CloseProcesses:
CreateRestorePoint:
EmptyTemp:
HKU\S-1-5-21-3812675948-3636873255-1524944989-1000\...\Run: [Codec Pack Update Checker] => "C:\Windows\system32\Codecs\UpdateChecker.exe"
HKU\S-1-5-21-3812675948-3636873255-1524944989-1000\...\MountPoints2: H - H:\setup.exe
HKU\S-1-5-21-3812675948-3636873255-1524944989-1000\...\MountPoints2: K - K:\setup.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodecPackTrayMenu.lnk [2018-01-17]
ShortcutTarget: CodecPackTrayMenu.lnk -> C:\Windows\SysWOW64\Codecs\TrayMenu.exe ()
GroupPolicy: Restriction <==== ATTENTION
HKU\S-1-5-21-3812675948-3636873255-1524944989-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
S3 NTIOLib_1_0_C; \??\G:\NTIOLib_X64.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
Task: {6E81444B-5D6B-4693-9B51-6673D6ECB694} - System32\Tasks\{7A82E0BF-0F64-457C-8BB3-25E68D8762B3} => C:\Windows\system32\pcalua.exe -a C:\Users\Lantash\Downloads\dxwebsetup(2).exe -d C:\Users\Lantash\Downloads
Task: {7794270C-AD3D-4637-B4F3-275D74D89174} - System32\Tasks\{20BD523E-BFCE-46F7-AE67-58280013BA27} => C:\Windows\system32\pcalua.exe -a C:\Users\Lantash\Downloads\dxwebsetup(3).exe -d C:\Users\Lantash\Downloads
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Player - Codec Pack\Uninstall.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crysis 3\Crysis 3.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crysis 3\Deinstalacja programu Crysis 3.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Command and Conquer 4 Tiberian Twilight\== ElAmigos Releases and Updates @ pastebin ==.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Command and Conquer 4 Tiberian Twilight\Command and Conquer 4 Tiberian Twilight.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Command and Conquer 4 Tiberian Twilight\Deinstalacja programu Command and Conquer 4 Tiberian Twilight.lnk
Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"}