CloseProcesses:
CreateRestorePoint:
EmptyTemp:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== UWAGA
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKU\S-1-5-21-68104232-3985174513-3352807270-1001\...\MountPoints2: {147c390b-cd12-11e7-9bf2-d05099079bda} - "F:\setup.exe" 
HKU\S-1-5-21-68104232-3985174513-3352807270-1001\...\MountPoints2: {4fa4160f-94ba-11e7-9bd3-d05099079bda} - "F:\setup.exe" 
HKU\S-1-5-21-68104232-3985174513-3352807270-1001\...\Winlogon: [Shell] C:\Windows\System32\cmd.exe [273920 2018-04-12] (Microsoft Corporation) <==== UWAGA
HKU\S-1-5-21-68104232-3985174513-3352807270-1001\...\Command Processor: @mode 20,5 & tasklist /FI "IMAGENAME eq SoundMixer.exe" 2>NUL | find /I /N "SoundMixer.exe">NUL && exit & if exist ( start /MIN "" & tasklist /FI "IMAGENAME eq explorer.exe" 2>NUL | find /I /N "explorer.exe">NUL && exit & explorer.exe & exit ) else ( tasklist /FI "IMAGENAME eq explorer.exe" 2>NUL | find /I /N "explorer.exe">NUL && exit & explorer.exe & exit ) <==== UWAGA
GroupPolicy: Ograniczenia ? <==== UWAGA
Tcpip\..\Interfaces\{26b11a49-585f-4b43-a90c-9af3c3d7b25b}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{5bc4e3ed-1709-4c6d-9b22-096741e16560}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{6a30cfb5-cc39-11e7-9318-806e6f6e6963}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{c617c834-be3d-45ea-8236-05f6af6f7f13}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{c617c834-be3d-45ea-8236-05f6af6f7f13}: [DhcpNameServer] 192.168.0.1
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X]