CreateRestorePoint: HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION HKU\S-1-5-21-998330651-303224156-1059126384-1004\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION 2015-12-31 09:53 - 2015-12-31 09:53 - 00000000 ____D C:\Users\BR\AppData\Local\{10CF9506-F72C-4A06-A3DA-4845B6C97BB7} 2015-12-31 06:21 - 2015-12-31 06:21 - 00000000 ____D C:\Users\BR\AppData\Local\{F14EB260-F01A-409E-B16B-A0BE31C831E7} 2015-12-30 12:18 - 2015-12-30 12:19 - 00000000 ____D C:\Users\BR\AppData\Local\{5DDBEF6E-2924-472C-95F9-E505DD818272} 2015-12-29 07:42 - 2015-12-29 07:42 - 00000000 ____D C:\Users\BR\AppData\Local\{036388DF-B448-4985-85BA-187DCCC10FAE} 2015-12-28 15:47 - 2015-12-28 15:47 - 00000000 ____D C:\Users\BR\AppData\Local\{299021E1-649E-4A8E-AD2E-3076FA51C664} 2015-12-28 02:37 - 2015-12-28 02:37 - 00000000 ____D C:\Users\BR\AppData\Local\{58D77E0F-BB45-4B4F-9584-91CF2F636547} 2015-12-27 23:04 - 2015-12-27 23:04 - 00000000 ____D C:\Users\BR\AppData\Local\{DEBEFDA7-783B-4625-9FD7-14D923AB27FB} 2015-12-27 14:21 - 2015-12-27 14:21 - 00000000 ____D C:\_193560_ 2015-12-27 09:26 - 2015-12-27 09:27 - 00000000 ____D C:\Users\BR\AppData\Local\{AF492E9B-954A-4209-98E7-24564F3942EF} 2015-12-25 21:09 - 2015-12-25 21:09 - 00000000 ____D C:\Users\BR\AppData\Local\{ADBF5FBD-C56C-4795-823B-B30E3F2E23C7} 2015-12-25 09:17 - 2015-12-25 09:17 - 00000000 ____D C:\_959793_ 2015-12-24 22:14 - 2015-12-24 22:14 - 00000000 ____D C:\Users\BR\AppData\Local\{E41F5F8B-272A-40F6-9138-D4F504D7166D} 2015-12-24 20:07 - 2015-12-24 20:07 - 00000000 ____D C:\Users\BR\AppData\Local\{722101BB-3843-44A4-8A06-8B87569EB1E4} 2015-12-24 02:03 - 2015-12-24 02:03 - 00000000 ____D C:\Users\BR\AppData\Local\{8414D312-047F-47EE-856E-A3F3BCB15293} 2015-12-23 17:08 - 2015-12-23 17:08 - 00000000 ____D C:\_438108_ 2015-12-23 09:29 - 2015-12-23 09:30 - 00000000 ____D C:\Users\BR\AppData\Local\{FF891592-3DB8-4CB7-8A85-9D683B8A1C94} 2015-12-23 02:29 - 2015-12-23 02:29 - 00000000 ____D C:\_686760_ 2015-12-23 02:29 - 2015-12-23 02:29 - 00000000 ____D C:\_668944_ 2015-12-22 15:00 - 2015-12-22 15:00 - 00000000 ____D C:\Users\BR\AppData\Local\{24753264-BEC7-4003-B927-F350040A6E91} 2015-12-22 01:43 - 2015-12-22 01:43 - 00000000 ____D C:\Users\BR\AppData\Local\{7C37C019-85A4-448D-A586-AC5ABD762AA9} 2015-12-21 07:21 - 2015-12-21 07:21 - 00000000 ____D C:\Users\BR\AppData\Local\{F07FFADB-940F-4113-8352-5F39E802755C} 2015-12-20 07:52 - 2015-12-20 07:52 - 00000000 ____D C:\Users\BR\AppData\Local\{616552FB-1478-48A0-986A-7990DABC54A4} 2015-12-19 16:24 - 2015-12-19 16:25 - 08107995 _____ C:\Users\BR\Downloads\D%3a%5cvhost%5c095c09bd2e7f097b251d8c05a2044d15%5chttpdocs%5cdownload%5c2015121613252443.rar 2015-12-19 16:12 - 2015-12-19 16:12 - 00000000 ____D C:\Users\BR\AppData\Local\{13ECE924-563E-44F2-8937-2FF512C7C66E} 2015-12-19 05:53 - 2015-12-19 05:53 - 00000000 ____D C:\Users\BR\AppData\Local\{38BC2977-FC58-4EFC-9397-EA1FFE1D4A9F} 2015-12-18 21:49 - 2015-12-18 21:49 - 00000000 ____D C:\Users\BR\AppData\Local\{1802FFCE-569A-45A8-8221-1BC4AB692500} 2015-12-18 06:22 - 2015-12-18 06:22 - 00000000 ____D C:\Users\BR\AppData\Local\{92C3F0F6-1BAF-4A3B-9FC2-D0B629648F96} 2015-12-17 07:25 - 2015-12-17 07:26 - 00000000 ____D C:\Users\BR\AppData\Local\{8CF4EA93-2D2D-4EB6-96A1-9B9C742C67FB} 2015-12-16 16:54 - 2015-12-16 16:54 - 00000000 ____D C:\MSI4e876.tmp 2015-12-16 08:50 - 2015-12-16 08:51 - 00000000 ____D C:\Users\BR\AppData\Local\{1CAD8E48-08F0-4619-BD4E-5489B2BD0DD5} 2015-12-15 18:36 - 2015-12-15 18:36 - 00000000 ____D C:\Users\BR\AppData\Local\{A811EA30-8249-4DF1-9000-FFEC6435B7D6} 2015-12-15 05:47 - 2015-12-15 05:47 - 00000000 ____D C:\Users\BR\AppData\Local\{DB07A58C-E54D-4F30-9020-1E6726BBD6E4} 2015-12-15 03:52 - 2015-12-15 03:52 - 00000000 ____D C:\_202433_ 2015-12-14 08:46 - 2015-12-14 08:46 - 00000000 ____D C:\Users\BR\AppData\Local\{997223D9-F9B9-4D46-8F7A-21CB853E5B76} 2015-12-13 18:54 - 2015-12-13 18:54 - 00000000 ____D C:\Users\BR\AppData\Local\{A696FC79-93BB-42CB-B9D0-4B32959C2BB0} 2015-12-12 22:27 - 2015-12-12 22:27 - 00000000 ____D C:\Users\BR\AppData\Local\{AF42F38A-5DAA-406D-8AE3-8A28CDD1B258} 2015-12-12 09:16 - 2015-12-12 09:16 - 00000000 ____D C:\Users\BR\AppData\Local\{E02A1284-03D5-40D5-A285-7CB11D2E1918} 2015-12-11 20:50 - 2015-12-11 20:51 - 00000000 ____D C:\Users\BR\AppData\Local\{429F7793-9B28-4B16-A490-05CFF5792621} 2015-12-11 06:40 - 2015-12-11 06:40 - 00000000 ____D C:\Users\BR\AppData\Local\{85A360A4-18AA-4383-890A-E82CB17D9F66} 2015-12-10 07:47 - 2015-12-10 07:47 - 00000000 ____D C:\Users\BR\AppData\Local\{05452CF0-1A0C-4A18-BD99-BB6F66E384C9} 2015-12-10 06:30 - 2015-12-10 06:30 - 00000000 ____D C:\Users\BR\AppData\Local\{8B5960BF-E7E6-4ED9-B841-3F8F18390F7F} 2015-12-10 05:44 - 2015-12-10 05:44 - 00000000 ____D C:\Users\BR\AppData\Local\{F9EBF3C3-9C29-421D-BEF0-CCEA331C7C82} 2015-12-10 02:26 - 2015-12-10 02:26 - 00000000 ____D C:\_086883_ 2015-12-10 02:26 - 2015-12-10 02:26 - 00000000 ____D C:\_068569_ 