CloseProcesses:
CreateRestorePoint:
HKLM-x32\...\Run: [] => [X]
GroupPolicy: Restriction <==== ATTENTION
GroupPolicy\User: Restriction <==== ATTENTION
S2 LanmanServer; C:\WINDOWS\system32\svchost.exe [44496 2016-07-16] (Microsoft Corporation) <==== ATTENTION (no ServiceDLL)
S2 LanmanServer; C:\WINDOWS\SysWOW64\svchost.exe [38792 2016-07-16] (Microsoft Corporation) <==== ATTENTION (no ServiceDLL)
S3 MFE_RR; \??\C:\Users\Holder\AppData\Local\Temp\mfe_rr.sys [X] <==== ATTENTION
2017-12-15 11:48 - 2015-12-26 16:56 - 000027382 _____ C:\Users\Holder\AppData\Roaming\wklnhst.dat
2017-11-18 09:34 - 2017-10-17 14:01 - 000927784 _____ () C:\Users\Holder\AppData\Local\Temp\TAInstaller.exe
CMD: bitsadmin /reset /allusers
CMD: netsh winsock reset catalog
CMD: ipconfig /flushdns
CMD: netsh winsock reset all
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
RemoveProxy:
hosts:
Emptytemp: