start CloseProcesses: CreateRestorePoint: HKU\S-1-5-21-124508121-990816772-2898687459-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION HKU\S-1-5-21-124508121-990816772-2898687459-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:Blank SearchScopes: HKU\S-1-5-21-124508121-990816772-2898687459-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 2016-01-01 21:30 - 2016-01-07 16:50 - 00000492 _____ C:\Windows\Tasks\ParetoLogic Update Version3 Startup Task.job 2016-01-01 21:30 - 2016-01-05 18:00 - 00000466 _____ C:\Windows\Tasks\ParetoLogic Registration3.job 2016-01-01 21:30 - 2016-01-01 21:49 - 00000440 _____ C:\Windows\Tasks\ParetoLogic Update Version3.job 2016-01-01 21:30 - 2016-01-01 21:33 - 00000000 ____D C:\ProgramData\ParetoLogic 2016-01-01 21:30 - 2016-01-01 21:30 - 00003252 _____ C:\Windows\System32\Tasks\ParetoLogic Update Version3 2016-01-01 21:30 - 2016-01-01 21:30 - 00003128 _____ C:\Windows\System32\Tasks\ParetoLogic Registration3 2016-01-01 21:30 - 2016-01-01 21:30 - 00002916 _____ C:\Windows\System32\Tasks\ParetoLogic Update Version3 Startup Task 2016-01-01 21:30 - 2016-01-01 21:30 - 00000000 ____D C:\Users\Manu\AppData\Roaming\ParetoLogic Task: {5C89091A-8223-412B-A97E-989F407005E9} - System32\Tasks\ParetoLogic Update Version3 => C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe [2014-12-08] () Task: {D1A47988-F284-4F3B-87B8-DC67E4BD611B} - System32\Tasks\ParetoLogic Registration3 => Rundll32.exe "C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\UUS3.dll" RunUns C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\UUS3.dll Task: {E43BB4E2-3D76-4119-8437-4BA30ADDC27E} - System32\Tasks\ParetoLogic Update Version3 Startup Task => C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe [2014-12-08] () Task: C:\Windows\Tasks\ParetoLogic Registration3.job => C:\Windows\system32\rundll32.exeGC:\Program Files (x86)\Common Files\ParetoLogic\UUS3\UUS3.dll Task: C:\Windows\Tasks\ParetoLogic Update Version3 Startup Task.job => C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe Task: C:\Windows\Tasks\ParetoLogic Update Version3.job => C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe EmptyTemp: end