CloseProcesses:
CreateRestorePoint:
EmptyTemp:
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
2018-10-29 06:21 - 2018-10-29 06:21 - 000002263 _____ C:\Users\Wolek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromium.lnk
2018-10-29 06:19 - 2018-10-29 20:00 - 000000000 ____D C:\Windows\System32\Tasks\Homed
2018-10-29 06:19 - 2018-10-29 06:22 - 000000000 ____D C:\Users\Wolek\AppData\Local\Funir
2018-10-29 06:19 - 2018-10-29 06:22 - 000000000 ____D C:\Users\Wolek\AppData\Local\{FC05CA59-D8AD-A6E1-B535-8309915D7F91}
2018-10-29 06:19 - 2018-10-29 06:19 - 000001328 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HowToRemove.lnk
2018-10-29 06:19 - 2018-10-29 06:19 - 000000000 ____D C:\Users\Wolek\AppData\Local\Gihosa
ContextMenuHandlers1-x32-x32: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} =>  -> Brak pliku
ContextMenuHandlers4-x32-x32: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} =>  -> Brak pliku
Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"}