CloseProcesses:
CreateRestorePoint:
EmptyTemp:
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
U4 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]
U4 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]
2018-04-09 22:27 - 2015-05-14 23:27 - 000000008 __RSH C:\ProgramData\ntuser.pol
CMD: dir /a "C:\Program Files"
CMD: dir /a "C:\Program Files (x86)"
CMD: dir /a "%ALLUSERSPROFILE%"
CMD: dir /a "%ALLUSERSPROFILE%\Application Data"
CMD: dir /a "%COMMONPROGRAMFILES%"