Please help - my laptop makes a turtle look fast!
My computer has become so agonizingly slow that it's almost ground to a halt - a disaster because I'm doing online courses with a heavy work load. It's just as bad in Chrome or Firefox. I don't use IE. I thought I'd be clever and install some add-ons to Firefox and there is one I dislike - it opens up Youtube videos in a new tab - but it doesn't show up in the list of Firefox add-ons - maybe it's to save the flash player? That seems to be when the problem started - the add-ons which I really didn't need. I'd appreciate any help you can give me.
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-10-2014 01
Ran by Oksana (administrator) on OKSANA-HP on 31-10-2014 14:00:18
Running from C:\Users\Oksana\Downloads
Loaded Profile: Oksana (Available profiles: Oksana)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
() C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
(Roxio) C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
(Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
() C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar1.exe
(Flux Software LLC) C:\Users\Oksana\AppData\Local\FluxSoftware\Flux\flux.exe
(Google Inc.) C:\Users\Oksana\AppData\Local\Google\Update\GoogleUpdate.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar3.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe
(Dropbox, Inc.) C:\Users\Oksana\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2885904 2013-06-29] (Synaptics Incorporated)
HKLM\...\Run: [SetDefault] => C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe [42808 2011-06-27] (Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-06-30] (IDT, Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-06-29] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HPQuickWebProxy] => C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe [169528 2011-07-16] (Hewlett-Packard Company)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2014-09-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP CoolSense] => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [1343904 2012-11-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [ArcSoft Connection Service] => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM-x32\...\Run: [HPConnectionManager] => C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [103992 2011-09-13] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPOSD] => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
HKLM-x32\...\Run: [TkBellExe] => c:\program files (x86)\real\realplayer\Update\realsched.exe [296520 2014-09-23] (RealNetworks, Inc.)
HKU\S-1-5-21-1126822513-2444528795-2515040321-1000\...\Run: [F.lux] => C:\Users\Oksana\AppData\Local\FluxSoftware\Flux\flux.exe [1016712 2013-10-15] (Flux Software LLC)
HKU\S-1-5-21-1126822513-2444528795-2515040321-1000\...\Run: [Google Update] => C:\Users\Oksana\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-11-14] (Google Inc.)
HKU\S-1-5-21-1126822513-2444528795-2515040321-1000\...\Run: [Google+ Auto Backup] => C:\Users\Oksana\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3701064 2014-03-26] (Google Inc.)
HKU\S-1-5-21-1126822513-2444528795-2515040321-1000\...\Run: [GoogleChromeAutoLaunch_306B2E28E665723C31BCA1F77967ABB9] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [841032 2014-04-01] (Google Inc.)
HKU\S-1-5-21-1126822513-2444528795-2515040321-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-23] (Piriform Ltd)
HKU\S-1-5-21-1126822513-2444528795-2515040321-1000\...\Ru
HKU\S-1-5-21-1126822513-2444528795-2515040321-1000\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_15_0_0_152_Plugin.exe [854192 2014-09-11] (Adobe Systems Incorporated)
AppInit_DLLs: C:\PROGRA~3\Wincert\WIN64C~1.DLL => C:\PROGRA~3\Wincert\WIN64C~1.DLL File Not Found
AppInit_DLLs: c:\progra~2\movies~1\safety~1\x64\safety~2.dll => c:\progra~2\movies~1\safety~1\x64\safety~2.dll File Not Found
AppInit_DLLs: C:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL => C:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL File Not Found
AppInit_DLLs-x32: c:\progra~3\wincert\win32c~1.dll => "c:\progra~3\wincert\win32c~1.dll" File Not Found
AppInit_DLLs-x32: c:\progra~2\optimi~1\optpro~1.dll => "c:\progra~2\optimi~1\optpro~1.dll" File Not Found
IFEO\browsemngr.exe: [Debugger] tasklist.exe
IFEO\browsermngr.exe: [Debugger] tasklist.exe
IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe
IFEO\delta babylon.exe: [Debugger] tasklist.exe
IFEO\delta tb.exe: [Debugger] tasklist.exe
IFEO\delta2.exe: [Debugger] tasklist.exe
IFEO\deltainstaller.exe: [Debugger] tasklist.exe
IFEO\deltasetup.exe: [Debugger] tasklist.exe
IFEO\deltatb.exe: [Debugger] tasklist.exe
IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe
IFEO\iminentsetup.exe: [Debugger] tasklist.exe
IFEO\rjatydimofu.exe: [Debugger] tasklist.exe
IFEO\sweetimsetup.exe: [Debugger] tasklist.exe
IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe
Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealPlayer Cloud Service UI.lnk
ShortcutTarget: RealPlayer Cloud Service UI.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe (RealNetworks, Inc.)
