CreateRestorePoint: HKLM-x32\...\Run: [] => [X] HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-3041954770-2689275738-3687636849-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION BHO-x32: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File Toolbar: HKU\S-1-5-21-3041954770-2689275738-3687636849-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X] S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X] 2015-08-30 23:46 - 2015-08-31 00:17 - 00000000 ____D C:\Program Files (x86)\Security Task Manager 2015-08-30 23:40 - 2015-08-30 23:40 - 00647668 _____ C:\Windows\system32\CFG2825601889 2015-08-29 10:34 - 2015-08-31 00:45 - 00000000 ____D C:\Users\-\AppData\Roaming\tor 2014-02-04 23:17 - 2014-02-04 23:17 - 0012326 _____ () C:\Users\-\AppData\Local\kfeuqfdw 2014-02-04 23:16 - 2014-02-04 23:16 - 0068260 _____ () C:\Users\-\AppData\Local\qsjrhlmp 2012-09-11 13:16 - 2012-09-13 14:19 - 0000000 _____ () C:\Users\-\AppData\Local\¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ 2015-08-31 00:35 - 2000-01-01 01:00 - 00714452 _____ () C:\Users\-\AppData\Local\Temp\T2825601889\Tor\libevent-2-0-5.dll 2015-08-31 00:35 - 2000-01-01 01:00 - 00091026 _____ () C:\Users\-\AppData\Local\Temp\T2825601889\Tor\libssp-0.dll 2015-08-31 00:35 - 2000-01-01 01:00 - 00517814 _____ () C:\Users\-\AppData\Local\Temp\T2825601889\Tor\libgcc_s_sjlj-1.dll 2015-08-31 00:35 - 2000-01-01 01:00 - 00110592 _____ () C:\Users\-\AppData\Local\Temp\T2825601889\Tor\zlib1.dll EmptyTemp