CloseProcesses:
CreateRestorePoint:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
Task: {C5753DE5-D510-48F7-B0EA-6FD5E63A29D2} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
C:\Users\Miki\Downloads\My Stings\D2HACKMAP\Stings Standard.lnk
C:\Users\Miki\AppData\Roaming\Microsoft\Word\KPK%20OSTRO306461081884538223\KPK%20OSTRO.docx.lnk
EmptyTemp:
CMD: ipconfig /flushdns
Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"}