start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
EmptyTemp:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
AlternateDataStreams: C:\Users\Crazy\AppData\Local\Temp:$DATA? [16]
AlternateDataStreams: C:\Users\Public\AppData:CSM [470]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [480]
cmd: ipconfig /flushdns
end::