start:: CreateRestorePoint: CloseProcesses: Hosts: RemoveProxy: HKU\S-1-5-21-2388428769-564239160-2402017471-1001\...\Run: [cacaoweb] => C:\Users\easy\AppData\Roaming\cacaoweb\cacaoweb.exe SearchScopes: HKU\S-1-5-21-2388428769-564239160-2402017471-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 2019-09-05 17:05 - 2019-02-26 21:48 - 000000000 ____D C:\Users\easy\AppData\Roaming\cacaoweb AlternateDataStreams: C:\Users\easy\Desktop\Wall-e.avi:AFP_Resource EmptyTemp: cmd: ipconfig /flushdns end::