Startup: C:\Users\Oksana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Oksana\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
BootExecute: autocheck autochk * bootdelete
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://ca.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM - {CA6FDF8D-7C59-43F3-9AA9-D72AFE97D8A1} URL = http://www.amazon.ca/s/ref=azs_osd_ieaca?ie=UTF-8&tag=hp-ca2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {ADD2FA5C-E59D-4C3A-9B51-80234490447C} URL =
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = http://ca.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM-x32 - {CA6FDF8D-7C59-43F3-9AA9-D72AFE97D8A1} URL = http://www.amazon.ca/s/ref=azs_osd_ieaca?ie=UTF-8&tag=hp-ca2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKCU - DefaultScope {ADD2FA5C-E59D-4C3A-9B51-80234490447C} URL =
SearchScopes: HKCU - {1C7F04F5-B4BD-4768-9E86-0107422B0CED} URL = http://search.yahoo.com/search?p={searchTerms}&fr=tightropetb&type=10563
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
SearchScopes: HKCU - {9FD321FC-43EC-4BAD-90F1-59F077F1F083} URL = http://search.us.com/serp?guid={E7A0C8F7-4BEC-49F0-82CC-818C6B937DB9}&action=default_search&serpv=5&k={searchTerms}
SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL =
SearchScopes: HKCU - {E9DB9E7B-A275-41D1-8158-D0423FBEBDEB} URL = http://www.google.com/cse?cx=partner-pub-3540673482024757:xbhdw8hkfz5&cof=&q={searchTerms}
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll (RealDownloader)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: LastPass Vault -> {95D9ECF5-2A4D-4550-BE49-70D42F71296E} -> C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - LastPass Toolbar - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPToolbar.dll (LastPass)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Hosts: 54.225.95.126 dmcecclamecbinmplcolhaljlclhbgah
Tcpip\Parameters: [DhcpNameServer] 64.59.176.13 64.59.177.226
FireFox:
========
FF ProfilePath: C:\Users\Oksana\AppData\Roaming\Mozilla\Firefox\Profiles\0zlti0ap.default
FF DefaultSearchEngine: Conduit Search
FF SelectedSearchEngine: Conduit Search
FF Homepage: hxxp://start.search.us.com/v/2/?guid={E7A0C8F7-4BEC-49F0-82CC-818C6B937DB9}&serpv=5
FF NetworkProxy: "no_proxies_on", ""
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass.dll (LastPass)
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @real.com/nppl3260;version=17.0.13.2 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=17.0.13 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=17.0.13.2 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer Cloud)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin -> C:\Users\Oksana\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin -> C:\Users\Oksana\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Oksana\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Oksana\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF user.js: detected! => C:\Users\Oksana\AppData\Roaming\Mozilla\Firefox\Profiles\0zlti0ap.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Users\Oksana\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Oksana\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Users\Oksana\AppData\Roaming\Mozilla\Firefox\Profiles\0zlti0ap.default\searchplugins\search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\adawaretb.xml
FF Extension: topdeAl - C:\Users\Oksana\AppData\Roaming\Mozilla\Firefox\Profiles\0zlti0ap.default\Extensions\63j4x@oamiaay.co.uk [2014-04-17]
FF Extension: LuackyShuoopPeru - C:\Users\Oksana\AppData\Roaming\Mozilla\Firefox\Profiles\0zlti0ap.default\Extensions\ap1uo@aeifcsa.co.uk [2014-04-26]
FF Extension: Fastest Search - C:\Users\Oksana\AppData\Roaming\Mozilla\Firefox\Profiles\0zlti0ap.default\Extensions\fastestsearch@mingyi.org [2014-10-17]
FF Extension: smartmediaconverter Support - C:\Users\Oksana\AppData\Roaming\Mozilla\Firefox\Profiles\0zlti0ap.default\Extensions\jid1-RYwhP9dQdGfXkQ@jetpack [2014-04-26]
FF Extension: LastPass - C:\Users\Oksana\AppData\Roaming\Mozilla\Firefox\Profiles\0zlti0ap.default\Extensions\support@lastpass.com [2014-08-23]
FF Extension: AddThis - C:\Users\Oksana\AppData\Roaming\Mozilla\Firefox\Profiles\0zlti0ap.default\Extensions\{3e0e7d2a-070f-4a47-b019-91fe5385ba79} [2014-10-31]
FF Extension: QuickShare Widget - C:\Users\Oksana\AppData\Roaming\Mozilla\Firefox\Profiles\0zlti0ap.default\Extensions\{684fc621-b936-47ff-bcd8-2637d694a989} [2013-06-19]
FF Extension: Ad-Aware Security Add-on - C:\Users\Oksana\AppData\Roaming\Mozilla\Firefox\Profiles\0zlti0ap.default\Extensions\{87934c42-161d-45bc-8cef-ef18abe2a30c} [2013-07-14]
