HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION HKU\S-1-5-21-839081694-1943692923-2272886626-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION SearchScopes: HKLM-x32 -> DefaultScope {608093E8-E04B-40D6-85F6-7764FE0723D4} URL = URLSearchHook: HKU\S-1-5-21-839081694-1943692923-2272886626-1001 - FCToolbarURLSearchHook Class - {810a18c2-8c07-be74-21b6-b8261b1487fd} - C:\Program Files (x86)\BucksBee Loyalty Plugin - OpenInstall\Helper.dll () C:\Program Files (x86)\BucksBee Loyalty Plugin - OpenInstall SearchScopes: HKU\S-1-5-21-839081694-1943692923-2272886626-1001 -> {608093E8-E04B-40D6-85F6-7764FE0723D4} URL = SearchScopes: HKU\S-1-5-21-839081694-1943692923-2272886626-1001 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://www.ask.com/web?q={SEARCHTERMS}&o=15527&l=dis&prt=360&chn=retail&geo=US&ver=6 Toolbar: HKU\S-1-5-21-839081694-1943692923-2272886626-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKU\S-1-5-21-839081694-1943692923-2272886626-1001 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File Toolbar: HKU\S-1-5-21-839081694-1943692923-2272886626-1001 -> No Name - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - No File CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - 2015-12-06 15:44 - 2015-12-06 16:43 - 00041767 ____H C:\Users\home\Documents\~WRL2814.tmp 2015-11-22 18:24 - 2015-11-22 18:33 - 00013541 ____H C:\Users\home\Documents\~WRL0647.tmp 2015-11-16 16:26 - 2015-11-16 16:29 - 00013313 ____H C:\Users\home\Documents\~WRL2131.tmp 2013-03-01 14:54 - 2013-03-01 14:54 - 0823396 _____ () C:\ProgramData\SPL3CC4.tmp 2011-06-21 08:29 - 2011-06-21 08:29 - 6920974 _____ () C:\ProgramData\SPL9690.tmp 2014-01-10 10:45 - 2014-01-10 10:45 - 1270289 _____ () C:\ProgramData\SPLF75C.tmp C:\Users\home\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe C:\Users\home\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe C:\Users\home\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe C:\Users\home\AppData\Local\Temp\jre-8u31-windows-au.exe C:\Users\home\AppData\Local\Temp\jre-8u40-windows-au.exe C:\Users\home\AppData\Local\Temp\jre-8u45-windows-au.exe C:\Users\home\AppData\Local\Temp\jre-8u51-windows-au.exe C:\Users\home\AppData\Local\Temp\jre-8u65-windows-au.exe C:\Users\home\AppData\Local\Temp\jre-8u66-windows-au.exe C:\Users\home\AppData\Local\Temp\miunst_.exe C:\Users\home\AppData\Local\Temp\MSETUP4.EXE C:\Users\home\AppData\Local\Temp\uninstall.exe Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f RemoveProxy: CMD: bitsadmin /reset /allusers CMD: ipconfig /flushdns EmptyTemp: