start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
EmptyTemp:
SearchScopes: HKU\S-1-5-21-113457094-723419170-4909768-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-113457094-723419170-4909768-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-11022018121749648 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-113457094-723419170-4909768-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-11042018174537309 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
2018-10-17 20:10 - 2018-10-17 20:10 - 000000000 ____D C:\Program Files (x86)\MediaHuman
2018-10-17 20:11 - 2018-05-01 18:02 - 000000000 ____D C:\Users\Tiphanie\AppData\Local\MediaHuman
2018-10-17 19:56 - 2018-10-17 20:36 - 000000000 ___RD C:\Users\Tiphanie\Downloads\15647NeonBand.RarZipExtractorPro_g3b9h1p9bdemw!App
2018-11-14 20:44 - 2018-11-16 21:40 - 001388448 _____ () C:\Users\Public\ASR.dat
Task: {5B0C63BD-CBAD-41F8-874A-EDDD2ECB662A} - System32\Tasks\Driver Booster SkipUAC (Tiphanie) => C:\Program Files (x86)\IObit\Driver Booster\5.3.0\DriverBooster.exe
cmd: ipconfig /flushdns
end::