start
CreateRestorePoint:
CHR HKU\S-1-5-21-2931432088-2454819386-741456421-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-2931432088-2454819386-741456421-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF user.js: detected! => C:\Users\Dell\AppData\Roaming\Mozilla\Firefox\Profiles\duihz9lz.default\user.js [2014-08-12].
S2 SpyHunter 4 Service; C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
Task: {190A41DA-4C90-43CB-9661-BD53B11F13B5} - \SavePathDeals\Updater\SavePathDeals updater No Task File <==== ATTENTION
2015-05-23 18:40 - 2014-03-25 11:28 - 00000266 _____ () C:\Windows\Tasks\AutoKMS.job
Task: {4BB8D682-B352-46A8-95DE-0B07158EEEAD} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe
C:\Windows\AutoKMS
C:\Windows\Tasks\AutoKMS.job
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
Hosts:
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
EmptyTemp:
CMD: bitsadmin /reset /allusers
end