CreateRestorePoint:
CloseProcesses:
EmptyTemp:
File: C:\Users\ProOko\AppData\Local\Programs\opgg-electron-app\OP.GG.exe
HKU\S-1-5-21-2303808516-734150704-3577465708-1001\...\Run: [GalaxyClient] => [X]
HKU\S-1-5-21-2303808516-734150704-3577465708-1001\...\Run: [electron.app.OP.GG] => C:\Users\ProOko\AppData\Local\Programs\opgg-electron-app\OP.GG.exe (Brak pliku)
HKU\S-1-5-21-2303808516-734150704-3577465708-1001\...\Run: [ProOko] => cmd.exe /c start www.exinariuminix.info
Task: {44A85DAE-9DCA-4C0F-9074-EEC9981F7D61} - System32\Tasks\ProOko => cmd.exe /c REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /f /v ProOko /t REG_SZ /d "cmd.exe /c start www.exinariuminix.info"
Tcpip\..\Interfaces\{c7921f46-53dd-45c1-9317-9a8f743a718f}: [DhcpNameServer] 150.254.5.4 150.254.5.11
Tcpip\..\Interfaces\{cc82c03b-5d78-4aa6-9a79-0050cdf57c09}: [DhcpNameServer] 150.254.5.4 150.254.5.11
Tcpip\..\Interfaces\{d271b8dd-c187-426c-9c90-9e2a705eacda}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{f68fd899-6e25-42bd-a3db-4b58762574cb}: [DhcpNameServer] 192.168.31.11
C:\Users\ProOko\AppData\Local\Programs\opgg-electron-app

StartBatch:
cd C:\WINDOWS\system32\config\systemprofile\AppData\Local
mkdir TileDataLayer
cd TileDataLayer
mkdir Database
EndBatch:

RemoveProxy: