CloseProcesses:
CreateRestorePoint:
EmptyTemp:
Tcpip\..\Interfaces\{8E1167FD-DD7C-4179-B853-B4FA254C5DCC}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{8E1167FD-DD7C-4179-B853-B4FA254C5DCC}: [DhcpNameServer] 155.133.0.3 8.8.8.8
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
S3 HnGSteamService; D:\SteamLibrary\steamapps\common\Heroes & Generals\hngservice.exe [X]
U3 aswbdisk; Brak ImagePath
S3 P17; system32\drivers\P17.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S1 ZAM; \??\C:\Windows\System32\drivers\zam64.sys [X]
S1 ZAM_Guard; \??\C:\Windows\System32\drivers\zamguard64.sys [X]
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Brak pliku
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} =>  -> Brak pliku
Task: {049AE627-3B77-4D4F-94EA-8E315EF252C4} - System32\Tasks\Opera scheduled Autoupdate 1534327773 => A:\opera\launcher.exe [2018-08-23] (Opera Software)
Task: {3B02FDBE-0C16-49F9-8263-BAC86ED9F742} - System32\Tasks\{57625D08-6C97-4119-B89B-6657215E27A9} => C:\Windows\system32\pcalua.exe -a C:\Users\Kordian\Desktop\zzzz\Win2k_xp\AMD64\APOIM64.exe -d C:\Users\Kordian\Desktop\zzzz\Win2k_xp\AMD64
Task: {A6A69884-FEEB-4A07-A83A-976CF9C32894} - System32\Tasks\Driver Booster SkipUAC (Kordian) => E:\Gry\IObit Driver Booster Pro 5.0.3.393 Final + Pre-Cracked - [CrackzSoft]\DriverBoosterPortable\App\DriverBooster\DriverBooster.exe
AlternateDataStreams: C:\Users\Kordian:Heroes & Generals [38]
AlternateDataStreams: C:\Users\Public\AppData:CSM [480]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [480]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Forest\The Forest.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Forest\Uninstall The Forest.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpellForce 3\== ElAmigos Releases and Updates @ pastebin ==.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpellForce 3\Deinstalacja programu SpellForce 3.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpellForce 3\SpellForce 3.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guns, Gore & Cannoli\Guns, Gore & Cannoli.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com\The Long Dark\The Long Dark.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com\The Long Dark\Usuń The Long Dark.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dont Starve Together A New Reign\Dont Starve Together A New Reign.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dont Starve Together A New Reign\Uninstall Dont Starve Together A New Reign.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blood Waves\Blood Waves.lnk
C:\Users\Kordian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Play PixArk!.lnk
C:\Users\Kordian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cuisine Royale\Replays.lnk
C:\Users\Kordian\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\The Forest.lnk
C:\Users\Kordian\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\f142f8c3c9da30d0\LoyaltyandBloodViktorOrigins.lnk
CMD: ipconfig /flushdns
Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"}