CloseProcesses:
CreateRestorePoint:
HKU\S-1-5-21-861892394-1169703553-3781029982-1001\...\Run: [GalaxyClient] => [X]
HKU\S-1-5-21-861892394-1169703553-3781029982-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
GroupPolicy: Ograniczenia <==== UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Ograniczenia <==== UWAGA
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
Toolbar: HKLM - Steganos Password Manager Toolbar - {F8C516FE-BF12-4C4A-A70A-6BCB164875A4} -  Brak pliku
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2018-01-23] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2018-01-23] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-01-23] (Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-01-23] (Tracker Software Products (Canada) Ltd.)
U4 dmwappushsvc; Brak ImagePath
Task: {13487054-ECDA-4D2A-949A-60D267ECDA1D} - \Driver Booster SkipUAC (Admin123) -> Brak pliku <==== UWAGA
Task: {6E89A84C-B0A8-454E-9364-7FA2F24BD967} - \Microsoft\Windows\UNP\RunCampaignManager -> Brak pliku <==== UWAGA
EmptyTemp:
Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"}