start CreateRestorePoint: CloseProcesses: RemoveProxy: SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = FF DefaultProfile: j7f5nt8j.default FF ProfilePath: C:\Users\fadi\AppData\Roaming\Mozilla\Firefox\Profiles\j7f5nt8j.default [2017-05-05] FF Extension: (Shield Recipe Client) - C:\Users\fadi\AppData\Roaming\Mozilla\Firefox\Profiles\j7f5nt8j.default\features\{9444ba37-bcd6-43e4-856b-09fc59f8f3b8}\shield-recipe-client@mozilla.org.xpi [2017-05-03] CHR HomePage: Default -> chedot.com CHR NewTab: Default -> Not-active:"chrome-extension://ophpgcjplgoimjgcllegcbljpdcbgkaa/blank.html" CMD: netsh winsock reset all CMD: ipconfig /flushdns hosts: EmptyTemp: Reboot: end