CloseProcesses:
CreateRestorePoint:
EmptyTemp:
CustomCLSID: HKU\S-1-5-21-1851146240-1794098927-3607146222-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-BE37C007238A}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => Brak pliku
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} =>  -> Brak pliku
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} =>  -> Brak pliku
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Brak pliku
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} =>  -> Brak pliku
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} =>  -> Brak pliku
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} =>  -> Brak pliku
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Brak pliku
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Brak pliku
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} =>  -> Brak pliku
HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1
Tcpip\..\Interfaces\{6967025f-e409-4b26-bac4-8f94790e04b6}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{fe6536e6-229f-4385-8f81-6c9d03fdaab7}: [DhcpNameServer] 192.168.178.1
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2019-01-06] <==== UWAGA (Linkuje do pliku *.cfg)
FF ExtraCheck: C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2019-01-06] <==== UWAGA
2019-01-14 21:23 - 2017-12-19 04:22 - 005014392 _____ (NVIDIA Corporation) C:\Users\jarek\AppData\Local\Temp\NVI2_29.DLL
2019-01-14 19:15 - 2015-09-10 18:57 - 002883336 _____ (Agnitum Ltd.) C:\Users\jarek\AppData\Local\Temp\op_install32.dll
2019-01-14 20:50 - 2019-01-14 20:51 - 013312344 _____ (Restoro) C:\Users\jarek\AppData\Local\Temp\RestoroSetup.exe
2019-01-14 19:15 - 2015-09-10 18:05 - 000311296 _____ (Agnitum Ltd.) C:\Users\jarek\AppData\Local\Temp\w7_gui.dll
2019-01-14 19:15 - 2015-09-10 17:53 - 000265728 _____ (Agnitum Ltd.) C:\Users\jarek\AppData\Local\Temp\w7_gui32.dll
2019-01-14 19:15 - 2015-09-10 18:05 - 001397760 _____ (Agnitum Ltd.) C:\Users\jarek\AppData\Local\Temp\xp_gui.dll
2019-01-14 19:15 - 2015-09-10 17:53 - 001332224 _____ (Agnitum Ltd.) C:\Users\jarek\AppData\Local\Temp\xp_gui32.dll
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Data Recovery Wizard\Deinstalacja programu EaseUS Data Recovery Wizard.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Data Recovery Wizard\EaseUS Data Recovery Wizard.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Backupper\User Manual (PDF).lnk
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\McAfee LiveSafe - Internet Security.lnk
C:\Users\jarek\Desktop\darktable.lnk
C:\Users\jarek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\McAfee LiveSafe - Internet Security.lnk
C:\Users\Public\Desktop\EaseUS Data Recovery Wizard.lnk
Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"}