start
CreateRestorePoint:
CloseProcesses:
HKLM-x32\...\Run: [Boxore Client] => C:\Program Files (x86)\Boxore\Boxore Client\boxore.exe [1527808 2014-11-20] (Boxore OU)
HKU\S-1-5-21-1314295187-3900752110-4093590696-1000\...\Run: [Bubble Dock] => C:\Users\Serge\AppData\Roaming\Nosibay\Bubble Dock\LBubble Dock.exe [666384 2014-12-18] (Nosibay)
HKU\S-1-5-21-1314295187-3900752110-4093590696-1000\...\Run: [WindApp] => "C:\Users\Serge\AppData\Roaming\Store\WindApp\WindApp.exe" /winstartup
HKU\S-1-5-21-1314295187-3900752110-4093590696-1000\...\Run: [Selection Tools] => C:\Users\Serge\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe [1510160 2014-12-16] (Nosibay)
HKU\S-1-5-21-1314295187-3900752110-4093590696-1000\...\Run: [BoBrowser] => C:\Users\Serge\AppData\Local\BoBrowser\Application\bobrowser.exe [7353992 2014-11-19] (The BoBrowser Authors)
HKU\S-1-5-21-1314295187-3900752110-4093590696-1000\...\RunOnce: [DigitalSites] => wscript /E:vbscript /B "C:\Users\Serge\AppData\Roaming\DigitalSites\UpdateProc\bkup.dat"
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://isearch.omiga-plus.com/?type=hp& ... NEAC628588
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
http://isearch.omiga-plus.com/?type=hp& ... NEAC628588
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://isearch.omiga-plus.com/web/?type ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
http://isearch.omiga-plus.com/web/?type ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://isearch.omiga-plus.com/?type=hp& ... NEAC628588
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://isearch.omiga-plus.com/?type=hp& ... NEAC628588
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://isearch.omiga-plus.com/web/?type ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://isearch.omiga-plus.com/web/?type ... earchTerms}
HKU\S-1-5-21-1314295187-3900752110-4093590696-1000\Software\Microsoft\Internet Explorer\Main,Start Page =
http://isearch.omiga-plus.com/?type=hp& ... NEAC628588
HKU\S-1-5-21-1314295187-3900752110-4093590696-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://isearch.omiga-plus.com/?type=hp& ... NEAC628588
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe
http://isearch.omiga-plus.com/?type=sc& ... NEAC628588
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
http://isearch.omiga-plus.com/web/?type ... earchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
http://isearch.omiga-plus.com/web/?type ... earchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
http://isearch.omiga-plus.com/web/?type ... earchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
http://isearch.omiga-plus.com/web/?type ... earchTerms}
SearchScopes: HKU\S-1-5-21-1314295187-3900752110-4093590696-1000 -> 45307EC194334BD89B2A65552CADCA54 URL =
http://kl.startnow.com/s/?q={searchTerm ... rer:source}
SearchScopes: HKU\S-1-5-21-1314295187-3900752110-4093590696-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1314295187-3900752110-4093590696-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
http://isearch.omiga-plus.com/web/?type ... earchTerms}
BHO-x32: No Name -> {EFA7A511-B491-4312-BB35-4586B99E45ED} -> No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
FF Plugin-x32: @tools.Software.com/Software Update;version=3 -> C:\Program Files (x86)\Software\Update\1.3.25.0\npSoftwareUpdate3.dll (The Software Group)
FF Plugin-x32: @tools.Software.com/Software Update;version=9 -> C:\Program Files (x86)\Software\Update\1.3.25.0\npSoftwareUpdate3.dll (The Software Group)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\omiga-plus.xml
FF HKLM-x32\...\Firefox\Extensions: [
faststartff@gmail.com] - C:\Users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\7bsq1hnd.default\extensions\
faststartff@gmail.com
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe
http://isearch.omiga-plus.com/?type=sc& ... NEAC628588
CHR HomePage: Default -> hxxp://isearch.omiga-plus.com/?type=hp&ts=1419781574&from=ild&uid=SAMSUNGXSSDX830XSeries_S0XYNEAC628588
CHR HKLM\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2014-11-24]
CHR HKLM-x32\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2014-11-24]
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166296 2014-11-24] (APN LLC.)
R2 ClaraUpdater; C:\Program Files (x86)\Common Files\ClaraUpdater\ClaraUpdater.exe [328304 2014-12-28] (ClaraLabs)
R2 ServiceEverything; C:\Users\Serge\AppData\Everything\ServiceEverything.exe [233984 2015-01-09] () [File not signed]
S2 Software_update; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [119408 2014-12-28] (The Software Group)
S3 Software_update_m; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [119408 2014-12-28] (The Software Group)
2015-01-23 15:48 - 2015-01-23 17:29 - 00000000 ____D () C:\ProgramData\ParetoLogic
2015-01-23 15:48 - 2015-01-23 15:48 - 00003132 _____ () C:\Windows\System32\Tasks\ParetoLogic Registration3
2015-01-23 15:48 - 2015-01-23 15:48 - 00000468 _____ () C:\Windows\Tasks\ParetoLogic Registration3.job
2015-01-23 15:48 - 2015-01-23 15:48 - 00000000 ____D () C:\Users\Serge\AppData\Roaming\ParetoLogic
2015-01-23 15:48 - 2015-01-23 15:48 - 00000000 ____D () C:\Users\Serge\AppData\Roaming\DriverCure
2015-01-23 15:39 - 2015-01-23 15:39 - 00001129 _____ () C:\Users\Serge\Desktop\Continue File Opener Installation.lnk
2015-01-23 15:35 - 2015-01-23 17:35 - 00000292 _____ () C:\Windows\Tasks\Digital Sites.job
2015-01-23 15:35 - 2015-01-23 15:35 - 00003232 _____ () C:\Windows\System32\Tasks\Digital Sites
2015-01-23 15:35 - 2015-01-23 15:35 - 00001150 _____ () C:\Users\Public\Desktop\FileOpener.lnk
2015-01-23 15:35 - 2015-01-23 15:35 - 00000000 ____D () C:\Users\Serge\AppData\Roaming\DigitalSites
2015-01-23 15:35 - 2015-01-23 15:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileOpener
2015-01-23 15:35 - 2015-01-23 15:35 - 00000000 ____D () C:\Program Files (x86)\Tweaks
2014-12-28 16:55 - 2014-12-28 16:55 - 00002270 _____ () C:\Users\Serge\Desktop\Wikipedia.lnk
2014-12-28 16:55 - 2014-12-28 16:55 - 00002270 _____ () C:\Users\Serge\Desktop\Facebook.lnk
2014-12-28 16:55 - 2014-12-28 16:55 - 00002264 _____ () C:\Users\Serge\Desktop\Youtube.lnk
2014-12-28 16:55 - 2014-12-28 16:55 - 00002264 _____ () C:\Users\Serge\Desktop\Hotmail.lnk
2014-12-28 16:55 - 2014-12-28 16:55 - 00002260 _____ () C:\Users\Serge\Desktop\Search.lnk
2014-12-28 16:55 - 2014-12-28 16:55 - 00002258 _____ () C:\Users\Serge\Desktop\Amazon.lnk
2014-12-28 16:55 - 2014-12-28 16:55 - 00002220 _____ () C:\Users\Serge\Desktop\BoBrowser.lnk
2014-12-28 16:55 - 2014-12-28 16:55 - 00000000 ____D () C:\Users\Serge\AppData\Local\Boxore
2014-12-28 16:55 - 2014-12-28 16:55 - 00000000 ____D () C:\Program Files (x86)\Boxore
2014-12-28 16:54 - 2015-01-23 17:11 - 00000916 _____ () C:\Windows\Tasks\SoftwareUpdateTaskMachineUA.job
2014-12-28 16:54 - 2015-01-23 17:11 - 00000912 _____ () C:\Windows\Tasks\SoftwareUpdateTaskMachineCore.job
2014-12-28 16:54 - 2015-01-22 21:01 - 00000000 ____D () C:\Users\Serge\AppData\Local\BoBrowser
2014-12-28 16:54 - 2014-12-28 16:54 - 00003912 _____ () C:\Windows\System32\Tasks\SoftwareUpdateTaskMachineUA
2014-12-28 16:54 - 2014-12-28 16:54 - 00003780 _____ () C:\Windows\System32\Tasks\PostPoneInstall
2014-12-28 16:54 - 2014-12-28 16:54 - 00003660 _____ () C:\Windows\System32\Tasks\SoftwareUpdateTaskMachineCore
2014-12-28 16:54 - 2014-12-28 16:54 - 00003152 _____ () C:\Windows\System32\Tasks\Run_Bobby_Browser
2014-12-28 16:54 - 2014-12-28 16:54 - 00000000 ____D () C:\Users\Serge\AppData\Local\Software
2014-12-28 16:54 - 2014-12-28 16:54 - 00000000 ____D () C:\Program Files (x86)\Software
2014-12-28 16:46 - 2015-01-15 09:31 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-12-28 16:46 - 2014-12-28 16:47 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-12-28 16:46 - 2014-12-28 16:46 - 00003744 _____ () C:\Windows\System32\Tasks\Selection Tools Update
2014-12-28 16:46 - 2014-12-28 16:46 - 00003710 _____ () C:\Windows\System32\Tasks\WindApp Update
2014-12-28 16:46 - 2014-12-28 16:46 - 00000078 _____ () C:\Users\Serge\AppData\Roaming\WindApp.installation.log
