CreateRestorePoint: (APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2004360 2015-04-28] (APN) HKU\S-1-5-21-3730912956-2149780455-674675747-1001\...\MountPoints2: {8501598b-6c1c-11e4-beb9-54bef73417d0} - "C:\WINDOWS\system32\RunDLL32.EXE" Shell32.DLL,ShellExec_RunDLL F:\TL-Bootstrap.exe HKU\S-1-5-21-3730912956-2149780455-674675747-1001\...\MountPoints2: {88f3cda9-0e1b-11e4-be91-54bef73417d0} - "F:\TL-Bootstrap.exe" HKU\S-1-5-21-3730912956-2149780455-674675747-1001\...\MountPoints2: {9f018ee1-631f-11e4-beb2-54bef73417d0} - "F:\VZW_Software_upgrade_assistant.exe" HKU\S-1-5-21-3730912956-2149780455-674675747-1001\...\MountPoints2: {be14ae60-2036-11e4-be95-54bef73417d0} - "F:\AutoRun.exe" {D2D77DC2-8299-11D1-8949-444553540000} 5.2088.1.A02B06 PID_0083 {01D42BF0-ED08-463f-8A28-99EB6FEE962B} Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-03-05] ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.) BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.) Toolbar: HKU\S-1-5-21-3730912956-2149780455-674675747-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14] FF HKU\S-1-5-21-3730912956-2149780455-674675747-1001\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04] CHR HomePage: Default -> hxxp://astromenda.com/?f=1&a=ast_dnldstr_14_37_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDtByCyE0D0D0E0AyDtC0CtN0D0Tzu0SzyzztAtN1L2XzutAtFtBtFyDtFtCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAyCyByB0A0CtCtBtGyBtAyEyBtGyB0B0CyCtGyE0FyC0AtGyEzz0F0A0C0DyByB0D0DtAyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCyByB0FtD0DtD0BtG0ByEyE0DtGyEyDtC0DtGzyyB0D0AtG0DyDzzzz0EtBtC0EtB0D0C0A2Q&cr=437663936&uref=308&ir= CHR StartupUrls: Default -> "hxxp://astromenda.com/?f=7&a=ast_dnldstr_14_37_ch&cd=2XzuyEtN2Y1L1Qzu0AyE0D0BtAtDtByCyE0D0D0E0AyDtC0CtN0D0Tzu0SzyzztAtN1L2XzutAtFtBtFyDtFtCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAyCyByB0A0CtCtBtGyBtAyEyBtGyB0B0CyCtGyE0FyC0AtGyEzz0F0A0C0DyByB0D0DtAyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCyByB0FtD0DtD0BtG0ByEyE0DtGyEyDtC0DtGzyyB0D0AtG0DyDzzzz0EtBtC0EtB0D0C0A2Q&cr=437663936&uref=308&ir=" CHR Extension: (ShopAtHome.com) - C:\Users\catrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlmebkoiahbppacaicbgncnjhbpdfkcc [2015-02-12] CHR Extension: (MSN Homepage & Bing Search Engine) - C:\Users\catrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2015-05-01] CHR Extension: (My Search) - C:\Users\catrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpmlkknmhomikheehibdnedjampadffh [2015-03-29] CHR Extension: (Skype Click to Call) - C:\Users\catrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-05-01] CHR Extension: (Ask Search) - C:\Users\catrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mppnoffgpafgpgbaigljliadgbnhljfl [2015-03-29] CHR Extension: (iLivid) - C:\Users\catrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nafaimnnclfjfedmmabolbppcngeolgf [2015-03-29] CHR Extension: (Email Login Help) - C:\Users\catrina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndohccehnhmelohogkeelchfdpbblbne [2015-04-13] CHR HKLM\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2015-04-28] CHR HKLM-x32\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2015-04-28] R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [178568 2015-04-28] (APN LLC.) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.) EmptyTemp: