CloseProcesses:
CreateRestorePoint:
EmptyTemp:
VirusTotal: C:\Users\ricardo\AppData\Local\pcc.exe
VirusTotal: C:\Users\ricardo\AppData\Local\Temp\esihdrv.sys
HKU\S-1-5-21-2798625741-3929630246-3891586623-1002\...\MountPoints2: {9f50cceb-947b-11e6-b8d6-ec9a744886be} - "G:\startme.exe" 
Tcpip\..\Interfaces\{0f497060-cd69-406d-aa73-e61e51ab2023}: [DhcpNameServer] 37.8.214.2 31.11.202.254
Tcpip\..\Interfaces\{734c2014-f7bb-4c01-a007-03ec6e305266}: [DhcpNameServer] 37.8.214.2 31.11.202.254
U3 aswbdisk; Brak ImagePath
S3 esihdrv; \??\C:\Users\ricardo\AppData\Local\Temp\esihdrv.sys [X] <==== UWAGA
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Brak pliku