CloseProcesses:
CreateRestorePoint:
HKU\S-1-5-21-922416381-2590263464-3518550475-1001\...\Run: [Emqdtion] => regsvr32.exe C:\Users\jh167\AppData\Local\Emqdtion\visionlink64.dll <===== ATTENTION
SearchScopes: HKU\S-1-5-21-922416381-2590263464-3518550475-1001 -> DefaultScope {BB4A053B-1801-412F-B411-952B48524DAE} URL = 
SearchScopes: HKU\S-1-5-21-922416381-2590263464-3518550475-1001 -> {BB4A053B-1801-412F-B411-952B48524DAE} URL = 
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} -  No File
S2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [X]
C:\Users\jh167\AppData\Local\Temp\libeay32.dll
C:\Users\jh167\AppData\Local\Temp\msvcr120.dll
C:\Users\jh167\AppData\Local\Temp\sqlite3.dll
CMD: bitsadmin /reset /allusers
Emptytemp: