CreateRestorePoint: () C:\Program Files (x86)\Tor\tor.exe (BitTorrent Inc.) C:\Users\olivia\AppData\Roaming\uTorrent\uTorrent.exe HKLM-x32\...\Run: [FAStartup] => [X] HKLM-x32\...\Run: [] => [X] HKLM\...\Policies\Explorer: [NoControlPanel] 0 HKU\S-1-5-21-502416101-2354952650-954089748-1000\...\Run: [uTorrent] => C:\Users\olivia\AppData\Roaming\uTorrent\uTorrent.exe [1694560 2015-05-07] (BitTorrent Inc.) HKU\S-1-5-21-502416101-2354952650-954089748-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files (x86)\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-04-10] ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe (McAfee, Inc.) CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION SearchScopes: HKU\S-1-5-21-502416101-2354952650-954089748-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-502416101-2354952650-954089748-1000 -> {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File Hosts: 0.0.0.1 mssplus.mcafee.com FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre1.8.0_31\bin\new_plugin\npjp2.dll [No File] FF user.js: detected! => C:\Users\olivia\AppData\Roaming\Mozilla\Firefox\Profiles\pmt867jo.default\user.js [2014-12-22] R3 Disc Soft Lite Bus Service; C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd) R2 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-08-30] () [File not signed] <==== ATTENTION S1 MpKsl61bedba4; no ImagePath Task: {085C490B-78CC-4899-AD04-F36CC1D5FD82} - System32\Tasks\Final Media Player Update Checker => C:\Program Files (x86)\FinalMediaPlayer\FMPCheckForUpdates.exe [2013-03-25] (Bitberry Software) Task: {37ADAFE4-4B41-4FE1-9F29-BB33D19147A4} - \ProgramUpdateCheck -> No File <==== ATTENTION Task: {7B58359F-9962-4E31-81E9-9451F0222447} - \EPUpdater -> No File <==== ATTENTION Task: {84E1CBDD-6313-453D-B6E9-34D2713A3827} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtect <==== ATTENTION Task: {95DCB82B-BBC4-4188-8E42-EC4ECAE9A6EF} - \ProgramRefresh-ATFST -> No File <==== ATTENTION Reg: Reg Delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services" /F Reg: Reg Add "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services" /F Reg: Reg Delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /F Reg: Reg Add "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /F Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Hosts: CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: ipconfig /flushdns CMD: netsh winsock reset catalog CMD: netsh int ip reset c:\resetlog.txt CMD: ipconfig /release CMD: ipconfig /renew CMD: netsh int ipv4 reset CMD: netsh int ipv6 reset RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers