CloseProcesses:
CreateRestorePoint:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
HKU\S-1-5-18\...\RunOnce: [SPReview] => "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
FF Plugin: @microsoft.com/GENUINE -> disabled [Brak pliku]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Brak pliku]
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Brak pliku
ContextMenuHandlers3: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Brak pliku
Task: {1D2D927B-7261-4D8F-A86A-E4F0A4E82FB3} - System32\Tasks\WarThunder1 => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --app=hxxp://go.playmmogames.com/aff_c?offer_id=698&aff_id=1034&source=1&click_id=3d76dfae02f41d9c3071212a03a29083620d5983 --start-fullscreen <==== UWAGA
Task: {8E06DC92-285D-4CA6-AA3C-82FF6101CC45} - System32\Tasks\WarThunder3 => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --app=hxxp://go.playmmogames.com/aff_c?offer_id=698&aff_id=1034&source=1&click_id=3d76dfae02f41d9c3071212a03a29083620d5983 --start-fullscreen <==== UWAGA
Task: {E15C0EE9-BC26-4E21-BA21-3EBD448D1E31} - System32\Tasks\WarThunder2 => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --app=hxxp://go.playmmogames.com/aff_c?offer_id=698&aff_id=1034&source=1&click_id=3d76dfae02f41d9c3071212a03a29083620d5983 --start-fullscreen <==== UWAGA
ShortcutWithArgument: C:\Users\tomi\Desktop\WarThunder.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --app=hxxp://go.playmmogames.com/aff_c?offer_id=698&aff_id=1034&source=1&click_id=3d76dfae02f41d9c3071212a03a29083620d5983 --start-fullscreen
AlternateDataStreams: C:\ProgramData\TEMP:65D36A19 [129]
AlternateDataStreams: C:\ProgramData\TEMP:CB0AACC9 [143]
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games\Motocross Madness 2\View Midtown Madness 2 Video.lnk -> G:\MCM2\GOODIES\MIDTOWN2.AVI (Brak pliku)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ivo\Ivona_Demo-1.0\Licencja.lnk -> D:\ivo\Ivona_Demo-1.0\licencja_ivona_demo.txt (Brak pliku)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ivo\Ivona_Demo-1.0\Napisz list do IVO Software.lnk -> D:\ivo\Ivona_Demo-1.0 (Brak pliku)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ivo\Ivona_Demo-1.0\Tester syntezatorów mowy SAPI.lnk -> D:\ivo\Ivona_Demo-1.0\TesterSAPI.exe (Brak pliku)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ivo\Ivona_Demo-1.0\UniSpiker-2.6.lnk -> D:\ivo\UniSpiker-2.6\uni_spiker-2.6.exe (Brak pliku)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ivo\Ivona_Demo-1.0\Usun.lnk -> D:\ivo\Ivona_Demo-1.0\UsunIvonaDemoBeta.exe (Brak pliku)
Shortcut: C:\Users\tomi\Desktop\Kontynuuj instalację NetMeter Evo 2.0.0.lnk -> C:\Users\tomi\AppData\Local\Temp\ICReinstall_NetMeter Evo 2.0.0_3929393562.exe (Brak pliku)
Shortcut: C:\Users\tomi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\FarCry™.lnk -> [LF6"pH,R GFSI>1_GFarCry"!(1SPSXFL8C&m]
Shortcut: C:\Users\tomi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\Mafia™.lnk -> [LF6"pH,R GFSIUXbMz쯔Mafia"!(1SPSXFL8C&m]
Shortcut: C:\Users\tomi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\Motocross Madness 2.lnk -> [LF6"pH,R GFSI~Of2GcMotocross Madness 2(1SPSXFL8C&m]
Shortcut: C:\Users\tomi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\Quake 3 Arena™.lnk -> [LF6"pH,R GFSIX_WKlH8Quake 3 Arena"!(1SPSXFL8C&m]
Shortcut: C:\Users\tomi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\Return To Castle Wolfenstein (Single Player)™.lnk -> [LF6"pH,R GFSI3lWMΎ;-Return To Castle Wolfenstein (Single Player)"!(1SPSXFL8C&m]
Shortcut: C:\Users\tomi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\Unreal Tournament.lnk -> [LF6"pH,R GFSI`6I2JoOMUnreal Tournament(1SPSXFL8C&m]
Shortcut: C:\Users\tomi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\Unreal Tournament™ 2004.lnk -> [LF6"pH,R GFSI=A9DUnreal Tournament"! 2004(1SPSXFL8C&m]
Shortcut: C:\Users\tomi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games\Unreal™.lnk -> [LF6"pH,R GFSIkUBCvUnreal"!(1SPSXFL8C&m]
ShortcutWithArgument: C:\Users\tomi\Desktop\WarThunder.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --app=hxxp://go.playmmogames.com/aff_c?offer_id=698&aff_id=1034&source=1&click_id=3d76dfae02f41d9c3071212a03a29083620d5983 --start-fullscreen
Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"}
EmptyTemp: