CloseProcesses:
CreateRestorePoint:
EmptyTemp:
HKU\S-1-5-21-1786666667-866325113-1950782973-1001\...\MountPoints2: {2580c272-a817-11e7-94c9-9cb70d5484dc} - "D:\autorun.exe" 
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows 10 - Codec Pack\Uninstall.lnk
C:\Users\mwern\Desktop\Stary dysk\desktop\!!!Estimo - prezentacja — skrót.lnk
C:\Users\mwern\Desktop\Stary dysk\desktop\Estimo — wersja ang.lnk
C:\Users\mwern\Desktop\Stary dysk\desktop\Estimo.lnk
C:\Users\mwern\Desktop\Stary dysk\desktop\estimoDbList — skrót.lnk
C:\Users\mwern\Desktop\Stary dysk\desktop\LicGen.lnk
C:\Users\mwern\Desktop\Stary dysk\desktop\Estimo-wersja\Wersja ang\Estimo.exe - Shortcut.lnk
CMD: ipconfig /flushdns
Powershell: wevtutil el | Foreach-Object {wevtutil cl "$_"}