CloseProcesses:
CreateRestorePoint:
EmptyTemp:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKU\S-1-5-21-2430312594-1550580140-1562044941-1001\...\RunOnce: [ALLPlayer Remote Update] => C:\Users\Tomek\AppData\Local\Temp\ALLRemote.exe [2305072 2018-03-11] (ALLPlayer ) <==== UWAGA