start
CreateRestorePoint:
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-1602304853-2875085211-874297520-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
FirewallRules: [{E772150F-34EB-4052-B3F6-5D70FC318702}] => (Allow) C:\Program Files (x86)\3uTools\libXunlei\Download\MiniThunderPlatform.exe (ShenZhen Thunder Networking Technologies Ltd. -> 深圳市迅雷网络技术有限公司)
FirewallRules: [{2E69ECF8-15CB-4E72-94F3-68B272A45042}] => (Allow) C:\Program Files (x86)\3uTools\libXunlei\Download\MiniThunderPlatform.exe (ShenZhen Thunder Networking Technologies Ltd. -> 深圳市迅雷网络技术有限公司)
virustotal: C:\Program Files (x86)\3uTools\libXunlei\Download\MiniThunderPlatform.exe;C:\WINDOWS\System32\AgentActivationRuntimeStarter.exe
Hosts:
EmptyTemp:
end