start:: CreateRestorePoint: CloseProcesses: Hosts: RemoveProxy: CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb] CHR HKLM-x32\...\Chrome\Extension: [mfhcmdonhekjhfbjmeacdjbhlfgpjabp] S2 DCIService; C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe [X] R2 BdDci; C:\Windows\system32\DRIVERS\bddci.sys [367096 2021-11-24] 2022-01-29 20:20 - 2021-09-28 19:25 - 000000000 ____D C:\Users\user\AppData\Roaming\Lavasoft 2022-01-29 20:20 - 2021-09-28 19:25 - 000000000 ____D C:\Users\user\AppData\Local\Lavasoft 2022-01-29 20:20 - 2021-09-28 19:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft 2022-01-29 20:20 - 2021-09-28 19:25 - 000000000 ____D C:\Program Files (x86)\Lavasoft 2022-01-29 20:20 - 2021-09-28 19:24 - 000000000 ____D C:\ProgramData\Lavasoft EmptyTemp: cmd: sfc /scannow end::