:OTL IE - HKU\zeboulet_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.trovi.com/?gd=&ctid=CT3331172&octid=EB_ORIGINAL_CTID&ISID=IF494B5C2-3C12-491F-B36C-91E295FFD21C&SearchSource=55&CUI=&UM=8&UP=SP0EAB4FAB-66F9-4A1E-B8F0-70F9E0CAB566&D=100217&SSPV= O2 - BHO: (Systweak Toolbar for Internet Explorer) - {F0D6F486-7230-3139-1997-CB2FBCF4E080} - C:\Program Files\Systweak Toolbar\systweak-32.dll (Systweak Software) O3 - HKLM\..\Toolbar: (Systweak Toolbar for Internet Explorer) - {F0D6F486-7230-3139-1997-CB2FBCF4E080} - C:\Program Files\Systweak Toolbar\systweak-32.dll (Systweak Software) O13 - gopher Prefix: missing O20 - AppInit_DLLs: (C:\PROGRA~1\SearchProtect\SearchProtect\bin\VC32Loader.dll) - C:\PROGRA~1\SearchProtect\SearchProtect\bin\VC32Loader.dll (Client Connect LTD) :Services ReimageĀ® Bitdefender Client Connect LTD :Files C:\Program Files\Reimage C:\Program Files\ParetoLogic C:\Program Files (x86)\Uniblue C:\Program Files\SearchProtect C:\Users\zeboulet\AppData\Roaming\hrt54is56ijfgte.exe C:\Users\zeboulet\AppData\Roaming\ide56 C:\Users\zeboulet\AppData\Roaming\WTools C:\Windows\System32\drivers\SPPD.sys C:\Windows\Reimage.ini C:\Users\zeboulet\AppData\Roaming\Selection Tools.installation.log C:\Users\zeboulet\AppData\Roaming\Babylon C:\Users\zeboulet\AppData\Roaming\ParetoLogic C:\Users\zeboulet\AppData\Roaming\Uniblue C:\Users\zeboulet\AppData\Roaming\WTools C:\Users\zeboulet\AppData\Roaming\Zyerku C:\Windows\Tasks\ParetoLogic Registration3.job C:\Windows\Tasks\ParetoLogic Update Version3.job C:\Windows\Tasks\ParetoLogic Update Version3_triggeronce.job C:\Windows\Tasks\RegClean Pro_DEFAULT.job C:\Windows\Tasks\RegClean Pro_UPDATES.job C:\Windows\Tasks\RegCure Pro_sch_8301643A-A783-11E7-95B1-080027CF55C5.job C:\Windows\Tasks\SpeedUpMyPC Maintenance.job C:\Windows\Tasks\SpeedUpMyPC Startup.job :Reg [HKEY_USERS\zeboulet_ON_C\Software\Microsoft\Windows\CurrentVersion\Run] "6zvcaxR5ls4KB9Y"=- "d6i5t56i6ti"=- "Selection Tools"=- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "6zvcaxR5ls4KB9Y"=- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "Shell"="explorer.exe" [HKEY_USERS\zeboulet_ON_C\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] "Shell"=- [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig] "StartUpReg"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{C547F361-5750-4CD1-9FB6-BC93827CB6C1}" =- "{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1" =- "980124D4-3D52-4c2d-AD41-9E90BDF4C031_Systweak_Ri~01F2B2E8_is1" =- "980124D4-3D52-4c2d-AD41-9E90BDF4C032_Systweak_Ri~455397F0_is1" =- "Bandoo" =- "RegClean Pro_is1" =- "Reimage Repair" =- "SearchProtect" =- "Systweak Toolbar" =- [HKEY_USERS\zeboulet_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Selection Tools" =- "Systweak Toolbar" =- :Commands [createrestorepoint] [emptytemp]