start CreateRestorePoint: CloseProcesses: HKLM-x32\...\Run: [] => [X] HKU\S-1-5-21-3972895398-2692782183-784820064-1001\...\MountPoints2: {89022983-0294-11e4-beb7-6045bde99481} - "D:\HTC_Sync_Manager_PC.exe" HKU\S-1-5-21-3972895398-2692782183-784820064-1001\...\MountPoints2: {97ed781e-f976-11e2-be6f-6045bde99481} - "D:\WD SmartWare.exe" autoplay=true HKU\S-1-5-21-3972895398-2692782183-784820064-1001\...\MountPoints2: {ce47e6a6-d3a9-11e3-beae-6045bde99481} - "D:\LaunchU3.exe" -a ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION SearchScopes: HKLM -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = BHO: SeaverAidedOn -> {9ec91c84-306d-4daf-a58a-225ceec1857a} -> C:\Program Files (x86)\SeaverAidedOn\3R66sWSGa0z2ox.x64.dll () BHO: saver box -> {ea7d823d-d571-4b09-8e32-ba53cbc85a42} -> C:\Program Files (x86)\saver box\sOAv8OD1ratgIo.x64.dll () BHO-x32: SeaverAidedOn -> {9ec91c84-306d-4daf-a58a-225ceec1857a} -> C:\Program Files (x86)\SeaverAidedOn\3R66sWSGa0z2ox.dll () BHO-x32: saver box -> {ea7d823d-d571-4b09-8e32-ba53cbc85a42} -> C:\Program Files (x86)\saver box\sOAv8OD1ratgIo.dll () Toolbar: HKU\S-1-5-21-3972895398-2692782183-784820064-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKU\S-1-5-21-3972895398-2692782183-784820064-1001 -> No Name - {1ADDAC21-D2DB-4C6A-8DD6-9E88D42BB035} - No File C:\Users\r\AppData\Roaming\Mozilla\Firefox\Profiles\z693s1u3.default\user.js FF Extension: CoupScaaNunnEer - C:\Users\r\AppData\Roaming\Mozilla\Firefox\Profiles\z693s1u3.default\Extensions\3a@bwC.edu [2015-02-04] FF Extension: SaverAddoNN - C:\Users\r\AppData\Roaming\Mozilla\Firefox\Profiles\z693s1u3.default\Extensions\pGpGI8En0@w.net [2015-02-04] CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.99\ppGoogleNaClPluginChrome.dll No File CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File CHR Plugin: (Java™ Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll No File CHR Plugin: (DIRECTV Player) - C:\Users\r\AppData\Local\DIRECTV Player\npPlayerPlugin.dll No File CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll No File CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\windows\SysWOW64\npDeployJava1.dll No File CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File S2 372ab9f0; "C:\WINDOWS\system32\rundll32.exe" "c:\Program Files (x86)\Optimizer Pro 3.31\OptProMon.dll",ENT S4 LMIRfsClientNP; No ImagePath C:\Program Files (x86)\SeaverAidedOn\3R66sWSGa0z2ox.x64.dll C:\Program Files (x86)\saver box\sOAv8OD1ratgIo.x64.dll C:\Program Files (x86)\SeaverAidedOn\3R66sWSGa0z2ox.dll C:\Program Files (x86)\saver box\sOAv8OD1ratgIo.dll 2015-02-03 19:12 - 2015-02-03 19:13 - 00000000 ____D () C:\Program Files (x86)\SaverAddoNN 2015-02-03 19:12 - 2015-02-03 19:13 - 00000000 ____D () C:\Program Files (x86)\saver box 2015-02-03 19:12 - 2015-02-03 19:12 - 00000000 ____D () C:\Program Files (x86)\Holmes 2015-02-03 08:20 - 2015-02-03 08:20 - 00000000 ____D () C:\ProgramData\occplolinipgdpodomnciceljmmiepog 2015-02-03 08:20 - 2015-02-03 08:20 - 00000000 ____D () C:\Program Files (x86)\Tumblr Shortcuts 2015-02-03 08:20 - 2015-02-03 08:20 - 00000000 ____D () C:\Program Files (x86)\realDealo 2015-02-03 03:20 - 2015-02-03 03:20 - 00000000 ____D () C:\Program Files (x86)\CoupScaaNunnEer 2015-02-02 23:17 - 2015-02-05 10:28 - 00000000 ____D () C:\Program Files (x86)\deaL4real 2015-02-02 23:17 - 2015-02-04 23:46 - 00000000 ____D () C:\ProgramData\10368842916747477957 2015-02-02 23:17 - 2015-02-02 23:17 - 00000000 ____D () C:\Program Files (x86)\SeaverAidedOn 2015-01-14 17:56 - 2015-01-14 17:56 - 0000064 _____ () C:\Users\r\AppData\Local\bcafdfcff6a9e262160d7dea8733e42e C:\Users\r\AppData\Local\Temp\optprosetup.exe C:\Users\r\AppData\Local\Temp\Sqlite3.dll Task: {43AEF627-47EE-43CE-8352-17A5BFCD3158} - System32\Tasks\Optimize Push Notification Data File-S-1-5-21-3972895398-2692782183-784820064-1001 Task: {57DEB4E9-97FA-463E-827E-31B18C87FED6} - \Optimizer Pro Schedule No Task File <==== ATTENTION EmptyTemp: Reboot: end