CreateRestorePoint:
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1912583399-466474933-4168976199-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
R2 db79edbd; c:\Program Files (x86)\LighterSystem\LighterSystem.dll [1582592 2015-02-17] () [File not signed]
c:\Program Files (x86)\LighterSystem
R2 f291fddf; c:\Program Files (x86)\TurboStrength\TurboStrength.dll [1626112 2015-02-17] () [File not signed]
c:\Program Files (x86)\TurboStrength
2015-02-17 21:22 - 2015-02-17 21:22 - 00000000 ____D () C:\ProgramData\OnlineLowDeals
2015-02-17 21:22 - 2015-02-17 21:22 - 00000000 ____D () C:\ProgramData\cheap-o
2015-01-28 22:54 - 2015-02-17 21:02 - 00000000 ____D () C:\ProgramData\62e80b73000079b4
2015-01-28 22:52 - 2015-02-17 21:02 - 00000000 ____D () C:\ProgramData\79f6df4a00001f62
2015-01-28 22:50 - 2015-01-28 22:50 - 00000000 ____D () C:\Program Files (x86)\predm
2015-01-28 22:48 - 2015-02-20 20:17 - 00001710 _____ () C:\Windows\Tasks\KTMJRRLI.job
2015-01-28 22:48 - 2015-01-28 23:16 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2015-01-28 22:48 - 2015-01-28 22:48 - 00004720 _____ () C:\Windows\System32\Tasks\KTMJRRLI
2015-01-28 22:48 - 2015-01-28 22:48 - 00000000 ____D () C:\Users\Anthony\AppData\Local\globalUpdate
2015-01-25 10:12 - 2015-01-25 10:12 - 00001248 _____ () C:\Users\Anthony\AppData\Roaming\KTMJRRLI
2015-02-17 21:22 - 2015-02-17 21:36 - 0000020 _____ () C:\Users\Anthony\AppData\Roaming\appdataFr3.bin
Task: {9103C8FD-1072-4068-A719-9B6F4BFF2522} - System32\Tasks\KTMJRRLI => C:\Users\Anthony\AppData\Roaming\KTMJRRLI.exe <==== ATTENTION
Task: C:\Windows\Tasks\KTMJRRLI.job => C:\Users\Anthony\AppData\Roaming\KTMJRRLI.exe <==== ATTENTION
EmptyTemp: