CloseProcesses:
CreateRestorePoint:
EmptyTemp:
S3 MBAMFarflt; system32\DRIVERS\farflt.sys [X]
S3 MBAMProtection; \SystemRoot\system32\DRIVERS\mbam.sys [X]
S0 MBAMSwissArmy; System32\Drivers\mbamswissarmy.sys [X]
S3 MBAMWebProtection; \SystemRoot\system32\DRIVERS\mwac.sys [X]
2018-04-05 12:23 - 2018-04-05 12:23 - 000000008 __RSH C:\Users\Tobiasz\ntuser.pol
2018-04-05 12:23 - 2018-04-05 12:23 - 000000008 __RSH C:\ProgramData\ntuser.pol
2018-04-03 23:06 - 2018-04-03 23:06 - 000000000 _____ () C:\Users\Tobiasz\AppData\Roaming\am10.tmp
2018-01-25 21:57 - 2018-01-25 21:57 - 000000000 _____ () C:\Users\Tobiasz\AppData\Roaming\FC29FA0894FE.ini