Runned malwarebytes and it found 2 items, exactly the same ones that found before
files: iswizard.7z and wuaudit.exe
folder: C\Users\Appdata\Local\Temp\iswizard