CloseProcesses:
CreateRestorePoint:
Reg: reg query "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /s
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution options\explorer.exe
DeleteQuarantine:
EmptyTemp: