Advertisement
Guest User

Untitled

a guest
Jun 17th, 2018
268
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.11 KB | None | 0 0
  1. HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
  2. HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 0 <======= ATTENTION (Policy restriction on ProxySettings)
  3. ProxyEnable: [HKLM] => ProxyEnable ProxyEnable is set
  4. ProxyEnable: [HKLM-x32] => ProxyEnable is set
  5. ProxyServer: [HKLM] => http=127.0.0.1:8080;https=127.0.0.1:8080
  6. ProxyServer: [HKLM-x32] => http=127.0.0.1:8080;https=127.0.0.1:8080
  7. HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hppp&ts=1425220518&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47 [Pays US - 69.28.57.26]
  8. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hppp&ts=1425220518&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47 [Pays US - 69.28.57.26]
  9. HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1425220463&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&q={searchTerms} [Pays US - 69.28.57.26]
  10. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1425220463&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&q={searchTerms} [Pays US - 69.28.57.26]
  11. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hppp&ts=1425220518&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47 [Pays US - 69.28.57.26]
  12. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hppp&ts=1425220518&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47 [Pays US - 69.28.57.26]
  13. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1425220463&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&q={searchTerms} [Pays US - 69.28.57.26]
  14. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1425220463&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&q={searchTerms} [Pays US - 69.28.57.26]
  15. HKU\S-1-5-21-24839937-3394798681-3799243367-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dspp&ts=1425220518&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&q={searchTerms} [Pays US - 69.28.57.26]
  16. HKU\S-1-5-21-24839937-3394798681-3799243367-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hppp&ts=1425220518&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47 [Pays US - 69.28.57.26]
  17. HKU\S-1-5-21-24839937-3394798681-3799243367-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hppp&ts=1425220518&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47 [Pays US - 69.28.57.26]
  18. HKU\S-1-5-21-24839937-3394798681-3799243367-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dspp&ts=1425220518&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&q={searchTerms} [Pays US - 69.28.57.26]
  19. SearchScopes: HKU\S-1-5-21-24839937-3394798681-3799243367-1001 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&ts=1425220574&type=default&q={searchTerms} [Pays US - 69.28.57.26]
  20. SearchScopes: HKU\S-1-5-21-24839937-3394798681-3799243367-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&ts=1425220574&type=default&q={searchTerms} [Pays US - 69.28.57.26]
  21. SearchScopes: HKU\S-1-5-21-24839937-3394798681-3799243367-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&ts=1425220574&type=default&q={searchTerms} [Pays US - 69.28.57.26]
  22. SearchScopes: HKU\S-1-5-21-24839937-3394798681-3799243367-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&ts=1425220574&type=default&q={searchTerms} [Pays US - 69.28.57.26]
  23. SearchScopes: HKU\S-1-5-21-24839937-3394798681-3799243367-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&ts=1425220574&type=default&q={searchTerms} [Pays US - 69.28.57.26]
  24. FF Homepage: hxxp://www.mystartsearch.com/?type=hppp&ts=1425220518&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47 [Pays US - 69.28.57.26]
  25. FF Extension: No Name - C:\Users\anff\AppData\Roaming\Mozilla\Firefox\Profiles\30cghpcj.default\Extensions\fftoolbar2014@etech.com [2015-03-01]
  26. FF Extension: I - Cinema - C:\Users\anff\AppData\Roaming\Mozilla\Firefox\Profiles\30cghpcj.default\Extensions\MGKN37049485@ACPSC11936960.com [2015-03-25]
  27. FF Extension: No Name - C:\Users\anff\AppData\Roaming\Mozilla\Firefox\Profiles\30cghpcj.default\Extensions\searchengine@gmail.com [2015-03-01]
  28. FF Extension: SQLite Manager - C:\Users\anff\AppData\Roaming\Mozilla\Firefox\Profiles\30cghpcj.default\Extensions\SQLiteManager@mrinalkant.blogspot.com.xpi [2015-03-01]
  29. FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\anff\AppData\Roaming\Mozilla\Firefox\Profiles\30cghpcj.default\extensions\searchengine@gmail.com
  30. FF HKLM-x32\...\Firefox\Extensions: [fftoolbar2014@etech.com] - C:\Users\anff\AppData\Roaming\Mozilla\Firefox\Profiles\30cghpcj.default\extensions\fftoolbar2014@etech.com
  31. R2 Updater.exe; C:\Program Files (x86)\KMSpico Updater\Updater.exe [40448 2014-12-03] (InstallShield) [File not signed] <==== ATTENTION
  32. 2015-04-23 15:13 - 2015-03-25 16:49 - 00000000 ____D () C:\ProgramData\77c7866d00001fb3
  33. C:\Program Files (x86)\KMSpico Updater
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement