start::
CreateRestorePoint:
CloseProcesses:
RemoveProxy:
FF Extension: (Windscribe - Free Proxy and Ad Blocker) - C:\Users\zogbi\AppData\Roaming\Mozilla\Firefox\Profiles\tsvj44wp.default-release\Extensions\@windscribeff.xpi
FF Extension: (Browse Safe Powered by Yahoo) - C:\Users\zogbi\AppData\Roaming\Mozilla\Firefox\Profiles\tsvj44wp.default-release\Extensions\{527d060d-9eaa-4670-8dea-7c152f0b8dcd}.xpi
FF SearchPlugin: C:\Users\zogbi\AppData\Roaming\Mozilla\Firefox\Profiles\tsvj44wp.default-release\searchplugins\AdTrustMediaComodo Dragon.xml
FF Extension: (Avira Password Manager) - C:\Users\zogbi\AppData\Roaming\Mozilla\Firefox\Profiles\WDFArcu9.default\Extensions\passwordmanager@avira.com
FF SearchPlugin: C:\Users\zogbi\AppData\Roaming\Mozilla\Firefox\Profiles\WDFArcu9.default\searchplugins\AdTrustMediaComodo Dragon.xml
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
S3 BCM42RLY; system32\drivers\BCM42RLY.sys [X]
2022-05-21 15:43 - 2019-12-15 13:45 - 000000000 ____D C:\ProgramData\Avira
2022-05-21 15:43 - 2019-12-15 13:45 - 000000000 ____D C:\Program Files (x86)\Avira
EmptyTemp:
end::