Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
- HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 0 <======= ATTENTION (Policy restriction on ProxySettings)
- ProxyEnable: [HKLM] => ProxyEnable ProxyEnable is set
- ProxyEnable: [HKLM-x32] => ProxyEnable is set
- ProxyServer: [HKLM] => http=127.0.0.1:8080;https=127.0.0.1:8080
- ProxyServer: [HKLM-x32] => http=127.0.0.1:8080;https=127.0.0.1:8080
- HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hppp&ts=1425220518&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47 [Pays US - 69.28.57.26]
- HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hppp&ts=1425220518&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47 [Pays US - 69.28.57.26]
- HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1425220463&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&q={searchTerms} [Pays US - 69.28.57.26]
- HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=ds&ts=1425220463&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&q={searchTerms} [Pays US - 69.28.57.26]
- HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hppp&ts=1425220518&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47 [Pays US - 69.28.57.26]
- HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hppp&ts=1425220518&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47 [Pays US - 69.28.57.26]
- HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1425220463&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&q={searchTerms} [Pays US - 69.28.57.26]
- HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=ds&ts=1425220463&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&q={searchTerms} [Pays US - 69.28.57.26]
- HKU\S-1-5-21-24839937-3394798681-3799243367-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dspp&ts=1425220518&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&q={searchTerms} [Pays US - 69.28.57.26]
- HKU\S-1-5-21-24839937-3394798681-3799243367-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hppp&ts=1425220518&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47 [Pays US - 69.28.57.26]
- HKU\S-1-5-21-24839937-3394798681-3799243367-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hppp&ts=1425220518&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47 [Pays US - 69.28.57.26]
- HKU\S-1-5-21-24839937-3394798681-3799243367-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dspp&ts=1425220518&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&q={searchTerms} [Pays US - 69.28.57.26]
- SearchScopes: HKU\S-1-5-21-24839937-3394798681-3799243367-1001 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&ts=1425220574&type=default&q={searchTerms} [Pays US - 69.28.57.26]
- SearchScopes: HKU\S-1-5-21-24839937-3394798681-3799243367-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&ts=1425220574&type=default&q={searchTerms} [Pays US - 69.28.57.26]
- SearchScopes: HKU\S-1-5-21-24839937-3394798681-3799243367-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&ts=1425220574&type=default&q={searchTerms} [Pays US - 69.28.57.26]
- SearchScopes: HKU\S-1-5-21-24839937-3394798681-3799243367-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&ts=1425220574&type=default&q={searchTerms} [Pays US - 69.28.57.26]
- SearchScopes: HKU\S-1-5-21-24839937-3394798681-3799243367-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.mystartsearch.com/web/?utm_source=b&utm_medium=smt&utm_campaign=install_ie&utm_content=ds&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47&ts=1425220574&type=default&q={searchTerms} [Pays US - 69.28.57.26]
- FF Homepage: hxxp://www.mystartsearch.com/?type=hppp&ts=1425220518&from=smt&uid=ST500LM000-1EJ162_W3721M47XXXXW3721M47 [Pays US - 69.28.57.26]
- FF Extension: No Name - C:\Users\anff\AppData\Roaming\Mozilla\Firefox\Profiles\30cghpcj.default\Extensions\fftoolbar2014@etech.com [2015-03-01]
- FF Extension: I - Cinema - C:\Users\anff\AppData\Roaming\Mozilla\Firefox\Profiles\30cghpcj.default\Extensions\MGKN37049485@ACPSC11936960.com [2015-03-25]
- FF Extension: No Name - C:\Users\anff\AppData\Roaming\Mozilla\Firefox\Profiles\30cghpcj.default\Extensions\searchengine@gmail.com [2015-03-01]
- FF Extension: SQLite Manager - C:\Users\anff\AppData\Roaming\Mozilla\Firefox\Profiles\30cghpcj.default\Extensions\SQLiteManager@mrinalkant.blogspot.com.xpi [2015-03-01]
- FF HKLM-x32\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\anff\AppData\Roaming\Mozilla\Firefox\Profiles\30cghpcj.default\extensions\searchengine@gmail.com
- FF HKLM-x32\...\Firefox\Extensions: [fftoolbar2014@etech.com] - C:\Users\anff\AppData\Roaming\Mozilla\Firefox\Profiles\30cghpcj.default\extensions\fftoolbar2014@etech.com
- R2 Updater.exe; C:\Program Files (x86)\KMSpico Updater\Updater.exe [40448 2014-12-03] (InstallShield) [File not signed] <==== ATTENTION
- 2015-04-23 15:13 - 2015-03-25 16:49 - 00000000 ____D () C:\ProgramData\77c7866d00001fb3
- C:\Program Files (x86)\KMSpico Updater
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement