HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.chipxp.ru/
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.chipxp.ru/
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.chipxp.ru/
HKU\S-1-5-21-57989841-1532298954-1801674531-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.chipxp.ru/
SearchScopes: HKU\.DEFAULT -> {95D52D85-4DFA-48C2-9C85-2CB4BB0ECB2C} URL = hxxp://price.ru/enter?from=oss&pnam={searchTerms}
SearchScopes: HKU\S-1-5-20 -> {95D52D85-4DFA-48C2-9C85-2CB4BB0ECB2C} URL = hxxp://price.ru/enter?from=oss&pnam={searchTerms}
SearchScopes: HKU\S-1-5-21-57989841-1532298954-1801674531-1004 -> {95D52D85-4DFA-48C2-9C85-2CB4BB0ECB2C} URL = hxxp://price.ru/enter?from=oss&pnam={searchTerms}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2016-03-21] [not signed]
2014-05-01 18:15 - 2014-05-01 18:15 - 00463360 _____ () C:\Documents and Settings\User\Local Settings\Application Data\MEGAsync\ShellExtX32.dll
EmptyTemp:
Reboot: