SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = CHR StartupUrls: Default -> "hxxp://mysearch.avg.com?cid={78BAED99-C67D-40EC-941A-FEA0F7387BF3}&mid=2a7b3dbee1bd47d2a5d36d16b2720196-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=en&ds=rc011&coid=avgtbdisrc&cmpid=&pr=sa&d=2014-03-19 13:43:44&v=18.1.0.443&pid=safeguard&sg=&sap=hp" CHR DefaultSearchKeyword: Default -> astromenda.com CHR DefaultSearchURL: Default -> http://astromenda.co...r=828474337&ir= CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION S2 Update Deal Keeper; "C:\Program Files (x86)\Deal Keeper\updateDealKeeper.exe" [X] S2 Util Deal Keeper; "C:\Program Files (x86)\Deal Keeper\bin\utilDealKeeper.exe" [X] 2014-08-26 22:42 - 2014-08-27 07:42 - 00000000 ____D () C:\ProgramData\b1b7a188cb35d8a4 2014-08-26 13:21 - 2014-08-26 13:21 - 00002482 _____ () C:\Windows\System32\Tasks\0814tbUpdateInfo C:\Users\administrator\g2ax_customer_downloadhelper_win32_x86.exe Task: {E0D76832-9A8E-4050-946F-74D7E16885E6} - System32\Tasks\0814tbUpdateInfo => C:\ProgramData\Avg_Update_0814tb\0814tb_{342B3307-7554-4042-A579-C6C19C5A9B46}.exe Reboot: