CreateRestorePoint:
CloseProcesses:
GroupPolicy: Restriction ? <==== ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [fhkbfkkohcdgpckffakhbllifkakihmh] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
S4 blemlkfclafkgkaggamgeceikhbjc; \??\C:\Users\User\AppData\Local\Temp\blemlkfclafkgkaggamgeceikhbjc.sys [X] <==== ATTENTION
S4 djhdjgijbajdidehkihjdkgldlhag; \??\C:\Users\User\AppData\Local\Temp\djhdjgijbajdidehkihjdkgldlhag.sys [X] <==== ATTENTION
S4 klcckiggiceihlgajmkaigcbfglge; \??\C:\Users\User\AppData\Local\Temp\klcckiggiceihlgajmkaigcbfglge.sys [X] <==== ATTENTION
S4 lcefimaidlmcjaalghkcgaklihmhk; \??\C:\Users\User\AppData\Local\Temp\lcefimaidlmcjaalghkcgaklihmhk.sys [X] <==== ATTENTION
2019-04-02 23:56 - 2019-01-10 08:49 - 000000000 ____D C:\Program Files (x86)\IObit
2019-04-02 23:01 - 2019-04-02 23:01 - 000000000 ____D C:\ProgramData\AVAST Software
2019-04-02 22:30 - 2019-04-02 23:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2019-04-02 22:27 - 2019-04-02 22:25 - 000362888 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2019-04-02 23:56 - 2019-01-10 08:49 - 000000000 ____D C:\Program Files (x86)\IObit
Task: {04816FEC-1F3B-4FB6-8796-AD79AD830949} - \{665EDD04-FAD2-ED3F-6B80-1C222B5983C0} -> No File <==== ATTENTION
Task: {08CBC645-FC07-4583-981C-08CB14910F14} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe (AVAST Software s.r.o. -> AVAST Software)
Task: {0F8F8DF9-327F-4FB8-998F-B0162E444F40} - \Opera scheduled Autoupdate 1550736377 -> No File <==== ATTENTION
Task: {2FF38020-BA91-4669-BAB6-05CAE31C1FFB} - \Microsoft\Windows\Media Center\PvrScheduleTask -> No File <==== ATTENTION
Task: {34541BB7-ADC8-407B-95E2-9E9E09583851} - \{7E0D7DC3-88CA-F3CE-5B51-A57798CA67BC} -> No File <==== ATTENTION
Task: {3B1E1E80-F342-4BE1-BD2D-EFFDFEBD0628} - \{EADD2DEC-5DC8-5C10-9C76-83350D5E479A} -> No File <==== ATTENTION
Task: {49F6E6DC-0113-44FB-8015-D619E3DD3354} - \Opera scheduled assistant Autoupdate 1552901903 -> No File <==== ATTENTION
Task: {5E164DE0-8EBA-472C-8F76-086858BD8980} - \{338232A3-2EC7-355A-951E-8EABDF04ECAA} -> No File <==== ATTENTION
Task: {6B588065-1115-4195-87DF-C4403FB8BCBA} - \GoogleUpdateTaskMachineCore -> No File <==== ATTENTION
Task: {86242072-4265-43A9-B104-BE74D9A880FC} - \GoogleUpdateTaskMachineUA -> No File <==== ATTENTION
Task: {992419F6-5084-479F-9FA6-0EE2DD6120B3} - System32\Tasks\DLLHelperUACDisablingTask => C:\Program Files (x86)\DLL Helper\DllHelper.exe
Task: {A02FF954-E2D6-498E-9F6E-0A045D37B8B3} - \Microsoft\Windows\Media Center\MediaCenterRecoveryTask -> No File <==== ATTENTION
Task: {D13F4806-8240-40E6-98FE-4D74D433BE61} - \{FB20E4E5-A802-4955-AAB1-5C95F3FAE77F} -> No File <==== ATTENTION
Task: {D6C7B37C-7BF4-4CF7-BB6E-07511BD88494} - System32\Tasks\{125E6BE4-54B8-4D6C-ACBD-45063C19FE8F} => C:\Windows\system32\pcalua.exe -a D:\Uninstall.exe -c "D:\install.log"
Task: {DE5D7AC9-A5A5-4F7A-AF33-2DBC84F363A5} - \{46EBFB72-9286-3E41-5C83-E34D3C23AF42} -> No File <==== ATTENTION
Task: {E258E6F0-4B07-4E3D-811A-6598223CB372} - \Avast Emergency Update -> No File <==== ATTENTION
Task: {EBEDF219-2E9F-46C3-81D1-0F318FBA79B7} - \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask -> No File <==== ATTENTION
Task: {FB3A334B-C1C9-49F2-8231-ACCD67DEEB47} - \Opera scheduled Autoupdate 1551973615 -> No File <==== ATTENTION
MSCONFIG\Services: dllhost_svc => 2
MSCONFIG\startupreg: AvastUI.exe => "C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui
FirewallRules: [{04011DFF-4B04-4949-9888-AC36542B9E63}] => (Allow) C:\Windows\SysWOW64\svchost.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{1624DFAF-729B-4ED4-A922-1AD55F39DA68}] => (Allow) C:\Windows\SysWOW64\svchost.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{2E99E51F-2F9C-4928-863A-96904A9EBBBC}] => (Allow) C:\Windows\SysWOW64\InstallShield\setup.exe (Microsoft Windows -> InstallShield Software Corporation)
Reboot: