CloseProcesses: CreateRestorePoint: AlternateDataStreams: C:\Windows:AstInfo [0] AlternateDataStreams: C:\Windows:nlsPreferences [0] AlternateDataStreams: C:\ProgramData\TEMP:1CE11B51 [176] SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = S4 NVHDA; no ImagePath 2016-07-19 10:21 - 2016-07-19 10:21 - 00000000 ____D C:\ProgramData\Lavasoft C:\Users\Audio User\AppData\Local\Temp\parctmp.exe C:\Users\Audio User\AppData\Local\ba75\88f9.bat (No File) 2016-07-19 11:42 - 2016-07-19 11:42 - 03143496 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Audio User\Downloads\AVG_Protection_Free_1599.exe.part Emptytemp: