start CreateRestorePoint: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000\...\MountPoints2: G - G:\LaunchU3.exe -a HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-3893256802-2942114387-4184744975-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-3893256802-2942114387-4184744975-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.autoco...si=10214&bi=400 HKU\S-1-5-21-3893256802-2942114387-4184744975-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.autoco...si=10214&bi=400 HKU\S-1-5-21-3893256802-2942114387-4184744975-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.autoco...si=10214&bi=400 HKU\S-1-5-21-3893256802-2942114387-4184744975-1000\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://search.autoco...si=10214&bi=400 SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope value is missing. SearchScopes: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000 -> {8CDE19E6-71C2-4B46-89B7-35F6A18C571A} URL = SearchScopes: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.autoco...q={searchTerms} BHO: AC-Pro -> {0FB6A909-6086-458F-BD92-1F8EE10042A0} -> C:\Program Files (x86)\AutocompletePro\64\AutocompletePro64.dll [2010-11-11] (SimplyGen) BHO-x32: AC-Pro -> {0FB6A909-6086-458F-BD92-1F8EE10042A0} -> C:\Program Files (x86)\AutocompletePro\AutocompletePro.dll [2010-11-11] (SimplyGen) FF ProfilePath: C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\qquctg5w.default-1399488636380 FF Keyword.URL: hxxp://search.autocompletepro.com?si=10214&q= FF Extension: AutocompletePro - Your handy search suggestions tool - C:\Users\Owner\AppData\Roaming\Mozilla\Firefox\Profiles\qquctg5w.default-1399488636380\Extensions\support@predictad.com [2014-07-04] CHR HKLM\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa [Not Found] S2 vToolbarUpdater15.5.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe [X] CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{17CCA71B-ECD7-11D0-B908-00A0C9223196}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{275C23E2-3747-11D0-9FEA-00AA003F8646}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{33156164-81D6-11D3-8006-00C04FA30A73}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{33156168-81D6-11D3-8006-00C04FA30A73}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{33D9A762-90C8-11D0-BD43-00A0C911CE86}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{4315D437-5B8C-11D0-BD3B-00A0C911CE86}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{505C2E67-8615-4CA9-9B57-48CF6EE696FD}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{62BE5D10-60EB-11D0-BD3B-00A0C911CE86}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{632B606A-BBC6-11D2-A329-006097C4E476}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{6A2E0670-28E4-11D0-A18C-00A0C9118956}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{720D4AC0-7533-11D0-A5D6-28DB04C10000}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{8D52AA2E-40BE-46D7-8F36-DB7B0F636824}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{8E849609-C7E8-4EC7-8BD3-D55E871A340D}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{A5AC04E7-3E13-48CE-A43F-9FBA59DB1544}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{AB37E6C0-194D-4C33-A924-5178414DEB98}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{AB406AAC-2B2B-11D3-B36B-00C04F6108FF}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{C1AB3D89-6973-45A6-AA44-09CEBBF872E5}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{C3043B13-E649-436A-9CE7-8DA8CB0BF7C8}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{C6E13344-30AC-11D0-A18C-00A0C9118956}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{C6E13360-30AC-11D0-A18C-00A0C9118956}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{C6E13370-30AC-11D0-A18C-00A0C9118956}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{CDA42200-BD88-11D0-BD4E-00A0C911CE86}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{CF3EBABF-3E64-4422-BE23-514BB066ADBE}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{DF0AD8E0-F91C-4109-AE46-1EAA5CD8AB08}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{DF0AD8E1-F91C-4109-AE46-1EAA5CD8AB08}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{DF0AD8E3-F91C-4109-AE46-1EAA5CD8AB08}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{E297AB5E-40B0-41BD-9E06-E4144084EE5F}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{E30629D2-27E5-11CE-875D-00608CB78066}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{E436EBB3-524F-11CE-9F53-0020AF0BA770}\InprocServer32 -> No File Path CustomCLSID: HKU\S-1-5-21-3893256802-2942114387-4184744975-1000_Classes\CLSID\{EE474070-5CD6-4B74-90AD-7284ADDB6331}\InprocServer32 -> No File Path Task: {724381D4-C04D-43A1-9CCC-DBFEA19DFB86} - System32\Tasks\UpdaterEX => C:\Users\Owner\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION Task: {731FF638-6F05-4BEB-A386-6965E3994562} - \TidyNetwork Update No Task File <==== ATTENTION Task: {B6579A9A-824F-4987-9DB0-54B3163EA3AE} - \DriverUpdate Startup No Task File <==== ATTENTION Task: {DA7EC73A-9E2A-4B59-B61C-5A392F57251C} - \Scheduled Update for Ask Toolbar No Task File <==== ATTENTION Task: C:\windows\Tasks\GlaryInitialize.job => C:\Program Files (x86)\Glary Utilities\initialize.exe Task: C:\windows\Tasks\UpdaterEX.job => C:\Users\Owner\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ntrexeservice => ""="Service" VerifySignature: C:\Windows\SysWOW64\svchost.exe Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers end