CloseProcesses: CreateRestorePoint: ShellIconOverlayIdentifiers: [DBARFileBackuped] -> {831cebdd-6baf-4432-be76-9e0989c14aef} => No File ShellIconOverlayIdentifiers: [DBARFileNotBackuped] -> {275e4fd7-21ef-45cf-a836-832e5d2cc1b3} => No File HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-4151019796-3771742870-4154944045-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM -> DefaultScope {C9D7BC04-183E-4AC3-957E-5CAFB73BC071} URL = S2 ASD2Svc; C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASD2Srv.exe [1187840 2014-11-23] (Anvisoft) [File not signed] C:\Program Files (x86)\Anvisoft S2 DTLSvc6; no ImagePath S2 OkayFreedom VPN Starter Service; no ImagePath S3 RtlWlanu; \SystemRoot\System32\drivers\rtwlanu.sys [X] 2014-11-18 01:15 - 2014-11-18 01:15 - 00493568 _____ () C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\http_hook.dll AlternateDataStreams: C:\Syst44975699:$WIMMOUNTDATA AlternateDataStreams: C:\ProgramData\Temp:56E2E879 AlternateDataStreams: C:\ProgramData\Temp:5C321E34 CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state Off CMD: bitsadmin /reset /allusers CMD: ipconfig /flushdns Emptytemp: