CloseProcesses:
CreateRestorePoint:
HKU\S-1-5-21-783755983-1287204213-1527365242-1001\...\MountPoints2: {e6ad566e-f9f8-11e7-8e0e-001a7dda710f} - "D:\HiSuiteDownLoader.exe" 
CHR HomePage: Default -> hxxp://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBFnkdYvIvvwfEYzwmkwM3HPmqxsWziPGHzE8Jqe-ogE4keYtHcNqUzYD1hP2YtZjtbO9ssP51fGwL1dVJICj2KEm5TJn4i6WG79mcHnzMK40lVuv63UbLfiHSiYWhx2BR-AUfZCeLjdLOH6SAtUJGCe2a-IOjinnYsJq55
2018-01-23 20:50 - 2018-01-23 20:50 - 000000028 _____ C:\Users\browa\AppData\Local\mst.bob
2018-01-23 20:49 - 2018-01-23 20:49 - 000000000 ____D C:\Program Files (x86)\1qjrmwlpirw
2018-01-12 16:06 - 2018-01-29 21:17 - 000000000 ____D C:\AdwCleaner
2018-01-23 20:50 - 2018-01-23 20:50 - 000000028 _____ () C:\Users\browa\AppData\Local\mst.bob
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Brak pliku
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Brak pliku
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Brak pliku
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Brak pliku
Task: {42690844-9956-48EC-BB2C-8D0429C0B8FB} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2018-01-20] ()
HOSTS:
Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"}
EmptyTemp: