Start:: CreateRestorePoint EmptyCLSID EmptyFlash EmptyTracing EmptyPrefetch EmptyProxy [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:mcpltui_exe =>.McAfee Inc. [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:ProductUpdater =>Toolbar.Freemake HKU\S-1-5-21-3266436634-2734453066-3260852382-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com =>PUP.Optional.LavasoftWebCompanion HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com =>PUP.Optional.LavasoftWebCompanion HKCU\Software\undefined =>.SUP.Downloader HKU\S-1-5-21-3266436634-2734453066-3260852382-1001\SOFTWARE\undefined =>.SUP.Downloader C:\Users\NOUS2\AppData\Local\AdvinstAnalytics =>.SUP.Various O69 - SBI: prefs.js [NOUS2 - o150yvhf.Pierre] user_pref("browser.newtab.url", "https://defaultsearch.co/homepage?hp=1&pId=BT170603&iDate=2020-04-30 12:19:42&bName=&bitmask=0600[...] =>SUP.Optional.DefaultSearch O69 - SBI: prefs.js [NOUS2 - o150yvhf.Pierre] user_pref("browser.newtabpage.url", "https://defaultsearch.co/homepage?hp=1&pId=BT170603&iDate=2020-04-30 12:19:42&bName=&bitmask=[...] =>SUP.Optional.DefaultSearch O69 - SBI: prefs.js [NOUS2 - fire4moi.default] user_pref("browser.newtab.url", "https://defaultsearch.co/homepage?hp=1&pId=BT170603&iDate=2020-04-30 12:19:42&bName=&bitmask=0600[...] =>SUP.Optional.DefaultSearch O69 - SBI: prefs.js [NOUS2 - fire4moi.default] user_pref("browser.newtabpage.url", "https://defaultsearch.co/homepage?hp=1&pId=BT170603&iDate=2020-04-30 12:19:42&bName=&bitmask=[...] =>SUP.Optional.DefaultSearch C:\Users\NOUS2\AppData\Local\Google\Chrome\User Data\Default\File System\000 =>.SUP.Temporary.Chrome C:\Users\NOUS2\AppData\Local\Google\Chrome\User Data\Default\File System\001 =>.SUP.Temporary.Chrome C:\Users\NOUS2\AppData\Local\Google\Chrome\User Data\Default\File System\002 =>.SUP.Temporary.Chrome C:\Users\NOUS2\AppData\Local\Google\Chrome\User Data\Default\File System\003 =>.SUP.Temporary.Chrome C:\Users\NOUS2\AppData\Local\Google\Chrome\User Data\Default\File System\004 =>.SUP.Temporary.Chrome C:\Users\NOUS2\AppData\Local\Google\Chrome\User Data\Default\File System\005 =>.SUP.Temporary.Chrome cmd: ipconfig /flushdns cmd: netsh advfirewall reset cmd: netsh advfirewall set allprofiles state on WinsockFix EmptyRecycle EmptyTemp End::