Task: {06491EC2-F15C-42C9-B506-40B6275F714E} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {52E40074-6F96-4A3A-A175-B0ADCD2C8B37} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {D0754F6B-BCD2-4740-87E6-670F6A49F88C} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {E603CE5E-F575-4324-BC16-952957785E4B} - System32\Tasks\SmartWeb Upgrade Trigger Task => C:\Users\Alan\AppData\Local\SmartWeb\SmartWebHelper.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6470760 2012-05-15] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1177232 2012-05-22] (Realtek Semiconductor)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
BootExecute: autocheck autochk /p \??\H:autocheck autochk *
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.istartsurf.com/?type=hppp&ts=1...face&uid=ST3400832AS_4NF2SNVRXXXX4NF2SNVR
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
http://www.istartsurf.com/?type=hppp&ts=1...face&uid=ST3400832AS_4NF2SNVRXXXX4NF2SNVR
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.istartsurf.com/web/?type=dspp&...p;uid=ST3400832AS_4NF2SNVRXXXX4NF2SNVR&q= {searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
http://www.istartsurf.com/web/?type=dspp&...p;uid=ST3400832AS_4NF2SNVRXXXX4NF2SNVR&q= {searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.istartsurf.com/?type=hppp&ts=1...face&uid=ST3400832AS_4NF2SNVRXXXX4NF2SNVR
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.istartsurf.com/?type=hppp&ts=1...face&uid=ST3400832AS_4NF2SNVRXXXX4NF2SNVR
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://www.istartsurf.com/web/?type=dspp&...p;uid=ST3400832AS_4NF2SNVRXXXX4NF2SNVR&q= {searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://www.istartsurf.com/web/?type=dspp&...p;uid=ST3400832AS_4NF2SNVRXXXX4NF2SNVR&q= {searchTerms}
HKU\S-1-5-21-3405948023-3305301109-515357525-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3405948023-3305301109-515357525-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.istartsurf.com/?type=hppp&ts=1...face&uid=ST3400832AS_4NF2SNVRXXXX4NF2SNVR
URLSearchHook: HKU\S-1-5-21-3405948023-3305301109-515357525-1000 - (No Name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - No File
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
http://www.istartsurf.com/web/?type=dspp&...p;uid=ST3400832AS_4NF2SNVRXXXX4NF2SNVR&q= {searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
http://www.istartsurf.com/web/?type=dspp&...p;uid=ST3400832AS_4NF2SNVRXXXX4NF2SNVR&q= {searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
http://www.istartsurf.com/web/?type=dspp&...p;uid=ST3400832AS_4NF2SNVRXXXX4NF2SNVR&q= {searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
http://www.istartsurf.com/web/?type=dspp&...p;uid=ST3400832AS_4NF2SNVRXXXX4NF2SNVR&q= {searchTerms}
SearchScopes: HKLM-x32 -> {79569285-DEDE-4525-B181-E57030D380FE} URL =
http://startsear.ch/?aff=1&src=sp&cf=522660ea-4214-11e1-8306-002421f3480f&q= {searchTerms}
SearchScopes: HKLM-x32 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL =
http://search.conduit.com/ResultsExt.aspx?q= {searchTerms}&SearchSource=4&ctid=CT2475029
SearchScopes: HKU\S-1-5-21-3405948023-3305301109-515357525-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
http://www.istartsurf.com/web/?type=dspp&...p;uid=ST3400832AS_4NF2SNVRXXXX4NF2SNVR&q= {searchTerms}
SearchScopes: HKU\S-1-5-21-3405948023-3305301109-515357525-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
http://www.istartsurf.com/web/?utm_source=b&a...NVR&ts=1429177853&type=default&q= {searchTerms}
SearchScopes: HKU\S-1-5-21-3405948023-3305301109-515357525-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =
http://www.istartsurf.com/web/?utm_source=b&a...NVR&ts=1429177853&type=default&q= {searchTerms}
SearchScopes: HKU\S-1-5-21-3405948023-3305301109-515357525-1000 -> {163350EA-597C-4E21-B92B-7B146D1915C8} URL =
http://www.istartsurf.com/web/?utm_source=b&a...NVR&ts=1429177853&type=default&q= {searchTerms}
SearchScopes: HKU\S-1-5-21-3405948023-3305301109-515357525-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL =
http://www.istartsurf.com/web/?utm_source=b&a...NVR&ts=1429177853&type=default&q= {searchTerms}
SearchScopes: HKU\S-1-5-21-3405948023-3305301109-515357525-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
http://www.istartsurf.com/web/?type=dspp&...p;uid=ST3400832AS_4NF2SNVRXXXX4NF2SNVR&q= {searchTerms}
SearchScopes: HKU\S-1-5-21-3405948023-3305301109-515357525-1000 -> {4578C55C-5349-4094-8C3D-0C5B36F86FDF} URL =
http://www.istartsurf.com/web/?utm_source=b&a...NVR&ts=1429177853&type=default&q= {searchTerms}
SearchScopes: HKU\S-1-5-21-3405948023-3305301109-515357525-1000 -> {79569285-DEDE-4525-B181-E57030D380FE} URL =
http://www.istartsurf.com/web/?utm_source=b&a...NVR&ts=1429177853&type=default&q= {searchTerms}
SearchScopes: HKU\S-1-5-21-3405948023-3305301109-515357525-1000 -> {8143CF24-E462-4156-95A9-940B13AF2CF6} URL =
http://www.istartsurf.com/web/?utm_source=b&a...NVR&ts=1429177853&type=default&q= {searchTerms}
SearchScopes: HKU\S-1-5-21-3405948023-3305301109-515357525-1000 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL =
http://www.istartsurf.com/web/?utm_source=b&a...NVR&ts=1429177853&type=default&q= {searchTerms}
SearchScopes: HKU\S-1-5-21-3405948023-3305301109-515357525-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL =
http://www.istartsurf.com/web/?utm_source=b&a...NVR&ts=1429177853&type=default&q= {searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
http://www.istartsurf.com/?type=sc&ts=142...face&uid=ST3400832AS_4NF2SNVRXXXX4NF2SNVR
FF DefaultSearchEngine: istartsurf
FF DefaultSearchUrl: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2475029&SearchSource=3&q={searchTerms}
FF SearchEngineOrder.1: Web Search
FF SelectedSearchEngine: istartsurf
FF SearchPlugin: C:\Users\Alan\AppData\Roaming\Mozilla\Firefox\Profiles\5a5qv6hw.default\searchplugins\conduit.xml [2010-12-15]
FF SearchPlugin: C:\Users\Alan\AppData\Roaming\Mozilla\Firefox\Profiles\5a5qv6hw.default\searchplugins\istartsurf.xml [2015-04-21]
FF SearchPlugin: C:\Users\Alan\AppData\Roaming\Mozilla\Firefox\Profiles\5a5qv6hw.default\searchplugins\softonic.xml [2012-02-18]
FF SearchPlugin: C:\Users\Alan\AppData\Roaming\Mozilla\Firefox\Profiles\5a5qv6hw.default\searchplugins\startsear.xml [2012-01-18]
FF Extension: oFFeaRsoft - C:\Users\Alan\AppData\Roaming\Mozilla\Firefox\Profiles\5a5qv6hw.default\Extensions\aNhwY@ZKpqF.edu [2015-05-07]
FF HKLM-x32\...\Firefox\Extensions: [quick_searchff@gmail.com] - C:\Users\Alan\AppData\Roaming\Mozilla\Firefox\Profiles\5a5qv6hw.default\extensions\quick_searchff@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [sweetsearch@gmail.com] - C:\Users\Alan\AppData\Roaming\Mozilla\Firefox\Profiles\5a5qv6hw.default\extensions\sweetsearch@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\Alan\AppData\Roaming\Mozilla\Firefox\Profiles\5a5qv6hw.default\extensions\searchengine@gmail.com
S2 AcronisOSSReinstallSvc; "C:\Program Files (x86)\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe" [X]
S2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [X]
S2 poxuwyvy; C:\Users\Alan\AppData\Roaming\7E609880-1429176902-11DC-9CC5-C8600070A54D\jnsq75AD.tmp [X]
S2 solytugu; C:\Users\Alan\AppData\Roaming\7E609880-1429176902-11DC-9CC5-C8600070A54D\nso9609.tmp [X]
U3 awkm975x; C:\Windows\System32\Drivers\awkm975x.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero byte File/Folder)
S3 atillk64; \??\C:\Users\Alan\AppData\Local\Temp\RarSFX0\atillk64.sys [X]
S3 cpuz132; \??\C:\Users\Alan\AppData\Local\Temp\cpuz132\cpuz132_x64.sys [X]
S1 innfd_1_10_0_14; system32\drivers\innfd_1_10_0_14.sys [X]
R4 IOMap; \??\C:\Windows\system32\drivers\IOMap64.sys [X]
S4 NVHDA; system32\drivers\nvhda64v.sys [X]
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [X]
S3 NVNET; system32\DRIVERS\nvmf6264.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
2015-05-07 13:38 - 2015-05-25 14:29 - 00000000 ____D () C:\Program Files (x86)\offeerusAle
2015-05-07 13:38 - 2015-05-25 14:29 - 00000000 ____D () C:\Program Files (x86)\oFFeaRsoft
2015-05-07 13:38 - 2015-05-25 14:29 - 00000000 ____D () C:\Program Files (x86)\nitRodeAll
2015-05-07 11:27 - 2015-05-07 11:27 - 00000000 ____D () C:\ProgramData\salesale
C:\Users\Alan\AppData\Local\Temp*.html
2012-11-21 01:48 - 2012-11-21 01:48 - 0012393 _____ () C:\Users\Alan\AppData\Local\Update.12.Bron.Tok.bin
C:\Users\Alan\SetupImgBurn_2.5.0.0.exe
CMD: netsh winsock reset
EmptyTemp: