CloseProcesses:
CreateRestorePoint:
EmptyTemp:
2017-02-18 20:44 - 2017-02-18 20:44 - 000054272 _____ () C:\Users\Krzysztof\AppData\Roaming\ApplicationHosting.dat
2017-02-18 20:44 - 2017-02-18 20:44 - 000126464 _____ () C:\Users\Krzysztof\AppData\Roaming\lobby.dat
2016-07-12 20:17 - 2018-02-28 21:34 - 000000165 _____ () C:\Users\Krzysztof\AppData\Roaming\sp_data.sys
2017-02-18 20:44 - 2017-02-18 20:44 - 001908498 _____ () C:\Users\Krzysztof\AppData\Roaming\Tamtam.tst
2017-02-18 20:46 - 2017-02-18 20:46 - 000032038 _____ () C:\Users\Krzysztof\AppData\Roaming\uninstall_temp.ico
2017-02-18 20:44 - 2017-02-18 20:44 - 000072787 _____ () C:\Users\Krzysztof\AppData\Roaming\Zoneflex.tst
2018-04-21 16:50 - 2018-04-21 16:50 - 000008804 _____ () C:\Users\Krzysztof\AppData\Local\recently-used.xbel
FilesInDirectory: C:\Users\Krzysztof\AppData\Local\*.exe;*.dll;*.ini
FilesInDirectory: C:\Users\Krzysztof\AppData\Roaming\*.exe;*.dll;*.ini
CMD: dir /a "C:\Program Files (x86)"
CMD: netsh advfirewall reset
Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"}