CloseProcesses:
CreateRestorePoint:
HKU\S-1-5-21-3751174507-2357397195-2258494078-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.pl/
HKU\S-1-5-21-3751174507-2357397195-2258494078-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/pl-pl/?ocid=iehp
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
S2 0059521516896126mcinstcleanup; C:\WINDOWS\TEMP\005952~1.EXE -cleanup -nolog [X]
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Brak pliku
Task: {6DB81F71-E5C1-4886-AC52-CE82F5CEE2B0} - System32\Tasks\onetouch => D:\cdsetup.exe
Task: {B7F8F66D-9643-444C-A502-870139579F26} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
Task: {B876EABC-8909-4FBF-A550-6F334F540328} - System32\Tasks\desktopscf => D:\Bin\desktop.scf
EmptyTemp:
Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"}