CreateRestorePoint: HKU\S-1-5-21-1530735055-4101794070-4272422381-1001\...\MountPoints2: {41b16668-a1dc-11e4-bedc-24fd52147259} - "E:\FPFF.EXE" HKU\S-1-5-21-1530735055-4101794070-4272422381-1001\...\MountPoints2: {88e0a983-84c0-11e4-bec4-24fd52147259} - "E:\VZW_Software_upgrade_assistant.exe" HKU\S-1-5-21-1530735055-4101794070-4272422381-1001\...\MountPoints2: {b65b1e7e-e343-11e3-be86-24fd52147259} - "E:\TL-Bootstrap.exe" SearchScopes: HKU\S-1-5-21-1530735055-4101794070-4272422381-1001 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://nortonsafe.se...t=kwd&qsrc=2869 CHR StartupUrls: Default -> "", "hxxp://kpnet.kp.org/ncal/santarosa/" CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path CHR HKU\S-1-5-21-1530735055-4101794070-4272422381-1001\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - No Path CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - No Path 2015-02-10 21:07 - 2014-04-02 17:24 - 00000000 ____D () C:\Users\Michael\AppData\Roaming\BitTorrent AlternateDataStreams: C:\ProgramData\Temp:D287FACF AlternateDataStreams: C:\ProgramData\Temp:D3A96964 EmptyTemp: