CreateRestorePoint:
() C:\Users\DNS\AppData\Local\HttpFilter\nssm.exe
HKLM-x32\...\Run: [InstallUpdate] => 0
FF Extension: (No Name) - C:\Users\DNS\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\Extensions\homepage@mail.ru [2016-07-29] [not signed]
CHR HomePage: Profile 1 -> mail.ru/cnt/20595300?rciguc__PARAM__
2016-08-27 14:25 - 2016-08-27 14:25 - 00000000 __SHD C:\ProgramData\360Quarant
2016-08-27 14:25 - 2016-08-27 14:25 - 00000000 __SHD C:\$360Section
2016-08-30 07:51 - 2016-02-28 15:09 - 00000000 ____D C:\Program Files (x86)\360
(The Privoxy team - www.privoxy.org) C:\Users\DNS\AppData\Local\HttpFilter\dofilter.exe
R2 dofilter; C:\Users\DNS\AppData\Local\HttpFilter\nssm.exe [294912 2014-08-31] () [File not signed]
2016-09-04 14:55 - 2016-05-18 12:41 - 00000000 ____D C:\Users\DNS\AppData\Local\HttpFilter
C:\Users\DNS\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk
FirewallRules: [{02D59304-0951-4EB1-B9C7-58B0A41685E9}] => (Allow) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
FirewallRules: [{4BD020FD-E82C-4D14-9832-51AF552BCC6E}] => (Allow) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
AlternateDataStreams: C:\ProgramData\TEMP:41ADDB8A [282]
AlternateDataStreams: C:\ProgramData\TEMP:A064CECC [138]
Hosts:
EmptyTemp:
Reboot: