CloseProcesses:
CreateRestorePoint:
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://www.mystartsearch.com/?type=sc&ts=1444144453&z=e6a15a46a4568f9d7593278g7z8z4z5g8zcz0o3z7c&from=cor&uid=WDCXWD3200BEVT-22ZCT0_WD-WXT0E59DKT89DKT89
R2 WdsManPro; C:\ProgramData\BWdsManProB\WdsManPro.exe [435712 2015-10-10] (DTools LIMITED) [Brak podpisu cyfrowego]
R2 SSFK; C:\Program Files (x86)\SFK\SSFK.exe [169632 2015-10-10] (TODO: <公司名>)
R2 IhPul; C:\Users\BartekRos\AppData\Roaming\TSv\TSvr.exe [396944 2015-09-21] (tsvr.com)
2015-10-10 09:12 - 2015-10-10 09:12 - 00000000 ____D C:\Users\BartekRos\AppData\Roaming\eCyber
2015-10-10 09:07 - 2015-10-10 09:07 - 00000000 ____D C:\Users\BartekRos\AppData\Roaming\TSv
2015-10-10 09:07 - 2015-10-10 09:07 - 00000000 ____D C:\Program Files (x86)\SFK
2015-10-10 09:06 - 2015-10-10 09:07 - 00000000 ____D C:\ProgramData\BWdsManProB
2015-10-06 17:14 - 2015-10-10 09:06 - 00000102 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-10-06 17:14 - 2015-10-10 09:05 - 00000000 ____D C:\ProgramData\3WdsManPro3
2015-10-06 17:14 - 2015-10-07 19:26 - 00000000 ____D C:\Users\BartekRos\AppData\Roaming\mystartsearch
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.delta-homes.com/?type=sc&ts=1444460810&z=f39c908802657589a48f999gez7z7zfzfqfecbaebt&from=wpm07163&uid=WDCXWD3200BEVT-22ZCT0_WD-WXT0E59DKT89DKT89
ShortcutWithArgument: C:\Users\BartekRos\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.delta-homes.com/?type=sc&ts=1444460810&z=f39c908802657589a48f999gez7z7zfzfqfecbaebt&from=wpm07163&uid=WDCXWD3200BEVT-22ZCT0_WD-WXT0E59DKT89DKT89
ShortcutWithArgument: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.delta-homes.com/?type=sc&ts=1444460810&z=f39c908802657589a48f999gez7z7zfzfqfecbaebt&from=wpm07163&uid=WDCXWD3200BEVT-22ZCT0_WD-WXT0E59DKT89DKT89
EmptyTemp: