start
CloseProcesses:
CreateRestorePoint:
CHR DefaultSearchURL: Default -> hxxps://secure.webstart-page.com/?partner=acer&src=omnibox&brw=ch&q={searchTerms}
CHR DefaultSearchKeyword: Default -> webstart-page.com
CHR DefaultSuggestURL: Default -> hxxps://secure-suggest.webstart-page.com/suggest?format=json&brw=ch&locale={language}&q={searchTerms}
CHR HKLM-x32\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
2017-03-13 21:13 - 2017-03-13 21:13 - 38421056 _____ (SweetLabs,Inc.) C:\Users\coco\AppData\Local\Temp\oct5396.tmp.exe
C:\Users\coco\AppData\Local\Temp\oct5396.tmp.exe
Task: {8EE4D61F-D9DF-4057-9E9C-59F1C51C9F35} - System32\Tasks\App Explorer => C:\Users\coco\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe [2017-03-01] (SweetLabs, Inc)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

EmptyTemp:
end