CloseProcesses:
CreateRestorePoint:
EmptyTemp:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Ograniczenia <==== UWAGA
CHR HomePage: Default -> hxxp://www.funnysearching.com/
OPR Extension: (__MSG_appName__) - C:\Users\Wojtek\AppData\Roaming\Opera Software\Opera Stable\Extensions\khkcipfefjkipngnihjecgphadfknpmp [2018-02-25]
VirusTotal: C:\Windows\sed.exe
VirusTotal: C:\Windows\grep.exe
VirusTotal: C:\Windows\zip.exe
C:\ProgramData\eda45c1f
C:\ProgramData\{4dec01a6-612c-0}
C:\ProgramData\{1b0943bc-212c-1}
C:\ProgramData\936f8a42-2945-0
C:\ProgramData\936f8a42-1cb5-1
Task: {0CA3BB74-7717-4E28-AC37-8FC257902F75} - System32\Tasks\Opera scheduled Autoupdate 1514045904 => C:\Users\Wojtek\AppData\Local\Programs\Opera\launcher.exe [2018-03-08] (Opera Software)
AlternateDataStreams: C:\Users\Public\AppData:CSM [472]