CreateRestorePoint:
HKU\S-1-5-21-2462944861-3427807245-1620875648-1001\...\MountPoints2: E - "E:\setup.exe" 
HKU\S-1-5-21-2462944861-3427807245-1620875648-1001\...\MountPoints2: F - "F:\autorun.exe" 
HKU\S-1-5-21-2462944861-3427807245-1620875648-1001\...\MountPoints2: G - "G:\setup.exe" 
HKU\S-1-5-21-2462944861-3427807245-1620875648-1001\...\MountPoints2: {0652b17d-e86a-11e5-82b4-b82a72ba2a77} - "H:\setup.exe" 
HKU\S-1-5-21-2462944861-3427807245-1620875648-1001\...\MountPoints2: {19aa5839-af6b-11e4-825b-9cad97570d80} - "O:\.\StartModem.exe" 
HKU\S-1-5-21-2462944861-3427807245-1620875648-1001\...\MountPoints2: {19aa58c5-af6b-11e4-825b-9cad97570d80} - "C:\Windows\system32\RunDLL32.EXE" Shell32.DLL,ShellExec_RunDLL F:\start.exe
HKU\S-1-5-21-2462944861-3427807245-1620875648-1001\...\MountPoints2: {2fcde6bb-c814-11e4-826c-9cad97570d80} - "C:\Windows\system32\RunDLL32.EXE" Shell32.DLL,ShellExec_RunDLL F:\setup.exe
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
CHR HKU\S-1-5-21-2462944861-3427807245-1620875648-1001\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKLM-x32 -> DefaultScope value is missing
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2462944861-3427807245-1620875648-1001 -> {8026C047-DCB9-4108-B5CE-4502AB1580BB} URL =
FF NewTab: C:\\ProgramData\\Utatitys\\ff.NT
FF Homepage: C:\\ProgramData\\Utatitys\\ff.HP
S2 dycesyco; C:\Users\kyle schaper\AppData\Roaming\VOPackage\VOsrv.exe [X] <==== ATTENTION
U2 McMPFSvc; no ImagePath
C:\Users\kyle schaper\AppData\Roaming\VOPackage
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state on
Hosts:
RemoveProxy:
EmptyTemp: