Start::
CloseProcesses:
CreateRestorePoint:
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ScreenConnect Client (1d7dd79f-4ccb-4e8c-99c0-620ea576030e) => ""="Service"
2020-02-20 11:44 - 2020-02-20 11:44 - 000000000 ____D C:\Users\33641\Documents\ConnectWiseControl
2020-02-20 11:05 - 2020-02-21 19:07 - 000000000 ____D C:\ProgramData\scre..tion_2c2536e5112611c9_0006.0003_7291c296a0075fd5
2020-02-20 11:05 - 2020-02-20 11:05 - 000086672 _____ C:\Users\33641\Downloads\ConnectWiseControl.Client.exe
2020-02-20 11:00 - 2020-02-20 11:00 - 000000000 ____D C:\Users\33641\AppData\Roaming\AnyDesk
2020-02-20 10:59 - 2020-02-20 10:59 - 003153872 _____ (philandro Software GmbH) C:\Users\33641\Downloads\AnyDesk.exe
2020-02-20 10:45 - 2020-02-20 10:45 - 000083901 _____ C:\Users\33641\Downloads\This computer is BLOCKED.html
2020-02-20 12:35 - 2020-01-05 14:43 - 000000000 ____D C:\Users\33641
2020-02-14 01:40 - 2019-03-19 05:52 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
Emptytemp:
End::