CloseProcesses: CreateRestorePoint: C:\Users\Public\Desktop\TNod.lnk Task: {152FDBC7-912A-4168-BD19-8C870FA8F6F0} - System32\Tasks\DllKitPRO => C:\Program Files (x86)\DllKitPRO\dllkitpro.exe Task: {5A3D890C-53B5-4C96-855F-5FC1E6A8AAD6} - System32\Tasks\{78FFA9B8-6020-4078-8D23-29A0A81101AE} => C:\Windows\system32\pcalua.exe -a D:\vcredist_x64.exe -d D:\ HKU\S-1-5-21-2097247051-3197343811-3618455491-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp SearchScopes: HKU\S-1-5-21-2097247051-3197343811-3618455491-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = S2 NVIDIA Wireless Controller Service; "C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe" [X] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] EmptyTemp: Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"}