2015-12-09 16:30 - 2015-12-09 16:30 - 00000000 ____D C:\Users\BR\AppData\Local\{981BBA3C-5913-4C25-8913-D83454C4F1E4} 2015-12-09 03:22 - 2015-12-09 03:22 - 00000000 ____D C:\MSIef277.tmp 2015-12-09 03:21 - 2015-12-09 03:21 - 00000000 ____D C:\MSIef260.tmp 2015-12-09 03:19 - 2015-12-09 03:19 - 00000000 ____D C:\MSIef250.tmp 2015-12-09 03:19 - 2015-12-09 03:19 - 00000000 ____D C:\_981808_ 2015-12-09 03:18 - 2015-12-09 03:18 - 00000000 ____D C:\MSIef23c.tmp 2015-12-09 03:18 - 2015-12-09 03:18 - 00000000 ____D C:\MSIef232.tmp 2015-12-09 03:18 - 2015-12-09 03:18 - 00000000 ____D C:\MSIef21c.tmp 2015-12-09 03:03 - 2015-12-09 03:03 - 00000000 ____D C:\MSIefa7c.tmp 2015-12-09 03:03 - 2015-12-09 03:03 - 00000000 ____D C:\MSIefa64.tmp 2015-12-09 03:03 - 2015-12-09 03:03 - 00000000 ____D C:\_058984_ 2015-12-09 03:01 - 2015-12-09 03:01 - 00000000 ____D C:\MSIefa4d.tmp 2015-12-09 03:00 - 2015-12-09 03:00 - 00000000 ____D C:\MSIefa36.tmp 2015-12-09 02:55 - 2015-12-09 02:55 - 00000000 ____D C:\_569156_ 2015-12-08 21:53 - 2015-12-08 21:53 - 00000000 ____D C:\Users\BR\AppData\Local\{4D0A455B-8325-4F07-AF20-3AC961F8AB17} 2015-12-08 06:47 - 2015-12-08 06:47 - 00000000 ____D C:\Users\BR\AppData\Local\{BA213AC6-1ECF-4913-8CB9-C63F2121DACC} 2015-12-07 09:35 - 2015-12-07 09:35 - 00000000 ____D C:\Users\BR\AppData\Local\{0AB1C510-D294-4C54-BF11-1DD088AE5765} 2015-12-06 20:52 - 2015-12-06 20:52 - 00000000 ____D C:\Users\BR\AppData\Local\{E68EBFA1-08C7-40C4-BD0E-584F9CFFACFE} 2015-12-06 06:04 - 2015-12-06 06:05 - 00000000 ____D C:\Users\BR\AppData\Local\{81C29482-25ED-4C8C-A705-AC7B67C1D3C2} 2015-12-05 09:36 - 2015-12-05 09:36 - 00000000 ____D C:\Users\BR\AppData\Local\{3357B4EC-C35B-46A6-8C53-39C30CA6E265} 2015-12-05 04:56 - 2015-12-05 04:57 - 00000000 ____D C:\Users\BR\AppData\Local\{058E250A-D549-4417-AFB0-4E3CFF6CE54D} 2015-12-05 00:08 - 2015-12-05 00:08 - 00000000 ____D C:\Users\BR\AppData\Local\{60016A71-765C-44C5-938D-92999C3D59C2} 2015-12-04 18:15 - 2015-12-04 18:15 - 00000000 ____D C:\Users\BR\AppData\Local\{C50E7D9F-8A5D-4DF8-8FC7-4072BA3714D7} 2015-12-04 03:42 - 2015-12-04 03:42 - 00000000 ____D C:\Users\BR\AppData\Local\{491C29EA-B0E9-4541-85B5-E5126776B699} 2015-12-03 07:40 - 2015-12-03 07:40 - 00000000 ____D C:\Users\BR\AppData\Local\{8844AA95-EB19-429F-A73F-A3941915807C} 2015-12-02 08:18 - 2015-12-02 08:19 - 00000000 ____D C:\Users\BR\AppData\Local\{DD7F81D0-3EC8-4B4D-B003-462A71CFBB4A} Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers