psv_Laming" /F <==== UWAGA Task: {8F554BF2-533E-401E-B10E-2D895B0C4A93} - System32\Tasks\psv_Viasaofresh => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Voyatouch.reg" & del "C:\ProgramData\Quotenamron\Voyatouch.reg" & SCHTASKS /Delete /TN "psv_Viasaofresh" /F <==== UWAGA Task: {8FC90879-A383-49D1-9586-9932F453EA7C} - System32\Tasks\psv_Quadcom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Tinfan.reg" & del "C:\ProgramData\Quotenamron\Tinfan.reg" & SCHTASKS /Delete /TN "psv_Quadcom" /F <==== UWAGA Task: {8FE633F7-A989-48F0-9EB9-9DD0D1841027} - System32\Tasks\psv_Donla => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Pluszap.reg" & del "C:\ProgramData\Quotenamron\Pluszap.reg" & SCHTASKS /Delete /TN "psv_Donla" /F <==== UWAGA Task: {917836CE-EE6D-4B79-8928-F1467B253A31} - System32\Tasks\psv_Quadjob => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Tempair.reg" & del "C:\ProgramData\Quotenamron\Tempair.reg" & SCHTASKS /Delete /TN "psv_Quadjob" /F <==== UWAGA Task: {92B68FC0-54A7-467A-8FCA-C161E86627F5} - System32\Tasks\psv_Viafresh => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Sonfresh.reg" & del "C:\ProgramData\Quotenamron\Sonfresh.reg" & SCHTASKS /Delete /TN "psv_Viafresh" /F <==== UWAGA Task: {92CCBAB8-B64D-42EF-8C12-C55C2047AF39} - System32\Tasks\psv_Zummatop => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Golding.reg" & del "C:\ProgramData\Quotenamron\Golding.reg" & SCHTASKS /Delete /TN "psv_Zummatop" /F <==== UWAGA Task: {9351DF7E-BC20-4EBD-943E-9FE947CD85CE} - System32\Tasks\psv_Sanron => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\NewStrong.reg" & del "C:\ProgramData\Quotenamron\NewStrong.reg" & SCHTASKS /Delete /TN "psv_Sanron" /F <==== UWAGA Task: {938405A3-4042-4059-AF71-B2DB1ABB9A30} - System32\Tasks\Radosław GwiazdaCosmogonicWerewolvesV2 => Rundll32.exe ChicoryAromatics.dll,main 7 1 <==== UWAGA Task: {938620D4-28C0-4E97-ACB5-0A7A9D3ADEB4} - System32\Tasks\psv_TopOzeex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\S--Soft.reg" & del "C:\ProgramData\Quotenamron\S--Soft.reg" & SCHTASKS /Delete /TN "psv_TopOzeex" /F <==== UWAGA Task: {938D84A5-517F-4052-82DA-8D7333F74CAF} - System32\Tasks\psv_Lamlax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\KeyHattop.reg" & del "C:\ProgramData\Quotenamron\KeyHattop.reg" & SCHTASKS /Delete /TN "psv_Lamlax" /F <==== UWAGA Task: {93FA6D16-9B6C-4D0F-917E-63FC8B2D5ABE} - System32\Tasks\psv_Zoomdom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ronlex.reg" & del "C:\ProgramData\Quotenamron\Ronlex.reg" & SCHTASKS /Delete /TN "psv_Zoomdom" /F <==== UWAGA Task: {941698B9-BCA4-4925-B30C-1E784F6A2C99} - System32\Tasks\psv_SoloNimfan => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Sonex.reg" & del "C:\ProgramData\Quotenamron\Sonex.reg" & SCHTASKS /Delete /TN "psv_SoloNimfan" /F <==== UWAGA Task: {983E0809-6D6F-4240-BAB9-CC3F7E88451B} - System32\Tasks\psv_Ventojob => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Truetone.reg" & del "C:\ProgramData\Quotenamron\Truetone.reg" & SCHTASKS /Delete /TN "psv_Ventojob" /F <==== UWAGA Task: {9A37CE34-2D07-44E0-859B-E7099CDC5208} - System32\Tasks\psv_OpeDom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\StockDamis.reg" & del "C:\ProgramData\Quotenamron\StockDamis.reg" & SCHTASKS /Delete /TN "psv_OpeDom" /F <==== UWAGA Task: {9A750881-82A8-441A-866D-0513D1BEBEC7} - System32\Tasks\psv_Tiprundax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Stimfax.reg" & del "C:\ProgramData\Quotenamron\Stimfax.reg" & SCHTASKS /Delete /TN "psv_Tiprundax" /F <==== UWAGA Task: {9AD184DE-F4EA-4D90-87B4-2E5CDA9E1BDD} - System32\Tasks\psv_Ranlux => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Keydex.reg" & del "C:\ProgramData\Quotenamron\Keydex.reg" & SCHTASKS /Delete /TN "psv_Ranlux" /F <==== UWAGA Task: {9B58268B-C068-4F90-AE30-5D3F6705C5AD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-24] (Google Inc.) Task: {9C218396-C923-4DAE-B8E7-14E4068ECF7A} - System32\Tasks\psv_Lamstrong => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Silverstring.reg" & del "C:\ProgramData\Quotenamron\Silverstring.reg" & SCHTASKS /Delete /TN "psv_Lamstrong" /F <==== UWAGA Task: {9DAAE41C-CE91-4431-A6AE-79EACC615B54} - System32\Tasks\psv_FunCanfax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ansolofax.reg" & del "C:\ProgramData\Quotenamron\Ansolofax.reg" & SCHTASKS /Delete /TN "psv_FunCanfax" /F <==== UWAGA Task: {9DACD258-1BBF-4B06-AF61-D6FA9C6353D5} - System32\Tasks\psv_OntoSansoft => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Transex.reg" & del "C:\ProgramData\Quotenamron\Transex.reg" & SCHTASKS /Delete /TN "psv_OntoSansoft" /F <==== UWAGA Task: {9E9AD5A3-6D08-4BF4-B321-442025CBD1C8} - System32\Tasks\psv_Tamlex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Indigoit.reg" & del "C:\ProgramData\Quotenamron\Indigoit.reg" & SCHTASKS /Delete /TN "psv_Tamlex" /F <==== UWAGA Task: {9F8CCB0E-09E7-475F-A558-294ED272B672} - System32\Tasks\psv_Lamity => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Kantough.reg" & del "C:\ProgramData\Quotenamron\Kantough.reg" & SCHTASKS /Delete /TN "psv_Lamity" /F <==== UWAGA Task: {9FEA0A2A-560E-4A8E-8FB8-CD58AF82BF5A} - System32\Tasks\psv_Zathkeysing => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zoneco.reg" & del "C:\ProgramData\Quotenamron\Zoneco.reg" & SCHTASKS /Delete /TN "psv_Zathkeysing" /F <==== UWAGA Task: {A0A7A899-BA82-4ECB-8256-25F5CF3ADC24} - System32\Tasks\psv_DongLam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Biolex.reg" & del "C:\ProgramData\Quotenamron\Biolex.reg" & SCHTASKS /Delete /TN "psv_DongLam" /F <==== UWAGA Task: {A0BDB6E7-E4D4-42C6-AC8A-AC703133B4B3} - System32\Tasks\psv_Topstock => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Tamptip.reg" & del "C:\ProgramData\Quotenamron\Tamptip.reg" & SCHTASKS /Delete /TN "psv_Topstock" /F <==== UWAGA Task: {A10EE0C1-4E87-49FA-9724-62F0FCC4CC1F} - System32\Tasks\psv_ReJoycom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\HotSing.reg" & del "C:\ProgramData\Quotenamron\HotSing.reg" & SCHTASKS /Delete /TN "psv_ReJoycom" /F <==== UWAGA Task: {A11C7108-199F-493A-A4AE-48328B5F87E0} - System32\Tasks\psv_Fun-Touch => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Dongit.reg" & del "C:\ProgramData\Quotenamron\Dongit.reg" & SCHTASKS /Delete /TN "psv_Fun-Touch" /F <==== UWAGA Task: {A1AF34B1-4E9C-4DEF-91DE-E80E1ACC4D90} - System32\Tasks\psv_Vaiahattop => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Sanflex.reg" & del "C:\ProgramData\Quotenamron\Sanflex.reg" & SCHTASKS /Delete /TN "psv_Vaiahattop" /F <==== UWAGA Task: {A2CAFD73-172E-4811-AC2A-7E9A6DD267FC} - System32\Tasks\psv_Zerstrong => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ranktam.reg" & del "C:\ProgramData\Quotenamron\Ranktam.reg" & SCHTASKS /Delete /TN "psv_Zerstrong" /F <==== UWAGA Task: {A55EF928-299A-4C6C-B97F-8A99DFBB9A67} - System32\Tasks\psv_Silverity => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Voltwarm.reg" & del "C:\ProgramData\Quotenamron\Voltwarm.reg" & SCHTASKS /Delete /TN "psv_Silverity" /F <==== UWAGA Task: {A58A9549-DA9B-4114-8AEA-B3B1BA8A50D0} - System32\Tasks\psv_Hot-Fix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Tipphase.reg" & del "C:\ProgramData\Quotenamron\Tipphase.reg" & SCHTASKS /Delete /TN "psv_Hot-Fix" /F <==== UWAGA Task: {A58C27B8-54C2-4F1F-8434-738019F90961} - System32\Tasks\psv_Bigzimlam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Stanzuncom.reg" & del "C:\ProgramData\Quotenamron\Stanzuncom.reg" & SCHTASKS /Delete /TN "psv_Bigzimlam" /F <==== UWAGA Task: {A6ADC396-02A9-4541-ACD2-18829E777EA1} - System32\Tasks\psv_Nimlab => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\X-lex.reg" & del "C:\ProgramData\Quotenamron\X-lex.reg" & SCHTASKS /Delete /TN "psv_Nimlab" /F <==== UWAGA Task: {A74497AC-AFA1-49AA-B4F9-F526F90E6BE6} - System32\Tasks\psv_Dentocom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Rontech.reg" & del "C:\ProgramData\Quotenamron\Rontech.reg" & SCHTASKS /Delete /TN "psv_Dentocom" /F <==== UWAGA Task: {A7BADBCC-AC82-46F6-8A19-D8B3D97D87FC} - System32\Tasks\psv_HotDom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Saodom.reg" & del "C:\ProgramData\Quotenamron\Saodom.reg" & SCHTASKS /Delete /TN "psv_HotDom" /F <==== UWAGA Task: {A8A0577D-4118-4B67-B638-B21ED3D9DFFD} - System32\Tasks\psv_CofNamfax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\FinEx.reg" & del "C:\ProgramData\Quotenamron\FinEx.reg" & SCHTASKS /Delete /TN "psv_CofNamfax" /F <==== UWAGA Task: {A8CDFC89-18B1-4FAA-AB78-211A1652B8D8} - System32\Tasks\psv_Bluetech => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Geotam.reg" & del "C:\ProgramData\Quotenamron\Geotam.reg" & SCHTASKS /Delete /TN "psv_Bluetech" /F <==== UWAGA Task: {AA198FC2-6D4A-42D7-BD43-86EE21EA7105} - System32\Tasks\psv_Blackovedex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zath-Dex.reg" & del "C:\ProgramData\Quotenamron\Zath-Dex.reg" & SCHTASKS /Delete /TN "psv_Blackovedex" /F <==== UWAGA Task: {AA4525FF-04CE-4156-83D6-58E3394C46A3} - System32\Tasks\psv_Lexi-Com => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Homelight.reg" & del "C:\ProgramData\Quotenamron\Homelight.reg" & SCHTASKS /Delete /TN "psv_Lexi-Com" /F <==== UWAGA Task: {AABACE32-EB3C-456E-AC8A-3BBFB18CF022} - System32\Tasks\psv_Tintax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Namstring.reg" & del "C:\ProgramData\Quotenamron\Namstring.reg" & SCHTASKS /Delete /TN "psv_Tintax" /F <==== UWAGA Task: {AB4C7911-EF8B-418A-BED8-65EBA4726D52} - System32\Tasks\psv_Biozap => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ozerin.reg" & del "C:\ProgramData\Quotenamron\Ozerin.reg" & SCHTASKS /Delete /TN "psv_Biozap" /F <==== UWAGA Task: {AB974C33-BDC1-4FC0-B6C4-6B8280063243} - System32\Tasks\psv_Joy-Is => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Goodron.reg" & del "C:\ProgramData\Quotenamron\Goodron.reg" & SCHTASKS /Delete /TN "psv_Joy-Is" /F <==== UWAGA Task: {ABA54FB1-5E97-42D6-ACBA-4027A61D81E1} - System32\Tasks\psv_Dalt-Tam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zonedex.reg" & del "C:\ProgramData\Quotenamron\Zonedex.reg" & SCHTASKS /Delete /TN "psv_Dalt-Tam" /F <==== UWAGA Task: {AC989338-41E9-4871-927F-C17E6F6340C0} - System32\Tasks\psv_Zamfix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Voltfix.reg" & del "C:\ProgramData\Quotenamron\Voltfix.reg" & SCHTASKS /Delete /TN "psv_Zamfix" /F <==== UWAGA Task: {AD885B85-B46C-497C-B879-04301AF43A64} - System32\Tasks\GoogleUpdateTaskMachineUA1d12e592d4a6d4d => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-24] (Google Inc.) Task: {AEC623FC-8EB0-40B9-833A-311822956600} - System32\Tasks\psv_Geo-Cof => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Scotfan.reg" & del "C:\ProgramData\Quotenamron\Scotfan.reg" & SCHTASKS /Delete /TN "psv_Geo-Cof" /F <==== UWAGA Task: {AF1C3713-5BFC-4634-ABB8-3729FFC67A09} - System32\Tasks\psv_Replus => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\OpenDex.reg" & del "C:\ProgramData\Quotenamron\OpenDex.reg" & SCHTASKS /Delete /TN "psv_Replus" /F <==== UWAGA Task: {B128943F-5CDE-4DCA-B801-285B4E93731B} - System32\Tasks\psv_ReJoytam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Roundphase.reg" & del "C:\ProgramData\Quotenamron\Roundphase.reg" & SCHTASKS /Delete /TN "psv_ReJoytam" /F <==== UWAGA Task: {B21BB51B-2AEF-4928-9E49-94AF8F83C1F4} - System32\Tasks\psv_Inrantech => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Soloplus.reg" & del "C:\ProgramData\Quotenamron\Soloplus.reg" & SCHTASKS /Delete /TN "psv_Inrantech" /F <==== UWAGA Task: {B25FDC6C-F459-4ADB-B2BA-8D428F8C07FD} - System32\Tasks\psv_HotReming => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Triszap.reg" & del "C:\ProgramData\Quotenamron\Triszap.reg" & SCHTASKS /Delete /TN "psv_HotReming" /F <==== UWAGA Task: {B283117F-573F-4580-AD60-428CC1DA5F86} - System32\Tasks\psv_Dansuntone => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\StanHottam.reg" & del "C:\ProgramData\Quotenamron\StanHottam.reg" & SCHTASKS /Delete /TN "psv_Dansuntone" /F <==== UWAGA Task: {B28E87B1-F173-4AE5-BB21-B0F6AC89D80C} - System32\Tasks\psv_Voltax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ran-Dox.reg" & del "C:\ProgramData\Quotenamron\Ran-Dox.reg" & SCHTASKS /Delete /TN "psv_Voltax" /F <==== UWAGA Task: {B36576E1-2D95-4132-BE84-D7E2B68B9FB6} - System32\Tasks\psv_StockDex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zunlux.reg" & del "C:\ProgramData\Quotenamron\Zunlux.reg" & SCHTASKS /Delete /TN "psv_StockDex" /F <==== UWAGA Task: {B3DC607A-4A17-472A-8DB6-CF874F00E31F} - System32\Tasks\psv_U-string => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zerfind.reg" & del "C:\ProgramData\Quotenamron\Zerfind.reg" & SCHTASKS /Delete /TN "psv_U-string" /F <==== UWAGA Task: {B587BB8D-BD27-43BD-9272-3FD4F3E4BADD} - System32\Tasks\psv_Stanfax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zimtone.reg" & del "C:\ProgramData\Quotenamron\Zimtone.reg" & SCHTASKS /Delete /TN "psv_Stanfax" /F <==== UWAGA Task: {B5949AD3-9B36-4727-A0BE-78BC294F2CBA} - System32\Tasks\GoogleUpdateTaskMachineCore1d1ab42f99774cc => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-24] (Google Inc.) Task: {B6E94715-E4C7-457B-9E51-0DD08DAED443} - System32\Tasks\psv_HayZamlux => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ran-Tax.reg" & del "C:\ProgramData\Quotenamron\Ran-Tax.reg" & SCHTASKS /Delete /TN "psv_HayZamlux" /F <==== UWAGA Task: {B764C467-F1D9-400C-8B47-2CE7D51EAF70} - System32\Tasks\psv_Zimlax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Temp-La.reg" & del "C:\ProgramData\Quotenamron\Temp-La.reg" & SCHTASKS /Delete /TN "psv_Zimlax" /F <==== UWAGA Task: {B768FAEE-16C5-4C8C-AAA3-C964E385CF51} - System32\Tasks\psv_Ontogolax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zam-Top.reg" & del "C:\ProgramData\Quotenamron\Zam-Top.reg" & SCHTASKS /Delete /TN "psv_Ontogolax" /F <==== UWAGA Task: {B7BD2404-E241-4500-9C77-DF5B5EAA7E72} - System32\Tasks\psv_Redgolab => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Qvotraxfind.reg" & del "C:\ProgramData\Quotenamron\Qvotraxfind.reg" & SCHTASKS /Delete /TN "psv_Redgolab" /F <==== UWAGA Task: {B7C9DB90-3F25-490C-9CB3-C8A5F6881B86} - System32\Tasks\psv_ApTrax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ontokeyhome.reg" & del "C:\ProgramData\Quotenamron\Ontokeyhome.reg" & SCHTASKS /Delete /TN "psv_ApTrax" /F <==== UWAGA Task: {BA376526-87F5-44A7-AF9F-91D30D21F1AD} - System32\Tasks\psv_Zumma-La => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Unigocore.reg" & del "C:\ProgramData\Quotenamron\Unigocore.reg" & SCHTASKS /Delete /TN "psv_Zumma-La" /F <==== UWAGA Task: {BA8CECE0-3AA1-4662-8B7E-530ACAE765DB} - System32\Tasks\psv_Indigostrong => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\LamOvetone.reg" & del "C:\ProgramData\Quotenamron\LamOvetone.reg" & SCHTASKS /Delete /TN "psv_Indigostrong" /F <==== UWAGA Task: {BAE463D2-7716-4D62-B1C3-7ACB0DB631AE} - System32\Tasks\psv_Techtam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Stockcof.reg" & del "C:\ProgramData\Quotenamron\Stockcof.reg" & SCHTASKS /Delete /TN "psv_Techtam" /F <==== UWAGA Task: {BBC4EB68-A5B8-4845-B68D-78F1CB30B3F0} - System32\Tasks\psv_Vaiacof => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Toning.reg" & del "C:\ProgramData\Quotenamron\Toning.reg" & SCHTASKS /Delete /TN "psv_Vaiacof" /F <==== UWAGA Task: {BC07E1BB-075B-4745-8477-F526B7A380B4} - System32\Tasks\psv_Ran-Tax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\InchSolowarm.reg" & del "C:\ProgramData\Quotenamron\InchSolowarm.reg" & SCHTASKS /Delete /TN "psv_Ran-Tax" /F <==== UWAGA Task: {BD14DE2A-B371-4443-A996-3D5374B0CA6C} - System32\Tasks\psv_Kanfix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Physing.reg" & del "C:\ProgramData\Quotenamron\Physing.reg" & SCHTASKS /Delete /TN "psv_Kanfix" /F <==== UWAGA Task: {BE1B3BC3-41BB-4B2E-8D88-39D27619FDD9} - System32\Tasks\psv_Whitenix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Subquotouch.reg" & del "C:\ProgramData\Quotenamron\Subquotouch.reg" & SCHTASKS /Delete /TN "psv_Whitenix" /F <==== UWAGA Task: {BE499679-DF77-4805-B9F6-00FF22DAABDF} - System32\Tasks\psv_S-Tonstring => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\StimGodox.reg" & del "C:\ProgramData\Quotenamron\StimGodox.reg" & SCHTASKS /Delete /TN "psv_S-Tonstring" /F <==== UWAGA Task: {BF944CBD-1DAB-48F6-9E48-DC9BF8FC6A69} - System32\Tasks\psv_Flexplus => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\SonDinwarm.reg" & del "C:\ProgramData\Quotenamron\SonDinwarm.reg" & SCHTASKS /Delete /TN "psv_Flexplus" /F <==== UWAGA Task: {C0DEF674-C45B-4F82-81A1-D28F7B8C092C} - System32\Tasks\psv_Vilatech => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\BioSoft.reg" & del "C:\ProgramData\Quotenamron\BioSoft.reg" & SCHTASKS /Delete /TN "psv_Vilatech" /F <==== UWAGA Task: {C15BD791-5CAA-4B78-91DB-998827CB2747} - System32\Tasks\psv_Voya-Job => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\FunRedity.reg" & del "C:\ProgramData\Quotenamron\FunRedity.reg" & SCHTASKS /Delete /TN "psv_Voya-Job" /F <==== UWAGA Task: {C167E17A-6372-45F0-8CC1-BBAAF1C10FC8} - System32\Tasks\psv_Siltrax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\ZunKix.reg" & del "C:\ProgramData\Quotenamron\ZunKix.reg" & SCHTASKS /Delete /TN "psv_Siltrax" /F <==== UWAGA Task: {C2033BF6-2D70-49F8-9211-461629C44E0E} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => %ProgramFiles%\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe Task: {C229C224-281D-48FC-81D9-5D80889A9D18} - System32\Tasks\psv_Fixdex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zundax.reg" & del "C:\ProgramData\Quotenamron\Zundax.reg" & SCHTASKS /Delete /TN "psv_Fixdex" /F <==== UWAGA Task: {C22D9ECD-33FE-4437-B284-2D8E331DF36A} - System32\Tasks\psv_Hothome => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Hottrax.reg" & del "C:\ProgramData\Quotenamron\Hottrax.reg" & SCHTASKS /Delete /TN "psv_Hothome" /F <==== UWAGA Task: {C33A9CFE-755F-453F-9019-EF29510EF8F6} - System32\Tasks\psv_Salttech => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Subphase.reg" & del "C:\ProgramData\Quotenamron\Subphase.reg" & SCHTASKS /Delete /TN "psv_Salttech" /F <==== UWAGA Task: {C3ADABFD-5F56-4B78-9FAC-3A9E8636327D} - System32\Tasks\psv_Dontone => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ozertop.reg" & del "C:\ProgramData\Quotenamron\Ozertop.reg" & SCHTASKS /Delete /TN "psv_Dontone" /F <==== UWAGA Task: {C3C87A13-1270-42D1-AC79-43C9BA4B82E1} - System32\Tasks\psv_Tamhold => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Voltin.reg" & del "C:\ProgramData\Quotenamron\Voltin.reg" & SCHTASKS /Delete /TN "psv_Tamhold" /F <==== UWAGA Task: {C3EED2B3-9459-4DBE-9451-A839F3A186C4} - System32\Tasks\psv_Light-Ron => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zummadax.reg" & del "C:\ProgramData\Quotenamron\Zummadax.reg" & SCHTASKS /Delete /TN "psv_Light-Ron" /F <==== UWAGA Task: {C47C2464-F214-4436-AC82-37B94F83F8A5} - System32\Tasks\psv_Hottone => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Bigtop.reg" & del "C:\ProgramData\Quotenamron\Bigtop.reg" & SCHTASKS /Delete /TN "psv_Hottone" /F <==== UWAGA Task: {C4A846EC-3302-4E5B-BD1C-9CE5EC20D52E} - System32\Tasks\psv_Softtex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Supereco.reg" & del "C:\ProgramData\Quotenamron\Supereco.reg" & SCHTASKS /Delete /TN "psv_Softtex" /F <==== UWAGA Task: {C535A67B-26D2-45AA-91AB-B3610E4D000D} - System32\Tasks\psv_U-nimstring => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Solsoft.reg" & del "C:\ProgramData\Quotenamron\Solsoft.reg" & SCHTASKS /Delete /TN "psv_U-nimstring" /F <==== UWAGA Task: {C55F1898-12CD-49BD-AE13-73E196A0814F} - System32\Tasks\psv_Unitip => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Medkix.reg" & del "C:\ProgramData\Quotenamron\Medkix.reg" & SCHTASKS /Delete /TN "psv_Unitip" /F <==== UWAGA Task: {C5A8E2BE-78AF-4537-8587-2DE364185474} - System32\Tasks\psv_Apzunlux => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Hotozeing.reg" & del "C:\ProgramData\Quotenamron\Hotozeing.reg" & SCHTASKS /Delete /TN "psv_Apzunlux" /F <==== UWAGA Task: {C7CE1334-F1B1-4AC1-85C9-0F06397B9843} - System32\Tasks\psv_X-fresh => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Haykeyin.reg" & del "C:\ProgramData\Quotenamron\Haykeyin.reg" & SCHTASKS /Delete /TN "psv_X-fresh" /F <==== UWAGA