CreateRestorePoint:
HKLM-x32\...\Run: [SiteRanker] => "C:\Program Files (x86)\SiteRanker\SiteRankTray.exe"
C:\Program Files (x86)\SiteRanker\
HKU\S-1-5-21-3651360348-2033358078-3460233437-1000\...\Run: [UpdateAdmin] => C:\Users\dwain and patti\AppData\Local\UpdateAdmin\UpdateAdmin.exe /RUN
C:\Users\dwain and patti\AppData\Local\UpdateAdmin
HKU\S-1-5-21-3651360348-2033358078-3460233437-1000\...\MountPoints2: {1415a3fe-43aa-11e2-8633-4c72b908f2f9} - G:\LaunchU3.exe -a
HKU\S-1-5-21-3651360348-2033358078-3460233437-1000\...\MountPoints2: {a04f6537-0514-11e4-891c-4c72b908f2f9} - G:\VZW_Software_upgrade_assistant.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3651360348-2033358078-3460233437-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://services.fres...725a9a43871}&i=
HKU\S-1-5-21-3651360348-2033358078-3460233437-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://services.fres...725A9A43871}&i=
Toolbar: HKU\S-1-5-21-3651360348-2033358078-3460233437-1000 -> No Name - {E6674E97-5758-4B2B-9F66-3F3E925BADEC} -  No File
FF Plugin-x32: @oberon-media.com/ONCAdapter -> C:\Program Files (x86)\Common Files\Oberon Media\NCAdapter\1.0.0.14\npapicomadapter.dll No File
FF Extension: No Name - C:\Users\dwain and patti\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\text_links@arcadeweb.com [2012-11-25]
FF HKLM-x32\...\Firefox\Extensions: [siteranker@siteranker.com] - C:\Program Files (x86)\SiteRanker\firefox
CHR Extension: (dealu2deeallIt) - C:\Users\dwain and patti\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kehkbcedodogokbhomfookgomiaafedi [2015-01-15]
CHR HKLM-x32\...\Chrome\Extension: [apgjagobplilmcdfelodhgefiidomnfl] - C:\Program Files (x86)\Inbox Toolbar\Chrome\ibxtoolbar_chr.crx [Not Found]
2015-03-02 19:25 - 2014-12-28 17:13 - 00000000 ____D () C:\ProgramData\1078601655
CHR Extension: (Zoominto) - C:\Users\dwain and patti\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fnkoafephiilajeompiffeohpcloapob [2015-02-05]
CustomCLSID: HKU\S-1-5-21-3651360348-2033358078-3460233437-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\dwain and patti\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-3651360348-2033358078-3460233437-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\dwain and patti\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-3651360348-2033358078-3460233437-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\dwain and patti\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-3651360348-2033358078-3460233437-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\dwain and patti\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File
Task: {F3DDA61E-35E7-4612-8828-5D235E2233EA} - System32\Tasks\UpdateAdmin => C:\Users\dwain and patti\AppData\Local\UpdateAdmin\UpdateAdmin.exe <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Temp:2CB9631F
AlternateDataStreams: C:\ProgramData\Temp:61FA4815
AlternateDataStreams: C:\ProgramData\Temp:A1D3FEF0
EmptyTemp: