HKU\S-1-5-21-860519808-2140715989-319308476-1000\...A8F59079A8D5}\localserver32: rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf>ktds (the data entry has 239 more characters). <==== Poweliks!
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_ggfc_14_40_ie&cd=2XzuyEtN2Y1L1Qzu0EzztDtAzy0A0EtAyBzztByBzz0AzzyCtN0D0Tzu0StCtDtDyCtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyD0FzztB0Azz0E0CtG0DzztC0EtGyDyByDzytG0FyC0BtDtGyEyEtC0AtByC0E0A0B0F0DyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0CzyyC0AtCzzyDtGyEyC0E0FtGyE0AyDtDtGzyyCyEzztGyC0DyC0DtA0Fzz0AyByCzztD2Q&cr=526708622&ir=
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_ggfc_14_40_ie&cd=2XzuyEtN2Y1L1Qzu0EzztDtAzy0A0EtAyBzztByBzz0AzzyCtN0D0Tzu0StCtDtDyCtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyD0FzztB0Azz0E0CtG0DzztC0EtGyDyByDzytG0FyC0BtDtGyEyEtC0AtByC0E0A0B0F0DyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0CzyyC0AtCzzyDtGyEyC0E0FtGyE0AyDtDtGzyyCyEzztGyC0DyC0DtA0Fzz0AyByCzztD2Q&cr=526708622&ir=
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_ggfc_14_40_ie&cd=2XzuyEtN2Y1L1Qzu0EzztDtAzy0A0EtAyBzztByBzz0AzzyCtN0D0Tzu0StCtDtDyCtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyD0FzztB0Azz0E0CtG0DzztC0EtGyDyByDzytG0FyC0BtDtGyEyEtC0AtByC0E0A0B0F0DyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0CzyyC0AtCzzyDtGyEyC0E0FtGyE0AyDtDtGzyyCyEzztGyC0DyC0DtA0Fzz0AyByCzztD2Q&cr=526708622&ir=
2014-10-03 00:24 - 2014-10-03 20:02 - 00000000 ____D () C:\Program Files (x86)\AdvanceElite
2014-10-03 00:24 - 2014-10-03 19:57 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro
2014-10-02 15:32 - 2014-10-02 15:32 - 00287744 _____ () C:\Users\Scott\AppData\Local\Gapcgwxlhdd.dll
2014-10-01 21:48 - 2014-10-02 14:11 - 00000000 ____D () C:\windows\System32\Tasks\Safer-Networking
2014-10-01 21:47 - 2014-10-02 22:46 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-10-01 21:46 - 2014-10-02 23:26 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
CustomCLSID: HKU\S-1-5-21-860519808-2140715989-319308476-1000_Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\localserver32 -> rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf>ktds (the data entry has 247 more characters). <==== Poweliks?
Task: {EC495AED-5E15-48D6-B08D-8271E7459AC9} - \Optimizer Pro Schedule No Task File <==== ATTENTION
CloseProcesses:
EmptyTemp: