start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
ShortcutWithArgument: C:\Users\samue\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome\mydlink services plugin.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=ldibdoepbjbkkcbgndfljnphngpglhbb
GroupPolicy: Restriction ? <==== ATTENTION
S3 cpuz143; \??\C:\Users\samue\AppData\Local\Temp\cpuz143\cpuz143_x64.sys [X] <==== ATTENTION
2019-11-10 11:17 - 2019-11-10 11:17 - 000001210 _____ C:\Users\samue\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bitdefender Antivirus Free.lnk
2019-11-10 11:16 - 2019-11-11 15:09 - 000000000 ____D C:\ProgramData\Bitdefender
2019-11-10 11:15 - 2019-11-10 11:15 - 000102836 _____ C:\ProgramData\agent.1573402502.bdinstall.v2.bin
2019-11-10 11:15 - 2019-11-10 11:15 - 000000000 ____D C:\ProgramData\Bitdefender Agent
2019-11-10 11:14 - 2019-11-10 11:14 - 010527368 _____ C:\Users\samue\Downloads\bitdefender_online.exe
2019-11-10 11:09 - 2019-11-10 11:09 - 005504960 _____ (ESET) C:\Users\samue\Downloads\eset_smart_security_premium_live_installer.exe
2019-11-05 19:30 - 2019-11-05 19:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 7
2019-11-05 19:27 - 2019-11-05 19:27 - 024365064 _____ (IObit ) C:\Users\samue\Downloads\driver_booster_setup.exe
2019-11-05 19:20 - 2019-11-11 15:13 - 000000000 ____D C:\Users\samue\AppData\LocalLow\IObit
2019-11-05 19:20 - 2019-11-05 19:20 - 000000000 ____D C:\ProgramData\{F86B0233-9A85-4589-8AAF-524CC4F8211B}
2019-11-05 19:19 - 2019-11-12 19:11 - 000000000 ____D C:\ProgramData\IObit
2019-11-05 19:19 - 2019-11-11 15:13 - 000000000 ____D C:\Users\samue\AppData\Roaming\IObit
2019-11-05 19:19 - 2019-11-11 15:13 - 000000000 ____D C:\Program Files (x86)\IObit
2019-11-05 19:19 - 2019-11-05 19:31 - 000000000 ____D C:\ProgramData\ProductData
2019-11-05 19:19 - 2019-11-05 19:19 - 051145040 _____ (IObit ) C:\Users\samue\Downloads\advanced-systemcare-setup.exe
2019-11-05 19:17 - 2019-11-05 19:17 - 000000315 _____ C:\Windows\system32\DrtmAuth9.bin
2019-11-05 19:17 - 2019-11-05 19:17 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2019-11-05 19:17 - 2019-11-05 19:17 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2019-11-05 19:17 - 2019-11-05 19:17 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2019-11-05 19:17 - 2019-11-05 19:17 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2019-11-05 19:17 - 2019-11-05 19:17 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2019-11-05 19:17 - 2019-11-05 19:17 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2019-11-05 19:17 - 2019-11-05 19:17 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2019-11-05 19:17 - 2019-11-05 19:17 - 000000315 _____ C:\Windows\system32\DrtmAuth12.bin
2019-11-05 19:17 - 2019-11-05 19:17 - 000000315 _____ C:\Windows\system32\DrtmAuth11.bin
2019-11-05 19:17 - 2019-11-05 19:17 - 000000315 _____ C:\Windows\system32\DrtmAuth10.bin
2019-11-05 19:17 - 2019-11-05 19:17 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
EmptyTemp:
cmd: ipconfig /flushdns
end::