Start::
CloseProcesses:
CreateRestorePoint:
Removeproxy:
Hosts:
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [235]
AlternateDataStreams: C:\Users\xdate\AppData\Local\Temp:$DATA​ [16]
HKU\S-1-5-21-3363372409-612671334-2324347910-1001\Software\Classes\regfile: regedit.exe "%1" <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
2019-11-15 17:11 - 2020-03-22 12:18 - 000000113 _____ () C:\Users\xdate\AppData\Roaming\D2Info0
2019-11-15 17:11 - 2020-03-22 12:19 - 000000008 _____ () C:\Users\xdate\AppData\Roaming\DofusAppId0_1
2019-11-17 16:47 - 2020-03-21 19:30 - 000000008 _____ () C:\Users\xdate\AppData\Roaming\DofusAppId0_2
2019-11-19 16:23 - 2020-03-14 16:43 - 000000008 _____ () C:\Users\xdate\AppData\Roaming\DofusAppId0_3
2019-11-29 14:49 - 2019-11-29 14:49 - 000000000 _____ () C:\Users\xdate\AppData\Local\oobelibMkey.log
2020-03-15 21:28 - 2020-03-15 21:28 - 000000000 ____D C:\Users\xdate\AppData\Roaming\IObit
2020-03-15 21:28 - 2020-03-15 21:28 - 000000000 ____D C:\Users\xdate\AppData\LocalLow\IObit
2020-03-15 21:28 - 2020-03-15 21:28 - 000000000 ____D C:\ProgramData\IObit
cmd: c:\windows\temp\*.*
cmd: C:\Users\nom\AppData\Local\Temp\*.*
cmd: sfc /scannow
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
cmd: netsh winsock reset
Emptytemp:
End::