Start:: 
CreateRestorePoint: 
CloseProcesses: 
HKLM\...\Run: [Restoro] => C:\Program Files\Restoro\bin\RestoroApp.exe [476440 2020-07-28] (Restoro Ltd -> Restoro) 
R2 RestoroActiveProtection; C:\Program Files\Restoro\bin\RestoroProtection.exe [8946512 2020-03-03] (Restoro Ltd -> Restoro) 
2020-08-17 21:27 - 2020-08-17 21:28 - 000000000 ____D C:\Program Files\Restoro
2020-08-17 21:27 - 2020-08-17 21:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Restoro
2020-08-17 21:26 - 2020-08-17 21:29 - 000000000 ____D C:\ProgramData\Restoro
2020-08-17 21:24 - 2020-08-17 21:29 - 000000140 _____ C:\WINDOWS\restoro.ini
2020-08-16 10:50 - 2020-08-16 10:50 - 000931056 _____ (Restoro) C:\Users\qualicom\Desktop\Restoro.exe 
2020-08-17 22:08 - 2014-06-13 15:59 - 000000000 ____D C:\ProgramData\McAfee
2020-08-17 22:08 - 2014-06-13 15:59 - 000000000 ____D C:\Program Files\Common Files\mcafee 
AlternateDataStreams: C:\Users\gaspard M\Downloads\cacaoweb(3).exe:BDU [0]
AlternateDataStreams: C:\Users\gaspard M\Downloads\cacaoweb(4).exe:BDU [0]
EmptyTemp: 
End::