start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
EmptyTemp:
HKU\S-1-5-21-650139103-3775730898-2963049704-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
CHR Extension: (McAfee® WebAdvisor) - C:\Users\alexa\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
2018-12-14 22:09 - 2018-12-14 22:09 - 000000000 ____D C:\WINDOWS\System32\Tasks\McAfee
2018-12-14 03:19 - 2018-12-14 03:20 - 000000000 ____D C:\AdwCleaner
2018-12-10 23:07 - 2018-12-14 18:58 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
Task: {ADA21389-777F-4334-AE9B-BE72E52A0871} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => %windir%\System32\reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
HKU\S-1-5-21-650139103-3775730898-2963049704-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
cmd: ipconfig /flushdns
end::