start::
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-21-2051568683-3601713529-2022656731-1000\...\Run: [Gaijin.Net Agent] => C:\Program Files (x86)\Steam\steamapps\common\War Thunder\.game_logs\browserhelper.log* [2268232 2017-12-29] ()
SearchScopes: HKU\S-1-5-21-2051568683-3601713529-2022656731-1000 -> {B3F2B7C7-2F8F-40F7-831E-479EEA25CD16} URL = hxxp://www.search.ask.com/web?tpid=ORJ-SPE&o=APN11406&pf=V7&p2=^BBE^OSJ000^YY^FR&gct=&itbv=12.24.1.51&apn_uid=D8494878-F7F0-42BF-80E9-1F2F0051DB27&apn_ptnrs=BBE&apn_dtid=^OSJ000^YY^FR&apn_dbr=ie_11.0.9600.17728&doi=2015-05-12&trgb=IE&q={searchTerms}&psv=&pt=tb
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
Task: {C758E805-1852-4A53-8FCA-D6DD6EB73BE1} - System32\Tasks\{DAE6EFC1-0E68-49A0-A7C5-8C24F3B09D93} => C:\Windows\system32\pcalua.exe -a C:\Users\JULIEN~1\AppData\Local\Temp\jre-8u45-windows-au.exe -d C:\Windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1 <==== ATTENTION
emptytemp:
end::