start CloseProcesses: CreateRestorePoint: HKLM-x32\...\Run: [] => [X] HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 AppInit_DLLs: c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll => No File HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-82876322-1856125963-3865717280-1000\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxp://search.certified-toolbar.com?si=46369&st=home&tid=3874&ver=3.2&ts=1370856182031.000000&tguid=46369-3874-1370856182031-0C60D534F874B5AD437906F91501C0EB SearchScopes: HKLM -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.certified-toolbar.com?si=46369&st=bs&tid=3874&ver=3.2&ts=1370856182031.000000&tguid=46369-3874-1370856182031-0C60D534F874B5AD437906F91501C0EB&q={searchTerms} SearchScopes: HKLM-x32 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF SearchScopes: HKLM-x32 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.certified-toolbar.com?si=46369&st=bs&tid=3874&ver=3.2&ts=1370856182031&tguid=46369-3874-1370856182031-0C60D534F874B5AD437906F91501C0EB&q={searchTerms} SearchScopes: HKU\.DEFAULT -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = SearchScopes: HKU\S-1-5-21-82876322-1856125963-3865717280-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.max-start.com/?q={searchTerms}&affID=121845&babsrc=SP_ss_mib2&mntrId=C8AA441EA1D97A4D SearchScopes: HKU\S-1-5-21-82876322-1856125963-3865717280-1000 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF SearchScopes: HKU\S-1-5-21-82876322-1856125963-3865717280-1000 -> {68426A50-4BE1-4B2D-A3E1-C88960DB3517} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=OVO2&o=2167&src=kw&q={searchTerms}&locale=&apn_ptnrs=^A2I&apn_dtid=^YYYYYY^YY^IT&apn_uid=866051c1-453e-4c4c-8752-2332b440d1b4&apn_sauid=9B662550-811B-43D8-BB32-3F93878265DA SearchScopes: HKU\S-1-5-21-82876322-1856125963-3865717280-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://search.certified-toolbar.com?si=46369&st=bs&tid=3874&ver=3.2&ts=1370856182031.000000&tguid=46369-3874-1370856182031-0C60D534F874B5AD437906F91501C0EB&q={searchTerms} SearchScopes: HKU\S-1-5-21-82876322-1856125963-3865717280-1000 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.fbdownloader.com/search.php?channel=sfit202fbdgy11&q={searchTerms} SearchScopes: HKU\S-1-5-21-82876322-1856125963-3865717280-1000 -> {DECA3892-BA8F-44b8-A993-A466AD694AE4} URL = hxxp://search.certified-toolbar.com?si=46369&st=bs&tid=3874&ver=3.2&ts=1370856182031&tguid=46369-3874-1370856182031-0C60D534F874B5AD437906F91501C0EB&q={searchTerms} BHO-x32: No Name -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> No File BHO-x32: No Name -> {553318DA-D010-469E-84B1-496563CAE1C0} -> No File BHO-x32: No Name -> {58124A0B-DC32-4180-9BFF-E0E21AE34026} -> No File BHO-x32: No Name -> {C1AF5FA5-852C-4C90-812E-A7F75E011D87} -> No File BHO-x32: No Name -> {D4027C7F-154A-4066-A1AD-4243D8127440} -> No File Toolbar: HKLM-x32 - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File Toolbar: HKLM-x32 - No Name - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - No File Toolbar: HKU\S-1-5-21-82876322-1856125963-3865717280-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File Toolbar: HKU\S-1-5-21-82876322-1856125963-3865717280-1000 -> No Name - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - No File FF Extension: No Name - C:\Users\donald zeufack\AppData\Roaming\Mozilla\Firefox\Profiles\qwvxl8nj.default\Extensions\116 [2014-06-15] [not signed] FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\IPSFFPlgn [2013-03-21] [not signed] FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.0.0.128\coFFPlgn [2016-01-05] [not signed] FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\firefox.cfg [2013-03-14] <==== ATTENTION CHR HKU\S-1-5-21-82876322-1856125963-3865717280-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [gbmdkmlcnbapgegninelmjbfibaghdmk] - C:\Users\donald zeufack\AppData\Local\Google\Chrome\User Data\Default\ext_offermosquito\ext_offermosquito.crx [2013-10-04] CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\Exts\Chrome.crx [2013-04-03] U3 avbffyu2; C:\Windows\System32\Drivers\avbffyu2.sys [0 ] (Advanced Micro Devices) <==== ATTENTION (zero byte File/Folder) 2013-04-13 14:24 - 2013-04-13 14:26 - 0001272 _____ () C:\Users\donald zeufack\AppData\Roaming\Bubble Dock.boostrap.log 2013-04-13 14:24 - 2013-06-10 10:24 - 0015863 _____ () C:\Users\donald zeufack\AppData\Roaming\Bubble Dock.installation.log 2015-10-11 07:23 - 2015-10-11 07:23 - 0000046 _____ () C:\Users\donald zeufack\AppData\Roaming\Camdata.ini 2015-10-11 07:23 - 2015-10-11 07:23 - 0000408 _____ () C:\Users\donald zeufack\AppData\Roaming\CamLayout.ini 2015-10-11 07:23 - 2015-10-11 07:23 - 0000408 _____ () C:\Users\donald zeufack\AppData\Roaming\CamShapes.ini Ask Toolbar (HKLM-x32\...\{86D4B82A-ABED-442A-BE86-96357B70F4FE}) (Version: 1.17.3.0 - Ask.com) <==== ATTENTION Delta Chrome Toolbar (HKLM-x32\...\Delta Chrome Toolbar) (Version: - Visual Tools) <==== ATTENTION Driver Pro v3.0 (HKLM-x32\...\Driver Pro_is1) (Version: 3.0 - PC Utilities Pro) <==== ATTENTION Iminent Toolbar For Internet Explorer (HKLM-x32\...\{A76AA284-E52D-47E6-9E4F-B85DBF8E35C3}) (Version: 3.26.0 - Iminent) <==== ATTENTION ooVoo toolbar, powered by Ask.com Updater (HKU\S-1-5-21-82876322-1856125963-3865717280-1000\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.4.2.36670 - Ask.com) <==== ATTENTION Yontoo 2.05 (HKLM\...\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}) (Version: 2.05 - Yontoo LLC) <==== ATTENTION Task: {009A1CE1-28AB-4E9E-95BD-F5ED37E6EAA6} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2013-02-02] () <==== ATTENTION C:\Program Files (x86)\Ask.com\UpdateTask.exe Task: {30D27504-AE5F-4093-B8CF-4A2F23B14250} - System32\Tasks\EPUpdater => C:\Users\donald zeufack\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-06-06] () <==== ATTENTION Task: {574BF0D2-D772-439E-91EF-60BD3D625F15} - System32\Tasks\btclient => C:\Users\donald zeufack\AppData\Local\delta chrome toolbar\delta chrome toolbar\1.3.25.0\btclient.exe Task: {DBA562F3-09A7-430D-A6D8-D14BED8BF06F} - System32\Tasks\Updater12765.exe => C:\Users\donald <==== ATTENTION Task: {F80C9587-BC1B-4008-84C5-87F001CC8308} - System32\Tasks\DealPly => C:\Users\DONALD~1\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE <==== ATTENTION EmptyTemp: end