Start:: CreateRestorePoint: CloseProcesses: C:\Windows\System32\Tasks_Migrated\CCleaner Browser Heartbeat Task (Hourly) C:\Windows\System32\Tasks_Migrated\CCleaner Browser Heartbeat Task (Logon) C:\Windows\System32\Tasks_Migrated\CCleaner Update C:\Windows\System32\Tasks_Migrated\CCleanerSkipUAC C:\Windows\System32\Tasks_Migrated\CCleanerUpdateTaskMachineCore C:\Windows\System32\Tasks_Migrated\CCleanerUpdateTaskMachineUA C:\Windows\Prefetch\CCLEANER64.EXE-1137D9AC.pf C:\Windows\Prefetch\CCLEANERBROWSER.EXE-207AD69D.pf C:\Users\psgam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\CCleaner Browser.lnk C:\Users\psgam\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\AppIconCache\100\CCleaner_Browser [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\CCleanerBrowserUpdate.exe] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{16962488-ADC4-4DF7-BD84-0016C63255C5}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{75C1FF73-0BBE-4032-88DF-0A268F3A2080}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{EACCA19F-0568-4646-BBE1-9F2BBDBE7FAA}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerHTML] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.CoCreateAsync] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.CoCreateAsync.1.0] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.CoreClass] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.CoreClass.1] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.CoreMachineClass] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.CoreMachineClass.1] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.CredentialDialogMachine] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.CredentialDialogMachine.1.0] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.MiscUtils] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.MiscUtils.1.0] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.OnDemandCOMClassMachine] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.OnDemandCOMClassMachine.1.0] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.OnDemandCOMClassMachineFallback] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.OnDemandCOMClassMachineFallback.1.0] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.OnDemandCOMClassSvc] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.OnDemandCOMClassSvc.1.0] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.ProcessLauncher] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.ProcessLauncher.1.0] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.Update3COMClassService] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.Update3COMClassService.1.0] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.Update3WebMachine] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.Update3WebMachine.1.0] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.Update3WebMachineFallback] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.Update3WebMachineFallback.1.0] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.Update3WebSvc] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CCleanerUpdate.Update3WebSvc.1.0] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1AE69EA6-CA63-4105-A21E-9164F1729F75}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2C60F3AE-6756-4926-B8CB-9741FAD09EC0}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B55572CE-73D5-42D3-A696-319B8E3E7A3A}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C9B19ED1-DD98-4C65-A91A-F6BB76EC15A3}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-vnd.update.ccleanerbrowser.com.oneclickctrl.9] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-vnd.update.ccleanerbrowser.com.update3webcontrol.3] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Piriform.OneClickCtrl.9] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Piriform.Update3WebControl.3] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{52F8FF7E-4E02-4B43-BB44-91E068CF7543}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{021D122C-6247-4DE9-8712-884DAE51B063}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{16962488-ADC4-4DF7-BD84-0016C63255C5}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1AE69EA6-CA63-4105-A21E-9164F1729F75}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{28BC1F98-7F24-4535-B934-48DC58C00BA8}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{28E08968-59C8-4A77-BEBA-12C9394AE077}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\CCleanerHTML] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{513C6D01-E4A3-4F34-9BD9-3D83C35A3498}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5E9D83C3-225E-4183-B212-4E3A73FC3407}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{704D01BB-22CE-4865-8415-72E020AB270E}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{75C1FF73-0BBE-4032-88DF-0A268F3A2080}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7C522397-4542-4360-B0C9-290D2354258C}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7F7D751C-D8AA-45F9-B467-6E2B08196382}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8A8F5980-40EE-4E57-87B4-75B41E7E924A}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{95BB1D13-4973-400A-9A46-7D0E5DAE22B4}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B55572CE-73D5-42D3-A696-319B8E3E7A3A}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BEF64341-51C2-4A83-A733-EBAA8A3D17A9}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{C34503BD-0E8E-4B77-885D-BF7AC46ED36A}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{C9B19ED1-DD98-4C65-A91A-F6BB76EC15A3}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E8B22F26-0FA0-442D-B9E2-ED353B20A4A0}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\CCleaner Browser] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer\ShimInclusionList\CCleanerBrowser.exe] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\CCleanerBrowser.exe] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E\InstallProperties] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CCleanerBrowserUpdate.exe] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner Browser] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CCleanerBrowserUpdate.exe] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Piriform\Browser] [-HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\ccleaner] [-HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\ccleanerm] [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\Browser] [-HKEY_USERS\S-1-5-21-3783508307-257695158-1503075404-1001\SOFTWARE\CCleaner Browser] [-HKEY_USERS\S-1-5-21-3783508307-257695158-1503075404-1001\SOFTWARE\Piriform\Browser] EmptyTemp: End::