CloseProcesses:
CreateRestorePoint:
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-1565345802-2626393524-727123170-1001\...\Run: [Owamjpbfqamvliz] => C:\Users\Robert\AppData\Roaming\N81V8o8\mblctr.exe [799744 2017-09-29] (Microsoft Corporation)
Startup: C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Owamjpbfqamvliz.lnk [2017-12-14]
ShortcutTarget: Owamjpbfqamvliz.lnk -> C:\Users\Robert\Desktop\䌢尺獕牥屳潒敢瑲䅜灰慄慴剜慯業杮乜ㄸ㡖㡯浜汢瑣⹲硥≥ (No File)
Emptytemp: