start
createrestorepoint:
HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2068856 2011-10-13] (Flexera Software LLC.)
HKU\S-1-5-21-1348129997-3731563846-1013290669-1002\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKU\S-1-5-21-1348129997-3731563846-1013290669-1002\...\MountPoints2: {b7dfe944-72e9-11e4-825e-3010b378649c} - "E:\LaunchU3.exe" -a
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.googl...jjmlmojhbllhbho [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.googl...jjmlmojhbllhbho [Not Found] 
S2 0033951416732354mcinstcleanup; C:\Windows\TEMP\003395~1.EXE [836168 2014-03-13] (McAfee, Inc.)
U3 McAPExe; No ImagePath
U3 McMPFSvc; No ImagePath
U3 McNaiAnn; No ImagePath
U3 mcpltsvc; No ImagePath
U3 McProxy; No ImagePath
U3 mfecore; No ImagePath
U3 MSK80Service; No ImagePath
AlternateDataStreams: C:\ProgramData\TEMP:0FF263E8
C:\Windows\TEMP\003395~1.EXE
emptytemp:
end