CloseProcesses: CreateRestorePoint: CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION SearchScopes: HKU\S-1-5-21-2994528611-1495046117-1799070532-1002 -> {9E0A3C5F-B569-4906-A0E7-57F18B98012D} URL = hxxp://us.yhs4.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_dnldstr_15_12¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dus%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1Qzu0A0EyB0B0AtC0DyBtDtAzyyEyByBzztCtN0D0Tzu0StCtCyBtDtN1L2XzutAtFzztFtAtFtDtN1L1CzutN1L1G1B1V1N2Y1L1Qzu2SyE0FtAtAtByByE0DtGtAyDyBtDtGzzyEtA0FtGtCtA0AzytGtAtBtD0FyC0A0FyE0DtBtB0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2StBtB0C0CtCyCyBtBtG0D0D0EzztGyEyEtByBtGzy0CyB0CtG0A0Bzzzz0ByE0C0CyDzztCyB2Q%26cr%3D868409052%26a%3Dwny_dnldstr_15_12%26os%3DWindows 7 Professional&p={searchTerms} BHO: No Name -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> No File S2 HPFSService; "C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe" [X] S2 InstallerService; "C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe" [X] 2016-08-26 11:15 - 2016-08-26 11:15 - 00003124 _____ C:\Windows\System32\Tasks\SparkTrust Registration3 2016-08-26 11:15 - 2016-08-26 11:15 - 00000462 _____ C:\Windows\Tasks\SparkTrust Registration3.job 2016-08-26 11:14 - 2016-08-26 11:14 - 00004078 _____ C:\Windows\System32\Tasks\SparkTrust PC Cleaner Plus_sch_C3D4614F-6B9F-11E6-9F60-9CB654F71540 2016-08-26 11:14 - 2016-08-26 11:14 - 00003228 _____ C:\Windows\System32\Tasks\SparkTrust Update Version3 2016-08-26 11:14 - 2016-08-26 11:14 - 00002896 _____ C:\Windows\System32\Tasks\SparkTrust Update Version3_triggeronce 2016-08-26 11:14 - 2016-08-26 11:14 - 00002694 _____ C:\Windows\System32\Tasks\SparkTrust PC Cleaner Plus Startup 2016-08-26 11:14 - 2016-08-26 11:14 - 00001365 _____ C:\Users\John\Desktop\SparkTrust PC Cleaner Plus.lnk 2016-08-26 11:14 - 2016-08-26 11:14 - 00000643 _____ C:\Windows\Tasks\SparkTrust PC Cleaner Plus_sch_C3D4614F-6B9F-11E6-9F60-9CB654F71540.job 2016-08-26 11:14 - 2016-08-26 11:14 - 00000596 _____ C:\Windows\Tasks\SparkTrust PC Cleaner Plus Startup.job 2016-08-26 11:14 - 2016-08-26 11:14 - 00000420 _____ C:\Windows\Tasks\SparkTrust Update Version3_triggeronce.job 2016-08-26 11:14 - 2016-08-26 11:14 - 00000420 _____ C:\Windows\Tasks\SparkTrust Update Version3.job 2016-08-26 11:14 - 2016-08-26 11:14 - 00000000 ____D C:\Users\John\AppData\Roaming\SparkTrust 2016-08-26 11:14 - 2016-08-26 11:14 - 00000000 ____D C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SparkTrust 2016-08-26 11:13 - 2016-08-26 11:14 - 00000000 ____D C:\ProgramData\SparkTrust 2016-08-26 11:13 - 2016-08-26 11:14 - 00000000 ____D C:\Program Files\BDServices 2016-08-26 11:13 - 2016-08-26 11:13 - 00000000 ____D C:\Program Files (x86)\SparkTrust 2016-08-26 11:09 - 2016-08-26 11:12 - 11090096 _____ (SparkTrust) C:\Users\John\Downloads\SparkTrust PC Cleaner Plus Setup_8524D454-1FE5-40C2-8F9D-9AF0A5D64FD1_.exe Task: {1C4428C0-0CD7-4D67-817C-C624C4525304} - System32\Tasks\SparkTrust Update Version3_triggeronce => c:\program files (x86)\common files\sparktrust\uus3\Update3.exe [2016-08-19] (SparkTrust Systems) <==== ATTENTION Task: {30312CF7-C869-4877-8E09-538D0BDEF748} - System32\Tasks\SparkTrust Registration3 => Rundll32.exe "C:\Program Files (x86)\Common Files\SparkTrust\UUS3\UUS3.dll" RunUns <==== ATTENTION Task: {35FABFE7-6271-4B18-9593-1F8E8E293947} - System32\Tasks\SparkTrust PC Cleaner Plus Startup => C:\Program Files (x86)\SparkTrust\SparkTrust PC Cleaner Plus\SparkTrustPCCleanerPlus.exe [2016-08-19] (SparkTrust) <==== ATTENTION ask: {5F199607-9718-48DE-B368-C732DA927181} - System32\Tasks\SparkTrust PC Cleaner Plus_sch_C3D4614F-6B9F-11E6-9F60-9CB654F71540 => C:\Program Files (x86)\SparkTrust\SparkTrust PC Cleaner Plus\SparkTrustPCCleanerPlus.exe [2016-08-19] (SparkTrust) <==== ATTENTION Task: {D52E03A3-376B-4799-BA51-2AD0753FE75E} - System32\Tasks\SparkTrust Update Version3 => c:\program files (x86)\common files\sparktrust\uus3\Update3.exe [2016-08-19] (SparkTrust Systems) <==== ATTENTION Task: C:\Windows\Tasks\SparkTrust PC Cleaner Plus Startup.job => C:\Program Files (x86)\SparkTrust\SparkTrust PC Cleaner Plus\SparkTrustPCCleanerPlus.exe C:\Program Files (x86)\SparkTrust\SparkTrust PC Cleaner Plus\SparkTrustPCCleanerPlus.exe <==== ATTENTION Task: C:\Windows\Tasks\SparkTrust PC Cleaner Plus_sch_C3D4614F-6B9F-11E6-9F60-9CB654F71540.job => C:\Program Files (x86)\SparkTrust\SparkTrust PC Cleaner Plus\SparkTrustPCCleanerPlus.exe <==== ATTENTION Task: C:\Windows\Tasks\SparkTrust Registration3.job => rundll32.exe C:\Program Files (x86)\Common Files\SparkTrust\UUS3\UUS3.dll <==== ATTENTION Task: C:\Windows\Tasks\SparkTrust Update Version3.job => c:\program files (x86)\common files\sparktrust\uus3\Update3.exe <==== ATTENTION Task: C:\Windows\Tasks\SparkTrust Update Version3_triggeronce.job => c:\program files (x86)\common files\sparktrust\uus3\Update3.exe <==== ATTENTION C:\Windows\Tasks\SparkTrust Registration3.job CMD: bitsadmin /reset /allusers CMD: netsh winsock reset catalog CMD: ipconfig /flushdns RemoveProxy: hosts: Emptytemp: