start::
closeprocesses:
createrestorepoint:
CHR StartupUrls: Default -> "hxxp://fr.msn.com/?pc=UP21&ocid=UP21DHP&dt=052213","hxxp://www.google.com","hxxp://www.dosearches.com/?utm_source=b&utm_medium=tugs&utm_campaign=rg&utm_content=hp&from=tugs&uid=SAMSUNGXHM251HI_S237JDRZ506886&ts=1383690962","hxxp://start.mysearchdial.com/?f=1&a=dstrmsd&cd=2XzuyEtN2Y1L1QzutDtDtByE0DtByBtB0CyCtAyE0BtByB0FtN0D0Tzu0SyCzzyEtN1L2XzutBtFtBtFtCtAtFtCtAtAzztN1L1CzutCtD1B1P1R&cr=1349429570&ir=","hxxp://istart.webssearches.com/?type=hp&ts=1410639573&from=air&uid=HGSTXHTS545050A7E660_TEV55C4N306UUN306UUNX","hxxp://www.trovi.com/?gd=&ctid=CT3323130&octid=EB_ORIGINAL_CTID&ISID=M9D48964B-1A7F-4486-9A66-D2DA97AC0993&SearchSource=55&CUI=&UM=6&UP=SP446421E5-C8B6-4D10-8CD6-76F806E09F90&SSPV=","hxxp://www.google.com/"
SearchScopes: HKU\S-1-5-21-607105910-327422593-3548307239-1001 -> DefaultScope {B87CF664-FB28-4075-B3C9-8E2843408BD7} URL =
SearchScopes: HKU\S-1-5-21-607105910-327422593-3548307239-1001 -> {B87CF664-FB28-4075-B3C9-8E2843408BD7} URL =
cmd: md C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database
cmd: sfc /scannow
emptytemp:
end::