Start::
CreateRestorePoint:
CloseProcesses:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe
SearchScopes: HKU\S-1-5-21-3497741377-1167691852-506842545-1001 -> DefaultScope {17399D87-2218-4D62-AF94-27DA6FB2D5F3} URL =
SearchScopes: HKU\S-1-5-21-3497741377-1167691852-506842545-1001 -> {17399D87-2218-4D62-AF94-27DA6FB2D5F3} URL =
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\1142953.js [2017-11-23]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\1142953.cfg [2017-11-23]
C:\Users\Titouan Michenot\AppData\Local\Host App Service
Task: {5EACE524-3613-4113-9776-BF888406094A} - System32\Tasks\watchdog2 => C:\Windows\System32\Drivers\UMDF\run2.bat [2016-07-27]
Task: {9BBC4BE7-FFB6-4660-9F14-90BE131B1DEF} - System32\Tasks\App Explorer => C:\Users\Titouan Michenot\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe [2017-12-21] (SweetLabs, Inc)
ShortcutWithArgument: C:\Users\Titouan Michenot\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\76f9e4d33b60b312\Popcorn-Time.lnk -> C:\Users\Titouan Michenot\AppData\Local\Popcorn-Time\Popcorn-Time.exe (The NWJS Community) -> --user-data-dir="C:\Users\Titouan Michenot\AppData\Local\Popcorn-Time\User Data" --profile-directory=Default --app-id=hecfofbbdfadifpemejbbdcjmfmboohj
EmptyTemp:
End::