:OTL
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.awesomehp.com/?type=hp&ts=1390971768&from=tugs&uid=ST3320418AS_9VMPW8B8XXXX9VMPW8B8IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://www.awesomehp.com/web/?type=ds&ts=1390971768&from=tugs&uid=ST3320418AS_9VMPW8B8XXXX9VMPW8B8&q={searchTerms}
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://www.awesomehp.com/web/?type=ds&ts=1390971768&from=tugs&uid=ST3320418AS_9VMPW8B8XXXX9VMPW8B8&q={searchTerms}
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.awesomehp.com/?type=hp&ts=1390971768&from=tugs&uid=ST3320418AS_9VMPW8B8XXXX9VMPW8B8IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.awesomehp.com/?type=hp&ts=1390971768&from=tugs&uid=ST3320418AS_9VMPW8B8XXXX9VMPW8B8IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://www.awesomehp.com/web/?type=ds&ts=1390971768&from=tugs&uid=ST3320418AS_9VMPW8B8XXXX9VMPW8B8&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://www.awesomehp.com/web/?type=ds&ts=1390971768&from=tugs&uid=ST3320418AS_9VMPW8B8XXXX9VMPW8B8&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.awesomehp.com/?type=hp&ts=1390971768&from=tugs&uid=ST3320418AS_9VMPW8B8XXXX9VMPW8B8IE - HKU\S-1-5-21-1780490092-3027042839-2868686904-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.awesomehp.com/?type=hp&ts=1390971768&from=tugs&uid=ST3320418AS_9VMPW8B8XXXX9VMPW8B8CHR - default_search_provider: StartWeb (Enabled)
CHR - default_search_provider: search_url =
http://start.iminent.com/?appId=B19490F7-3233-4901-BC4C-8B753F323B2E&ref=toolbox&q={searchTerms}
CHR - default_search_provider: suggest_url = ,
CHR - homepage:
CHR - Extension: Google Wallet = C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
O4 - HKLM..\Run: [fst_it_42] File not found
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
:Files
ipconfig /flushdns /c
:reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command]
""=""%1" %*"
:commands
[purity]
[emptytemp]
[Emptyjava]
[RESETHOSTS]
[EMPTYFLASH]
[start explorer]
[Reboot]