2014-12-28 16:46 - 2014-12-28 16:46 - 00000078 _____ () C:\Users\Serge\AppData\Roaming\Selection Tools.installation.log
2014-12-28 16:46 - 2014-12-28 16:46 - 00000000 ____D () C:\Users\Serge\AppData\Roaming\WTools
2014-12-28 16:46 - 2014-12-28 16:46 - 00000000 ____D () C:\Users\Serge\AppData\Roaming\Store
2014-12-28 16:46 - 2014-12-28 16:46 - 00000000 ____D () C:\Users\Serge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bubble Dock
2014-12-28 16:45 - 2014-12-28 16:46 - 00006151 _____ () C:\Users\Serge\AppData\Roaming\Bubble Dock.installation.log
2014-12-28 16:45 - 2014-12-28 16:46 - 00001288 _____ () C:\Users\Serge\AppData\Roaming\Bubble Dock.boostrap.log
2014-12-28 16:45 - 2014-12-28 16:45 - 00000804 _____ () C:\Users\Serge\Desktop\FLVPlayer.lnk
2014-12-28 16:45 - 2014-12-28 16:45 - 00000097 _____ () C:\Users\Serge\AppData\Roaming\WindApp.boostrap.log
2014-12-28 16:45 - 2014-12-28 16:45 - 00000000 ____D () C:\Users\Serge\AppData\Roaming\Nosibay
2014-12-28 16:45 - 2014-12-28 16:45 - 00000000 ____D () C:\Users\Serge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLVPlayer
2014-12-28 16:45 - 2014-12-28 16:45 - 00000000 ____D () C:\Program Files (x86)\FLVPlayer
C:\Program Files (x86)\Common Files\ParetoLogic
C:\Program Files (x86)\AskPartnerNetwork
C:\Program Files (x86)\Common Files\ClaraUpdater
C:\ProgramData\AskPartnerNetwork
C:\Users\Serge\AppData\Local\BoBrowser
C:\Users\Serge\AppData\Everything
Task: {123B0389-3455-457D-A802-1CE5F4872231} - System32\Tasks\Selection Tools Update => C:\Users\Serge\AppData\Roaming\WTools\Selection Tools\Selection Tools Update.exe [2014-12-16] (Nosibay)
Task: {2A456121-C49E-4B1E-A7C3-D4E0C24298AC} - System32\Tasks\Run_Bobby_Browser => C:\Users\Serge\AppData\Local\BoBrowser\Application\bobrowser.exe [2014-11-19] (The BoBrowser Authors)
Task: {611E6344-D42B-49DC-83FC-04A076FA42C4} - System32\Tasks\{115D5A1A-D7A5-45DA-A02B-528BBE535A76} => c:\users\serge\appdata\local\bobrowser\application\bobrowser.exe [2014-11-19] (The BoBrowser Authors)
Task: {632BFBFF-704A-4E09-A82A-3A521464FAED} - System32\Tasks\SoftwareUpdateTaskMachineUA => C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [2014-12-28] (The Software Group)
Task: {65593605-552D-456D-A667-8842B6D82063} - System32\Tasks\WindApp Update => C:\Users\Serge\AppData\Roaming\Store\WindApp\WindApp Update.exe [2014-11-28] (Nosibay)
Task: {6A7AEB64-D280-468F-B89E-9A05E54B4C51} - System32\Tasks\SoftwareUpdateTaskMachineCore => C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [2014-12-28] (The Software Group)
Task: {7F5621C6-3828-4CA1-9AAB-2E565B058542} - System32\Tasks\{D893F66F-5A7F-4024-A6D1-68F4E18E4CF5} => pcalua.exe -a "C:\Users\Serge\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LK5KTVQW\Install_ColoniesGenerales_12[1].exe" -d C:\Users\Serge\Desktop
Task: {8081489B-1BA7-4F31-9700-9A45AC17552D} - System32\Tasks\PostPoneInstall => C:\Users\Serge\AppData\Local\Temp\ce98ac2e-20c0-4a93-86f6-bdb3e61caf55.exe
Task: {A1983418-D480-4EB6-9B6B-F6821DE4704E} - System32\Tasks\Digital Sites => C:\Users\Serge\AppData\Roaming\DigitalSites\UpdateProc\UpdateTask.exe [2015-01-23] ()
Task: {BC95DF0D-28F6-4EE6-BD20-D10BA4793353} - System32\Tasks\ParetoLogic Registration3 => Rundll32.exe "C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\UUS3.dll" RunUns
Task: C:\Windows\Tasks\Digital Sites.job => C:\Users\Serge\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\ParetoLogic Registration3.job => C:\Program Files (x86)\Common Files\ParetoLogic\UUS3\UUS3.dll
Task: C:\Windows\Tasks\SoftwareUpdateTaskMachineCore.job => C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe
Task: C:\Windows\Tasks\SoftwareUpdateTaskMachineUA.job => C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe
EmptyTemp:
end