CloseProcesses:
CreateRestorePoint:
EmptyTemp:
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Brak pliku
FirewallRules: [{4B1EA35A-1762-4011-B561-A743D7CB4774}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
FirewallRules: [{F3616731-646F-4E88-95AE-76859872B008}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe
FirewallRules: [{552C99BC-15F2-4516-9EA7-FABD487C6F42}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
FirewallRules: [{F66CFB7B-A6F9-4A83-B507-564FC565451C}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe
HKU\S-1-5-21-3744861049-1010331601-1016846138-1001\...\MountPoints2: {1d286013-5ef4-11e7-8261-9cad9710eb20} - "F:\SISetup.exe" 
HKU\S-1-5-21-3744861049-1010331601-1016846138-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112018131503025\...\MountPoints2: {1d286013-5ef4-11e7-8261-9cad9710eb20} - "F:\SISetup.exe" 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3744861049-1010331601-1016846138-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?PC=WCUG&FORM=WCUGDF&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3744861049-1010331601-1016846138-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?PC=WCUG&FORM=WCUGDF&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3744861049-1010331601-1016846138-1001 -> {2B5D5465-BEE4-4DBD-8768-473A79CF3D7E} URL = 
SearchScopes: HKU\S-1-5-21-3744861049-1010331601-1016846138-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112018131503025 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?PC=WCUG&FORM=WCUGDF&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3744861049-1010331601-1016846138-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112018131503025 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?PC=WCUG&FORM=WCUGDF&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3744861049-1010331601-1016846138-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112018131503025 -> {2B5D5465-BEE4-4DBD-8768-473A79CF3D7E} URL = 
C:\Users\Lenovo\Desktop\archiwum\Downloads\andrz 2016_files — skrót.lnk
C:\Users\Lenovo\Desktop\archiwum\Desktop\załączniki.zip — skrót.lnk
C:\Users\Lenovo\AppData\Local\Microsoft\Windows\Application Shortcuts\AD2F1837.HPPrinterControl_v10z8vjag6ke6\AD2F1837.HPPrinterControl.lnk
C:\Users\Default\Favorites\AmazonBrowserBar.url
C:\Users\Lenovo\Favorites\AmazonBrowserBar.url
C:\Users\Lenovo\Desktop\archiwum\Favorites\AmazonBrowserBar.url
Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"}
CMD: ipconfig /flushdns