:OTL
SRV - (Re-markit) -- C:\Program Files (x86)\Re-markit-soft\Re-markit157.exe ()
[2014/03/12 15:20:41 | 000,000,398 | ---- | C] () -- C:\Windows\tasks\Re-markit Update.job
[2014/03/15 20:28:45 | 000,000,398 | ---- | M] () -- C:\Windows\tasks\Re-markit Update.job
IE:[B]64bit:[/B] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1393669659&from=cor&uid=ST1000DM003-1CH162_Z1D8SMBBXXXXZ1D8SMBB&q={searchTerms}
IE:[B]64bit:[/B] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1393669659&from=cor&uid=ST1000DM003-1CH162_Z1D8SMBBXXXXZ1D8SMBB&q={searchTerms}
IE:[B]64bit:[/B] - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=aw0202ie&cd=2XzuyEtN2Y1L1QzuyEyEzz0AyD0BtBtC0AtA0AtByDyBtCtAtN0D0Tzu0CyBzytDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=1605678879&ir=
IE:[B]64bit:[/B] - HKLM\..\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}: "URL" = http://www.sweet-page.com/web/?type=ds&ts=1393669659&from=cor&uid=ST1000DM003-1CH162_Z1D8SMBBXXXXZ1D8SMBB&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1393669659&from=cor&uid=ST1000DM003-1CH162_Z1D8SMBBXXXXZ1D8SMBB&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1393669659&from=cor&uid=ST1000DM003-1CH162_Z1D8SMBBXXXXZ1D8SMBB&q={searchTerms}
IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.sweet-page.com/web/?type=ds&ts=1393669659&from=cor&uid=ST1000DM003-1CH162_Z1D8SMBBXXXXZ1D8SMBB&q={searchTerms}
IE - HKU\S-1-5-21-947074518-1756201133-3695246388-1000\..\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}: "URL" = http://www.sweet-page.com/web/?type=ds&ts=1393669659&from=cor&uid=ST1000DM003-1CH162_Z1D8SMBBXXXXZ1D8SMBB&q={searchTerms}
O33 - MountPoints2\{82a40a1d-a143-11e3-bdd1-448a5b21a3a2}\Shell - "" = AutoRun
O33 - MountPoints2\{82a40a1d-a143-11e3-bdd1-448a5b21a3a2}\Shell\AutoRun\command - "" = H:\setup.exe -- [2013/09/12 10:54:30 | 000,746,378 | R--- | M] ( )
O33 - MountPoints2\{f0059666-a0b7-11e3-a4f1-94f69459a56f}\Shell - "" = AutoRun
O33 - MountPoints2\{f0059666-a0b7-11e3-a4f1-94f69459a56f}\Shell\AutoRun\command - "" = H:\setup.exe -- [2013/09/12 10:54:30 | 000,746,378 | R--- | M] ( )
[2014/03/12 15:20:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Re-markit-soft
[2014/03/01 11:29:13 | 000,000,000 | ---D | C] -- C:\Users\AleAndre\AppData\Local\SaveSenseLive
[2014/03/01 11:29:13 | 000,000,000 | ---D | C] -- C:\ProgramData\SaveSenseLive
[2014/03/01 11:29:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SaveSenseLive
[2014/03/01 11:29:11 | 000,000,000 | ---D | C] -- C:\Users\AleAndre\AppData\Roaming\SaveSense
[2014/03/01 11:27:46 | 000,000,000 | ---D | C] -- C:\Users\AleAndre\AppData\Roaming\sweet-page
[2014/02/28 17:18:25 | 000,000,000 | ---D | C] -- C:\Users\AleAndre\AppData\Roaming\AppsWatcher
[2014/02/27 16:02:30 | 000,000,000 | ---D | C] -- C:\Users\AleAndre\AppData\Local\Mail.Ru
[2014/02/28 17:18:25 | 000,000,000 | ---D | M] -- C:\Users\AleAndre\AppData\Roaming\AppsWatcher
[2014/03/01 11:29:11 | 000,000,000 | ---D | M] -- C:\Users\AleAndre\AppData\Roaming\SaveSense
[2014/03/01 13:49:55 | 000,000,000 | ---D | M] -- C:\Users\AleAndre\AppData\Roaming\sweet-page [MENTION=102884]alt[/MENTION]ernate Data Stream - 125 bytes -> C:\ProgramData\TEMP:AD022376
:Files
ipconfig /flushdns /c
:commands
[purity]
[Reboot]