CloseProcesses:
CreateRestorePoint:
EmptyTemp:
HKU\S-1-5-21-3334915921-3535408841-3332393144-1003\...\Run: [Marcin] => explorer.exe hxxp://exinariuminix.info <==== UWAGA
HKU\S-1-5-21-3334915921-3535408841-3332393144-1003\...\MountPoints2: {8ca611a3-42d4-11e8-998f-f430b9a6ea7b} - "F:\setup.exe" 
HKU\S-1-5-21-3334915921-3535408841-3332393144-1003\...\MountPoints2: {efb72ed1-6bb2-11e8-999e-f430b9a6ea7b} - "F:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-3334915921-3535408841-3332393144-1003\...\MountPoints2: {f3a92670-5eb3-11e8-999c-f430b9a6ea7b} - "G:\HiSuiteDownLoader.exe" 
C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\SendTo\TeamViewer.lnk
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Brak pliku
Task: {CD51ADBF-FD78-4DE4-B61A-77EC6635ECF8} - System32\Tasks\Marcin => cmd.exe /c REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /f /v Marcin /t REG_SZ /d "explorer.exe hxxp://exinariuminix.info" <==== UWAGA