start 
CloseProcesses:
CreateRestorePoint:
R1 NetUtils2016; C:\WINDOWS\system32\drivers\NetUtils2016.sys [909944 2017-02-15] () <==== ATTENTION
2017-02-07 18:50 - 2017-02-17 19:05 - 00625272 _____ C:\WINDOWS\system32\NetUtils2016.dll
2017-02-07 18:50 - 2017-02-17 19:05 - 00625272 _____ () C:\Windows\System32\NetUtils2016.dll
2017-02-07 18:50 - 2017-02-15 18:07 - 00909944 _____ C:\WINDOWS\system32\Drivers\NetUtils2016.sys
C:\WINDOWS\system32\NetUtils2016.dll
C:\WINDOWS\system32\Drivers\NetUtils2016.sys
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

EmptyTemp:
end