Task: {C968CF5B-3824-4D24-8AE1-7B8B47D413B3} - System32\Tasks\psv_Latfix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Rankfind.reg" & del "C:\ProgramData\Quotenamron\Rankfind.reg" & SCHTASKS /Delete /TN "psv_Latfix" /F <==== UWAGA Task: {CA47B23C-B3A8-4BCD-B819-720DD0573BAC} - System32\Tasks\psv_LabLight => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Plusair.reg" & del "C:\ProgramData\Quotenamron\Plusair.reg" & SCHTASKS /Delete /TN "psv_LabLight" /F <==== UWAGA Task: {CABA1924-3294-4278-A8B3-D7E782DDC273} - System32\Tasks\psv_Strongstring => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Freshhome.reg" & del "C:\ProgramData\Quotenamron\Freshhome.reg" & SCHTASKS /Delete /TN "psv_Strongstring" /F <==== UWAGA Task: {CAF32EBD-7264-40D9-BEC6-CB1CAC67CA48} - System32\Tasks\psv_Zum-Fix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\DanTansoft.reg" & del "C:\ProgramData\Quotenamron\DanTansoft.reg" & SCHTASKS /Delete /TN "psv_Zum-Fix" /F <==== UWAGA Task: {CB0F42AA-01C9-4C91-93ED-16AFC39D2EC3} - System32\Tasks\psv_Tran-Dex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Yearfax.reg" & del "C:\ProgramData\Quotenamron\Yearfax.reg" & SCHTASKS /Delete /TN "psv_Tran-Dex" /F <==== UWAGA Task: {CB4EF6BF-00D3-475E-B4BE-14F75E2CA0E1} - System32\Tasks\psv_Condom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Tripplestock.reg" & del "C:\ProgramData\Quotenamron\Tripplestock.reg" & SCHTASKS /Delete /TN "psv_Condom" /F <==== UWAGA Task: {CB8A0534-8E8C-4124-B326-EEE4B186DC8F} - System32\Tasks\psv_Canla => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Inchtrax.reg" & del "C:\ProgramData\Quotenamron\Inchtrax.reg" & SCHTASKS /Delete /TN "psv_Canla" /F <==== UWAGA Task: {CCEA8886-8979-448C-A3ED-B31481BDDD1A} - System32\Tasks\psv_Islight => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Subcom.reg" & del "C:\ProgramData\Quotenamron\Subcom.reg" & SCHTASKS /Delete /TN "psv_Islight" /F <==== UWAGA Task: {CD53DB42-8FA2-4ACB-AC14-D33861EB7094} - System32\Tasks\psv_Tres-Cof => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Y-tax.reg" & del "C:\ProgramData\Quotenamron\Y-tax.reg" & SCHTASKS /Delete /TN "psv_Tres-Cof" /F <==== UWAGA Task: {CD6CCE3D-2C29-4FE7-B4B3-A450B6588B6B} - System32\Tasks\psv_Redit => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Tintom.reg" & del "C:\ProgramData\Quotenamron\Tintom.reg" & SCHTASKS /Delete /TN "psv_Redit" /F <==== UWAGA Task: {CE677A74-2266-480A-8A3F-4300A124490C} - System32\Tasks\psv_Hot-Hold => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Volsanhold.reg" & del "C:\ProgramData\Quotenamron\Volsanhold.reg" & SCHTASKS /Delete /TN "psv_Hot-Hold" /F <==== UWAGA Task: {CE745BB8-5BB9-4D21-9FE5-1AA1933E1649} - System32\Tasks\psv_Kinstring => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zot-Kix.reg" & del "C:\ProgramData\Quotenamron\Zot-Kix.reg" & SCHTASKS /Delete /TN "psv_Kinstring" /F <==== UWAGA Task: {CE8ACF95-8BC4-4D11-AE42-4D01249DFF2A} - System32\Tasks\psv_Groovetough => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\DonTraxing.reg" & del "C:\ProgramData\Quotenamron\DonTraxing.reg" & SCHTASKS /Delete /TN "psv_Groovetough" /F <==== UWAGA Task: {CF1A27BD-A839-45EA-A8DE-3A558BBCC8C7} - System32\Tasks\psv_Singotit => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\LightHotnix.reg" & del "C:\ProgramData\Quotenamron\LightHotnix.reg" & SCHTASKS /Delete /TN "psv_Singotit" /F <==== UWAGA Task: {CF1C1CFA-0311-43E6-ABAD-A47F0E40DC71} - System32\Tasks\psv_Zenstock => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Strongis.reg" & del "C:\ProgramData\Quotenamron\Strongis.reg" & SCHTASKS /Delete /TN "psv_Zenstock" /F <==== UWAGA Task: {CF4D4E5A-53FE-467B-8BD8-818691378070} - System32\Tasks\psv_Xxx-tonsing => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Truekix.reg" & del "C:\ProgramData\Quotenamron\Truekix.reg" & SCHTASKS /Delete /TN "psv_Xxx-tonsing" /F <==== UWAGA Task: {D066D610-2A7F-4BB2-AB15-D88982E9DDA1} - System32\Tasks\psv_U-cof => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zentone.reg" & del "C:\ProgramData\Quotenamron\Zentone.reg" & SCHTASKS /Delete /TN "psv_U-cof" /F <==== UWAGA Task: {D0898BC5-1C80-4B8B-8625-BB29058AF820} - System32\Tasks\psv_Silvertex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Solojob.reg" & del "C:\ProgramData\Quotenamron\Solojob.reg" & SCHTASKS /Delete /TN "psv_Silvertex" /F <==== UWAGA Task: {D0AAF2D4-C396-480E-A616-6B08762A0812} - System32\Tasks\psv_X-Cof => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\S-in.reg" & del "C:\ProgramData\Quotenamron\S-in.reg" & SCHTASKS /Delete /TN "psv_X-Cof" /F <==== UWAGA Task: {D108ECFA-4BCE-4400-A4A9-4D1793304F35} - System32\Tasks\psv_Topfax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Faxnamhold.reg" & del "C:\ProgramData\Quotenamron\Faxnamhold.reg" & SCHTASKS /Delete /TN "psv_Topfax" /F <==== UWAGA Task: {D132A007-8F0D-45D1-A8B0-70FF1D6FFEAB} - System32\Tasks\psv_ZumTouch => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Saosailfix.reg" & del "C:\ProgramData\Quotenamron\Saosailfix.reg" & SCHTASKS /Delete /TN "psv_ZumTouch" /F <==== UWAGA Task: {D1BB1AA2-021F-4152-AED6-88473B309201} - System32\Tasks\psv_Uno-Phase => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Alphaeco.reg" & del "C:\ProgramData\Quotenamron\Alphaeco.reg" & SCHTASKS /Delete /TN "psv_Uno-Phase" /F <==== UWAGA Task: {D2D37B66-6FE4-415F-8560-8723B0AD8BE7} - System32\Tasks\{69F462A4-A395-36C9-A56F-545E11228F88} => C:\Users\RADOSA~1\AppData\Roaming\{69F46~1\SYNCVE~1.EXE <==== UWAGA Task: {D2E43EFC-180F-48AF-9299-14BBF1D11F8F} - System32\Tasks\psv_SoftTanlux => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Tinit.reg" & del "C:\ProgramData\Quotenamron\Tinit.reg" & SCHTASKS /Delete /TN "psv_SoftTanlux" /F <==== UWAGA Task: {D4257117-4698-4541-B066-D13206379E17} - System32\Tasks\psv_Goodcore => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Voyanix.reg" & del "C:\ProgramData\Quotenamron\Voyanix.reg" & SCHTASKS /Delete /TN "psv_Goodcore" /F <==== UWAGA Task: {D45255EB-5729-493F-A504-22B3D35C184E} - System32\Tasks\snp => C:\ProgramData\Quotenamron\Quotenamron.exe [2016-04-02] () <==== UWAGA Task: {D4E784A9-9B5B-4E53-BDFE-3B98E3A1A258} - System32\Tasks\psv_Temptone => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Toplight.reg" & del "C:\ProgramData\Quotenamron\Toplight.reg" & SCHTASKS /Delete /TN "psv_Temptone" /F <==== UWAGA Task: {D4FDD9C0-601F-4257-8388-76EAF4E90D80} - System32\Tasks\psv_Zathfind => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Biofind.reg" & del "C:\ProgramData\Quotenamron\Biofind.reg" & SCHTASKS /Delete /TN "psv_Zathfind" /F <==== UWAGA Task: {D5682983-BF48-4B5B-8893-4F29189BF8F8} - System32\Tasks\GoogleUpdateTaskMachineCore1d1e90c9864f9cf => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-24] (Google Inc.) Task: {D5C4ED54-395D-4D31-AF2C-12478F4F1B8E} - System32\Tasks\psv_Faxzuntip => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Vilafax.reg" & del "C:\ProgramData\Quotenamron\Vilafax.reg" & SCHTASKS /Delete /TN "psv_Faxzuntip" /F <==== UWAGA Task: {D5D6645C-0465-47BD-B996-678E913CE83E} - System32\Tasks\psv_Freelam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Jobstrong.reg" & del "C:\ProgramData\Quotenamron\Jobstrong.reg" & SCHTASKS /Delete /TN "psv_Freelam" /F <==== UWAGA Task: {D5FF0F83-61CA-45EA-B361-2C83C524507B} - System32\Tasks\psv_SaoJaytip => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Xxx-touch.reg" & del "C:\ProgramData\Quotenamron\Xxx-touch.reg" & SCHTASKS /Delete /TN "psv_SaoJaytip" /F <==== UWAGA Task: {D627AEBD-284F-4ADE-AFA2-6D79FCD5D1D5} - System32\Tasks\psv_Finlab => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\DoubleTom.reg" & del "C:\ProgramData\Quotenamron\DoubleTom.reg" & SCHTASKS /Delete /TN "psv_Finlab" /F <==== UWAGA Task: {D68B4DD7-31F7-4B20-B430-42DE639C041C} - System32\Tasks\psv_SumDubtom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Opekix.reg" & del "C:\ProgramData\Quotenamron\Opekix.reg" & SCHTASKS /Delete /TN "psv_SumDubtom" /F <==== UWAGA Task: {D6A96047-6C62-4333-A0A1-7AE6980A4F1C} - System32\Tasks\psv_Ventofix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Trustfix.reg" & del "C:\ProgramData\Quotenamron\Trustfix.reg" & SCHTASKS /Delete /TN "psv_Ventofix" /F <==== UWAGA Task: {D7BF67EA-440D-43AD-8924-6E639D2E64A6} - System32\Tasks\psv_Medfind => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Plus-Tex.reg" & del "C:\ProgramData\Quotenamron\Plus-Tex.reg" & SCHTASKS /Delete /TN "psv_Medfind" /F <==== UWAGA Task: {D8901C19-93B6-445F-982F-4444121FECF9} - System32\Tasks\psv_Fasekix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Blacklam.reg" & del "C:\ProgramData\Quotenamron\Blacklam.reg" & SCHTASKS /Delete /TN "psv_Fasekix" /F <==== UWAGA Task: {D9F5A06A-D9D8-411B-9F45-680581D2C5E6} - System32\Tasks\psv_Techzunhold => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Opestrong.reg" & del "C:\ProgramData\Quotenamron\Opestrong.reg" & SCHTASKS /Delete /TN "psv_Techzunhold" /F <==== UWAGA Task: {DB0D3299-0633-4255-8319-B9BC76F4410B} - System32\Tasks\psv_Movestring => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Quotesololam.reg" & del "C:\ProgramData\Quotenamron\Quotesololam.reg" & SCHTASKS /Delete /TN "psv_Movestring" /F <==== UWAGA Task: {DC97B290-7FAF-4BB7-B55F-054041DF540B} - System32\Tasks\psv_Zunhome => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zummastrong.reg" & del "C:\ProgramData\Quotenamron\Zummastrong.reg" & SCHTASKS /Delete /TN "psv_Zunhome" /F <==== UWAGA Task: {DCF4E0AC-A812-4C55-81A3-8823A9507B13} - System32\Tasks\psv_Quadsoft => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Movedom.reg" & del "C:\ProgramData\Quotenamron\Movedom.reg" & SCHTASKS /Delete /TN "psv_Quadsoft" /F <==== UWAGA Task: {DCF726DB-BA26-4369-A5D1-8E4E4531E3CD} - System32\Tasks\psv_TrueKaydom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Tonlight.reg" & del "C:\ProgramData\Quotenamron\Tonlight.reg" & SCHTASKS /Delete /TN "psv_TrueKaydom" /F <==== UWAGA Task: {DD5821B4-DBDE-4D79-A127-05A15C44C866} - System32\Tasks\psv_Geo-Lex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ventotinstring.reg" & del "C:\ProgramData\Quotenamron\Ventotinstring.reg" & SCHTASKS /Delete /TN "psv_Geo-Lex" /F <==== UWAGA Task: {DDA91D34-0E38-49EA-904E-6F59F3B61F2E} - System32\Tasks\psv_Voya-Kix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Groovesantech.reg" & del "C:\ProgramData\Quotenamron\Groovesantech.reg" & SCHTASKS /Delete /TN "psv_Voya-Kix" /F <==== UWAGA Task: {DEBE79B6-990C-413C-AC99-E3D688F196D2} - System32\Tasks\psv_Santom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\FinTofan.reg" & del "C:\ProgramData\Quotenamron\FinTofan.reg" & SCHTASKS /Delete /TN "psv_Santom" /F <==== UWAGA Task: {DF95E85B-5704-47B2-A799-A3AAED41DCFC} - System32\Tasks\psv_Fixtom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Bamfax.reg" & del "C:\ProgramData\Quotenamron\Bamfax.reg" & SCHTASKS /Delete /TN "psv_Fixtom" /F <==== UWAGA Task: {E19FD717-133B-49B5-AEF1-A5E800D2CEC5} - System32\Tasks\psv_Geofax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Run-Nix.reg" & del "C:\ProgramData\Quotenamron\Run-Nix.reg" & SCHTASKS /Delete /TN "psv_Geofax" /F <==== UWAGA Task: {E2372DE3-821E-4CAE-8899-422B82084A41} - System32\Tasks\psv_TechSoft => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Lamwarm.reg" & del "C:\ProgramData\Quotenamron\Lamwarm.reg" & SCHTASKS /Delete /TN "psv_TechSoft" /F <==== UWAGA Task: {E23B89BB-7FCB-4069-ABA2-BF5251C9140E} - System32\Tasks\psv_Ranhome => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Stringjaytax.reg" & del "C:\ProgramData\Quotenamron\Stringjaytax.reg" & SCHTASKS /Delete /TN "psv_Ranhome" /F <==== UWAGA Task: {E2FEF3E7-1C5E-4A67-A3A3-BF0C4A46422E} - System32\Tasks\psv_Zundax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\KinSaillight.reg" & del "C:\ProgramData\Quotenamron\KinSaillight.reg" & SCHTASKS /Delete /TN "psv_Zundax" /F <==== UWAGA Task: {E3426417-CEDA-40AE-B5EC-C658B350B991} - System32\Tasks\psv_Unois => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Zonecof.reg" & del "C:\ProgramData\Quotenamron\Zonecof.reg" & SCHTASKS /Delete /TN "psv_Unois" /F <==== UWAGA Task: {E3E7A412-6BBE-444E-B144-4E8474037E7C} - System32\Tasks\psv_Voltzimphase => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\SolDontam.reg" & del "C:\ProgramData\Quotenamron\SolDontam.reg" & SCHTASKS /Delete /TN "psv_Voltzimphase" /F <==== UWAGA Task: {E4953C8C-1A07-418E-AF9D-397730514004} - System32\Tasks\psv_Scottex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Blackjob.reg" & del "C:\ProgramData\Quotenamron\Blackjob.reg" & SCHTASKS /Delete /TN "psv_Scottex" /F <==== UWAGA Task: {E4CD0446-B957-452C-A7FF-576F651E1060} - System32\Tasks\psv_Plusex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Tipfan.reg" & del "C:\ProgramData\Quotenamron\Tipfan.reg" & SCHTASKS /Delete /TN "psv_Plusex" /F <==== UWAGA Task: {E4D3EE73-317D-4A37-80FA-5F0A0F3FCB26} - System32\Tasks\psv_Zoomstrong => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Holdcof.reg" & del "C:\ProgramData\Quotenamron\Holdcof.reg" & SCHTASKS /Delete /TN "psv_Zoomstrong" /F <==== UWAGA Task: {E549A1E7-2E2E-4400-A10D-70B6DB24D8CF} - System32\Tasks\psv_Single-Warm => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Trustfix.reg" & del "C:\ProgramData\Quotenamron\Trustfix.reg" & SCHTASKS /Delete /TN "psv_Single-Warm" /F <==== UWAGA Task: {E5B7EC0F-CDA7-4E69-8DFF-316981D374E3} - System32\Tasks\psv_Apstatplus => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Gold-Ing.reg" & del "C:\ProgramData\Quotenamron\Gold-Ing.reg" & SCHTASKS /Delete /TN "psv_Apstatplus" /F <==== UWAGA Task: {E6074BF9-557D-43C3-A33F-F2A3EB944D00} - System32\Tasks\psv_Ranex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Opefix.reg" & del "C:\ProgramData\Quotenamron\Opefix.reg" & SCHTASKS /Delete /TN "psv_Ranex" /F <==== UWAGA Task: {E7D3D4D0-F85F-431E-9E2C-AF278E92DFC9} - System32\Tasks\psv_Stattip => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Over-Tone.reg" & del "C:\ProgramData\Quotenamron\Over-Tone.reg" & SCHTASKS /Delete /TN "psv_Stattip" /F <==== UWAGA Task: {E7E2D744-36E4-4D42-B861-07587372EE16} - System32\Tasks\psv_Bluehome => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Singaphome.reg" & del "C:\ProgramData\Quotenamron\Singaphome.reg" & SCHTASKS /Delete /TN "psv_Bluehome" /F <==== UWAGA Task: {E7EB577E-7FB3-4B4F-83C5-F9BDFFF6AE1C} - System32\Tasks\psv_Lotphase => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Standex.reg" & del "C:\ProgramData\Quotenamron\Standex.reg" & SCHTASKS /Delete /TN "psv_Lotphase" /F <==== UWAGA Task: {E7EFAB5C-C240-46A2-8335-06B0B48FB9B5} - System32\Tasks\psv_Freetouch => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Trippleity.reg" & del "C:\ProgramData\Quotenamron\Trippleity.reg" & SCHTASKS /Delete /TN "psv_Freetouch" /F <==== UWAGA Task: {E819EBE3-2682-4A89-8A2C-FA8146F17282} - System32\Tasks\psv_Nimtex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Dentophase.reg" & del "C:\ProgramData\Quotenamron\Dentophase.reg" & SCHTASKS /Delete /TN "psv_Nimtex" /F <==== UWAGA Task: {E856C2AF-83EE-4AE5-9096-F820A1F8DDFF} - System32\Tasks\psv_Tintough => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Subtouch.reg" & del "C:\ProgramData\Quotenamron\Subtouch.reg" & SCHTASKS /Delete /TN "psv_Tintough" /F <==== UWAGA Task: {E87053F8-06B6-43C1-98CF-F49A62F3094D} - System32\Tasks\psv_Sil-Dox => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ontozozzap.reg" & del "C:\ProgramData\Quotenamron\Ontozozzap.reg" & SCHTASKS /Delete /TN "psv_Sil-Dox" /F <==== UWAGA Task: {EA11C795-D0DD-4CB9-A90F-764F44E1C9A4} - System32\Tasks\psv_Trueity => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Bamzunfind.reg" & del "C:\ProgramData\Quotenamron\Bamzunfind.reg" & SCHTASKS /Delete /TN "psv_Trueity" /F <==== UWAGA Task: {EA1719CE-D127-4629-80E0-D9380832806C} - System32\Tasks\psv_NewTofresh => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Vila-Ron.reg" & del "C:\ProgramData\Quotenamron\Vila-Ron.reg" & SCHTASKS /Delete /TN "psv_NewTofresh" /F <==== UWAGA Task: {EA4EDA4C-2EBD-452F-81F9-383FCC2E3196} - System32\Tasks\psv_Mathsing => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Sanlam.reg" & del "C:\ProgramData\Quotenamron\Sanlam.reg" & SCHTASKS /Delete /TN "psv_Mathsing" /F <==== UWAGA Task: {EB0250A4-FCBE-43E0-BDBB-5A718E6CD2A3} - System32\Tasks\psv_Supersilfind => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Quadtone.reg" & del "C:\ProgramData\Quotenamron\Quadtone.reg" & SCHTASKS /Delete /TN "psv_Supersilfind" /F <==== UWAGA Task: {EB43D602-B941-442B-8EA9-474079AF1DF5} - System32\Tasks\psv_Zimflex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\TreeNix.reg" & del "C:\ProgramData\Quotenamron\TreeNix.reg" & SCHTASKS /Delete /TN "psv_Zimflex" /F <==== UWAGA Task: {EB5BE462-8FDA-495E-A0F7-6EA50793FC6D} - System32\Tasks\psv_Lexibam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Mattouch.reg" & del "C:\ProgramData\Quotenamron\Mattouch.reg" & SCHTASKS /Delete /TN "psv_Lexibam" /F <==== UWAGA Task: {EC15C39B-05EE-4424-B268-8B9AB5187471} - System32\Tasks\psv_KeySailex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Kay-Lax.reg" & del "C:\ProgramData\Quotenamron\Kay-Lax.reg" & SCHTASKS /Delete /TN "psv_KeySailex" /F <==== UWAGA Task: {EC3A7A8E-F495-4BF3-B8CE-B176CBDF7933} - System32\Tasks\psv_Domtech => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Toughcom.reg" & del "C:\ProgramData\Quotenamron\Toughcom.reg" & SCHTASKS /Delete /TN "psv_Domtech" /F <==== UWAGA Task: {ED3FC4F9-51C9-4BEB-B252-65308BAD2561} - System32\Tasks\psv_Sollex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\S-zap.reg" & del "C:\ProgramData\Quotenamron\S-zap.reg" & SCHTASKS /Delete /TN "psv_Sollex" /F <==== UWAGA Task: {EE1A4220-A490-4788-AAFE-285C4917D015} - System32\Tasks\psv_Unatone => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Dripplus.reg" & del "C:\ProgramData\Quotenamron\Dripplus.reg" & SCHTASKS /Delete /TN "psv_Unatone" /F <==== UWAGA Task: {EFF199DB-F2A1-4179-A430-349564095BB4} - System32\Tasks\psv_Homesondox => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Stimfan.reg" & del "C:\ProgramData\Quotenamron\Stimfan.reg" & SCHTASKS /Delete /TN "psv_Homesondox" /F <==== UWAGA Task: {F0833A92-6B7F-4AB6-A489-0B0CF921C0D3} - System32\Tasks\psv_MedDom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Blacklotla.reg" & del "C:\ProgramData\Quotenamron\Blacklotla.reg" & SCHTASKS /Delete /TN "psv_MedDom" /F <==== UWAGA Task: {F14C46DD-D425-47F5-8510-F58F91C62A63} - System32\Tasks\psv_InDoncom => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Lamranfresh.reg" & del "C:\ProgramData\Quotenamron\Lamranfresh.reg" & SCHTASKS /Delete /TN "psv_InDoncom" /F <==== UWAGA Task: {F15C47CD-05C6-4656-B0DF-E12BF5B800E1} - System32\Tasks\psv_Green-Tech => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Labtough.reg" & del "C:\ProgramData\Quotenamron\Labtough.reg" & SCHTASKS /Delete /TN "psv_Green-Tech" /F <==== UWAGA Task: {F18030F5-F5FF-4976-969A-9EBAE95BDB0D} - System32\Tasks\psv_StockPhase => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Holdtrax.reg" & del "C:\ProgramData\Quotenamron\Holdtrax.reg" & SCHTASKS /Delete /TN "psv_StockPhase" /F <==== UWAGA Task: {F20FCD6C-03BE-4C19-AAA6-9CEF0D109DE7} - System32\Tasks\psv_Duostock => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\TonZamphase.reg" & del "C:\ProgramData\Quotenamron\TonZamphase.reg" & SCHTASKS /Delete /TN "psv_Duostock" /F <==== UWAGA Task: {F31DB87F-E399-4022-905F-4E1DEF92F037} - System32\Tasks\psv_Rankkix => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Daltdax.reg" & del "C:\ProgramData\Quotenamron\Daltdax.reg" & SCHTASKS /Delete /TN "psv_Rankkix" /F <==== UWAGA Task: {F36891FB-ECF8-47A8-869E-8AE4A656918F} - System32\Tasks\psv_Icecore => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Matgofix.reg" & del "C:\ProgramData\Quotenamron\Matgofix.reg" & SCHTASKS /Delete /TN "psv_Icecore" /F <==== UWAGA Task: {F45438E8-2B08-4E8C-90EF-32F69FBD383C} - System32\Tasks\psv_Isfax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Transwarm.reg" & del "C:\ProgramData\Quotenamron\Transwarm.reg" & SCHTASKS /Delete /TN "psv_Isfax" /F <==== UWAGA Task: {F4E900BB-72E0-4BB1-A0FA-273D60EB2F0A} - System32\Tasks\psv_Jayjob => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Freshla.reg" & del "C:\ProgramData\Quotenamron\Freshla.reg" & SCHTASKS /Delete /TN "psv_Jayjob" /F <==== UWAGA Task: {F4F55AC1-268C-4EA3-BA93-5F7809848E1B} - System32\Tasks\psv_Zotit => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Statin.reg" & del "C:\ProgramData\Quotenamron\Statin.reg" & SCHTASKS /Delete /TN "psv_Zotit" /F <==== UWAGA Task: {F6B34BB3-A047-42EB-9039-489124987389} - System32\Tasks\psv_Doublecof => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Freshbam.reg" & del "C:\ProgramData\Quotenamron\Freshbam.reg" & SCHTASKS /Delete /TN "psv_Doublecof" /F <==== UWAGA Task: {F8B28384-0C1A-41CB-A1F9-BFE416C09B8D} - System32\Tasks\psv_TechJoylam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\BetaIng.reg" & del "C:\ProgramData\Quotenamron\BetaIng.reg" & SCHTASKS /Delete /TN "psv_TechJoylam" /F <==== UWAGA Task: {F9DC0D6D-9E35-45F5-85FB-1F7991FC71A9} - System32\Tasks\psv_BigTam => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Saltdox.reg" & del "C:\ProgramData\Quotenamron\Saltdox.reg" & SCHTASKS /Delete /TN "psv_BigTam" /F <==== UWAGA Task: {FA4DDFDF-D890-4724-A206-686E72DAE549} - System32\Tasks\psv_Physdox => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Newlam.reg" & del "C:\ProgramData\Quotenamron\Newlam.reg" & SCHTASKS /Delete /TN "psv_Physdox" /F <==== UWAGA Task: {FA7AABE6-ECD4-438A-B380-7D8761D212BD} - System32\Tasks\psv_Roneco => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\TipTindox.reg" & del "C:\ProgramData\Quotenamron\TipTindox.reg" & SCHTASKS /Delete /TN "psv_Roneco" /F <==== UWAGA Task: {FABA8A44-044E-4E21-A102-60B72FC8467C} - System32\Tasks\psv_ZotIng => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\TanDex.reg" & del "C:\ProgramData\Quotenamron\TanDex.reg" & SCHTASKS /Delete /TN "psv_ZotIng" /F <==== UWAGA Task: {FBB81D69-7544-4D09-8961-4C7F245B1583} - System32\Tasks\psv_Unilab => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Overnix.reg" & del "C:\ProgramData\Quotenamron\Overnix.reg" & SCHTASKS /Delete /TN "psv_Unilab" /F <==== UWAGA Task: {FBE6CFD3-D329-4D94-8478-8C4D20EFB349} - System32\Tasks\psv_Sonsoft => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Hottop.reg" & del "C:\ProgramData\Quotenamron\Hottop.reg" & SCHTASKS /Delete /TN "psv_Sonsoft" /F <==== UWAGA Task: {FD28903B-0855-4578-B19F-3DABD5E2069A} - System32\Tasks\psv_Greening => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Sanron.reg" & del "C:\ProgramData\Quotenamron\Sanron.reg" & SCHTASKS /Delete /TN "psv_Greening" /F <==== UWAGA Task: {FD411A85-8FBF-442F-AE02-F41DA85769D2} - System32\Tasks\psv_Joyron => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Ransoft.reg" & del "C:\ProgramData\Quotenamron\Ransoft.reg" & SCHTASKS /Delete /TN "psv_Joyron" /F <==== UWAGA Task: {FE3D529E-4874-4495-BD9C-9FFF5917AE67} - System32\Tasks\psv_Stimtex => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Quohold.reg" & del "C:\ProgramData\Quotenamron\Quohold.reg" & SCHTASKS /Delete /TN "psv_Stimtex" /F <==== UWAGA Task: {FED9A24C-0AED-450A-8968-BAA28564D24C} - System32\Tasks\psv_Quoteaplight => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\Hattantouch.reg" & del "C:\ProgramData\Quotenamron\Hattantouch.reg" & SCHTASKS /Delete /TN "psv_Quoteaplight" /F <==== UWAGA Task: {FF7F6680-E740-4B3E-889C-D5A3F973CE97} - System32\Tasks\psv_Santrax => cmd.exe /c regedit.exe /s "C:\ProgramData\Quotenamron\IceOtit.reg" & del "C:\ProgramData\Quotenamron\IceOtit.reg" & SCHTASKS /Delete /TN "psv_Santrax" /F <==== UWAGA (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d12e592c612672.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d15d897d530f26.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d1ab42f99774cc.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d12e592d4a6d4d.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\{69F462A4-A395-36C9-A56F-545E11228F88}.job => C:\Users\RADOSA~1\AppData\Roaming\{69F46~1\SYNCVE~1.EXE <==== UWAGA ==================== Skróty ============================= (Wybrane wejścia mogą zostać załączone w celu ich zresetowania lub usunięcia.) ShortcutWithArgument: C:\Users\Radosław Gwiazda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> %SNP% ShortcutWithArgument: C:\Users\Radosław Gwiazda\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> %SNP% ShortcutWithArgument: C:\Users\Radosław Gwiazda\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> %SNP% ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> %SNP% ==================== Załadowane moduły (filtrowane) ============== 2015-09-27 18:36 - 2015-01-12 17:16 - 02384896 _____ () C:\Program Files (x86)\SafeCom\SafeComPrintClient\scSEHex64.dll 2012-12-12 15:20 - 2012-12-12 15:20 - 00419536 _____ () C:\Program Files (x86)\Polar\Daemon\polard.exe 2014-03-26 12:50 - 2015-09-24 21:29 - 00058864 _____ () C:\Program Files (x86)\Lenovo\Energy Manager\kbdhook.dll 2015-06-10 10:00 - 2015-06-10 10:00 - 06217728 _____ () C:\Program Files (x86)\Polar\WebSync\WebSync.exe 2012-12-12 15:20 - 2012-12-12 15:20 - 03483856 _____ () C:\Program Files (x86)\Polar\Daemon\libpolar.dll 2015-09-27 18:36 - 2015-01-12 17:10 - 02332160 _____ () C:\Program Files (x86)\SafeCom\SafeComPrintClient\scSEHex.dll 2015-06-10 09:47 - 2015-06-10 09:47 - 00104448 _____ () C:\Program Files (x86)\Polar\WebSync\PTransform.dll 2010-02-10 16:06 - 2010-02-10 16:06 - 00334848 _____ () C:\Program Files (x86)\Polar\WebSync\QtXml4.dll 2011-01-14 16:01 - 2011-01-14 16:01 - 02142720 _____ () C:\Program Files (x86)\Polar\WebSync\QtCore4.dll 2015-06-10 09:46 - 2015-06-10 09:46 - 03717632 _____ () C:\Program Files (x86)\Polar\WebSync\libpolar.dll 2010-02-10 16:22 - 2010-02-10 16:22 - 07971840 _____ () C:\Program Files (x86)\Polar\WebSync\QtGui4.dll 2010-02-10 16:07 - 2010-02-10 16:07 - 00929280 _____ () C:\Program Files (x86)\Polar\WebSync\QtNetwork4.dll 2010-02-10 18:45 - 2010-02-10 18:45 - 00025600 _____ () C:\Program Files (x86)\Polar\WebSync\imageformats\qgif4.dll 2010-02-10 18:45 - 2010-02-10 18:45 - 00119808 _____ () C:\Program Files (x86)\Polar\WebSync\imageformats\qjpeg4.dll 2015-03-09 06:50 - 2013-12-03 14:35 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll ==================== Alternate Data Streams (filtrowane) ========= (Załączenie wejścia w fixlist spowoduje usunięcie strumienia ADS.) ==================== Tryb awaryjny (filtrowane) =================== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Wartość "AlternateShell" zostanie przywrócona.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" ==================== Powiązania plików (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci.) ==================== Internet Explorer - Witryny zaufane i z ograniczeniami =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru.) ==================== Hosts - zawartość: =============================== (Użycie dyrektywy Hosts: w fixlist spowoduje reset pliku Hosts.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts ==================== Inne obszary ============================ (Obecnie brak automatycznej naprawy dla tej sekcji.) HKU\S-1-5-21-875974235-824227338-3367428378-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Radosław Gwiazda\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 10.0.10.200 - 10.0.10.202 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Zapora systemu Windows [funkcja włączona] ==================== MSCONFIG/TASK MANAGER - Wyłączone elementy == ==================== Reguły Zapory systemu Windows (filtrowane) =============== (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.) FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [{AE9CB9CD-467B-481B-A092-1332AFE2F23C}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe FirewallRules: [{77C82D44-4548-4351-BB19-39F908446FA6}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe FirewallRules: [{7776EFA9-2B31-4B94-AF8D-9B9B68D0A4FE}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe FirewallRules: [{1EC15105-8742-4109-948D-0F3157334BF9}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe FirewallRules: [{7FFF9349-9D3B-4281-9651-299AA5C7B415}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe FirewallRules: [{C3B6683D-83EA-4B72-AAD4-908DBA4CCC33}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe FirewallRules: [{5A6A6565-61A8-4AC7-AA8F-ED5AD5C493D8}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe FirewallRules: [{7A5829FB-90D4-408C-8608-5B7EBB89B2F1}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe FirewallRules: [{486681C8-8443-42D8-A6D4-E46614CA508F}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe FirewallRules: [{E45708B6-B71B-4788-A5DF-15969BC57D4D}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe FirewallRules: [{EE6DC171-87B4-4584-8197-65AAC2DCFFC9}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe FirewallRules: [{56237BB1-7C9A-49AF-9E77-EE2532E73042}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe FirewallRules: [{56AE4A39-AB3D-44D3-B800-C98F0334A948}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Punkty Przywracania systemu ========================= 06-05-2017 15:57:13 Windows Update 10-05-2017 11:38:44 Windows Update 10-05-2017 20:07:02 Windows Update 16-05-2017 11:11:08 Windows Update ==================== Wadliwe urządzenia w Menedżerze urządzeń ============= Name: Broadcom Bluetooth 4.0 USB Description: Broadcom Bluetooth 4.0 USB Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974} Manufacturer: Broadcom Service: BTHUSB Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Błędy w Dzienniku zdarzeń: ========================= Dziennik Aplikacja: ================== Error: (05/19/2017 10:53:54 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (05/19/2017 08:34:00 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (05/18/2017 05:28:30 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (05/17/2017 06:38:41 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (05/16/2017 11:07:52 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (05/15/2017 02:25:18 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (05/13/2017 09:11:26 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (05/13/2017 04:19:43 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (05/12/2017 02:55:55 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Error: (05/12/2017 12:31:31 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Dziennik System: ============= Error: (05/17/2017 06:41:02 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: Serwer {995C996E-D918-4A8C-A302-45719A6F4EA7} nie zarejestrował się w modelu DCOM w wymaganym czasie. Error: (05/17/2017 05:02:20 PM) (Source: BROWSER) (EventID: 8032) (User: ) Description: Usługa przeglądarki zbyt wiele razy nie zdołała pobrać listy kopii zapasowych w transporcie \Device\NetBT_Tcpip_{58FE8477-0F4F-4747-A370-776AC01ED323}. Przeglądarka zapasowa jest zatrzymywana. Error: (05/17/2017 02:30:55 PM) (Source: bowser) (EventID: 8003) (User: ) Description: Przeglądarka główna odebrała anons serwera z komputera HDOLEWSKI. Komputer ten zachowuje się tak, jakby był przeglądarką główną dla domeny w transporcie NetBT_Tcpip_{58FE8477-0F4F-4747-A370-776AC01ED323}. Przeglądarka główna właśnie jest zatrzymywana albo wymuszany jest wybór. Error: (05/16/2017 01:44:56 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: Serwer {995C996E-D918-4A8C-A302-45719A6F4EA7} nie zarejestrował się w modelu DCOM w wymaganym czasie. Error: (05/13/2017 09:45:40 PM) (Source: Tcpip) (EventID: 4199) (User: ) Description: System wykrył konflikt adresów między adresem IP 192.168.1.169 a komputerem o sieciowym adresie sprzętowym D4-40-F0-FD-AE-84. W rezultacie mogą być zakłócone operacje sieciowe na tym komputerze. Error: (05/11/2017 05:14:25 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: Nie można zarejestrować nazwy „AKADEMIA :1d” w interfejsie o adresie IP 10.0.31.110. Komputer o adresie IP 10.0.30.211 nie zezwolił na przejęcie tej nazwy przez ten komputer. Error: (05/10/2017 07:31:46 PM) (Source: bowser) (EventID: 8003) (User: ) Description: Przeglądarka główna odebrała anons serwera z komputera PZAREBA. Komputer ten zachowuje się tak, jakby był przeglądarką główną dla domeny w transporcie NetBT_Tcpip_{58FE8477-0F4F-4747-A370-776AC01ED323}. Przeglądarka główna właśnie jest zatrzymywana albo wymuszany jest wybór. Error: (05/10/2017 07:29:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Nie można uruchomić usługi Quotenamron z powodu następującego błędu: Usługa nie odpowiada na sygnał uruchomienia lub sygnał sterujący w oczekiwanym czasie. Error: (05/10/2017 07:29:55 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Quotenamron. Error: (05/10/2017 10:18:39 AM) (Source: EventLog) (EventID: 6008) (User: ) Description: Poprzednie zamknięcie systemu przy 07:08:30 na ‎2017-‎05-‎10 było nieoczekiwane. ==================== Statystyki pamięci =========================== Procesor: Intel(R) Core(TM) i3-4030U CPU @ 1.90GHz Procent pamięci w użyciu: 48% Całkowita pamięć fizyczna: 4024.36 MB Dostępna pamięć fizyczna: 2053 MB Całkowita pamięć wirtualna: 8046.9 MB Dostępna pamięć wirtualna: 5882.86 MB ==================== Dyski ================================ Drive c: (Windows7_OS) (Fixed) (Total:894.14 GB) (Free:648.57 GB) NTFS ==>[system z komponentami startowymi (pozyskano odczytując dysk)] Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:22.2 GB) NTFS ==================== MBR & Tablica partycji ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 56128470) Partition 1: (Not Active) - (Size=200 MB) - (Type=27) Partition 2: (Active) - (Size=894.1 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=25 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=12.2 GB) - (Type=12) ==================== Koniec Addition.txt ============================