FF Extension: HP Detect - C:\Users\Oksana\AppData\Roaming\Mozilla\Firefox\Profiles\0zlti0ap.default\Extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2} [2013-05-11]
FF Extension: MixiDJ V37 - C:\Users\Oksana\AppData\Roaming\Mozilla\Firefox\Profiles\0zlti0ap.default\Extensions\{eef3855c-fc2d-41e6-8d91-d368f51b3055} [2013-12-12]
FF Extension: Reload Plus - C:\Users\Oksana\AppData\Roaming\Mozilla\Firefox\Profiles\0zlti0ap.default\Extensions\reloadplus@blackwind.xpi [2014-10-17]
FF Extension: Video Resumer - C:\Users\Oksana\AppData\Roaming\Mozilla\Firefox\Profiles\0zlti0ap.default\Extensions\videoresumer@jetpack.xpi [2014-10-17]
FF Extension: Video WithOut Flash - C:\Users\Oksana\AppData\Roaming\Mozilla\Firefox\Profiles\0zlti0ap.default\Extensions\vwof@drev.com.xpi [2014-10-17]
FF Extension: Adblock Plus - C:\Users\Oksana\AppData\Roaming\Mozilla\Firefox\Profiles\0zlti0ap.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-08-26]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [{9D2AA73B-6049-4799-B8AC-925723370070}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-09-23]
FF Extension: No Name - {9D2AA73B-6049-4799-B8AC-925723370070} [Not Found]
Chrome:
=======
CHR Profile: C:\Users\Oksana\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Wallet) - C:\Users\Oksana\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-11]
CHR HKCU\...\Chrome\Extension: [mfchmfgdaabgdjbcaophikcobddojjoe] - C:\Users\Oksana\AppData\Local\CRE\mfchmfgdaabgdjbcaophikcobddojjoe.crx [2013-09-23]
CHR HKLM-x32\...\Chrome\Extension: [aaaaimdcedbpbcjjbbnfcbbjcngmomic] - C:\Users\Oksana\AppData\Local\somotomoviestoolbar1\GC\toolbar.crx [2013-09-23]
CHR HKLM-x32\...\Chrome\Extension: [dbpebffoameokfhnaaedmefjncfboino] - C:\Program Files (x86)\SecretSauce\dbpebffoameokfhnaaedmefjncfboino.crx [2013-12-18]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-12-18]
CHR HKLM-x32\...\Chrome\Extension: [mfchmfgdaabgdjbcaophikcobddojjoe] - C:\Users\Oksana\AppData\Local\CRE\mfchmfgdaabgdjbcaophikcobddojjoe.crx [2013-09-23]
CHR HKLM-x32\...\Chrome\Extension: [oejkcgajlodefenbbjdnaiahmbnnoole] - C:\Program Files (x86)\adawaretb\chrome-newtab-search.crx [2013-09-23]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-22] (SUPERAntiSpyware.com)
R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3364368 2014-09-05] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [293448 2014-09-05] (AVG Technologies CZ, s.r.o.)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39568 2014-07-30] ()
R2 RealPlayer Cloud Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1141848 2014-09-23] (RealNetworks, Inc.)
R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [23552 2014-07-30] () [File not signed]
S2 avast! Antivirus; "C:\Program Files\AVAST Software\Avast\AvastSvc.exe" [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-11] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-11] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-11] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-04-11] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-04-11] (AVAST Software)
S3 aswStm; C:\Windows\system32\drivers\aswStm.sys [84816 2014-04-11] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208928 2014-04-11] ()
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [247576 2014-07-24] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [190744 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [243480 2014-08-20] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [313624 2014-07-18] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123672 2014-08-06] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [270616 2014-07-02] (AVG Technologies CZ, s.r.o.)
S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [133672 2011-07-15] (Broadcom Corporation.)
S3 BTWDPAN; C:\Windows\System32\DRIVERS\btwdpan.sys [89640 2011-07-15] (Broadcom Corporation.)
S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [39504 2013-04-11] (ThreatTrack Security)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-07-14] (GFI Software)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [32512 2014-08-06] ()
R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-08-12] (Anchorfree Inc.)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-31 13:52 - 2014-10-31 14:02 - 00027165 _____ () C:\Users\Oksana\Downloads\FRST.txt
2014-10-31 13:52 - 2014-10-31 14:00 - 00000000 ____D () C:\FRST
2014-10-31 13:50 - 2014-10-31 13:51 - 02113536 _____ (Farbar) C:\Users\Oksana\Downloads\FRST64.exe
2014-10-31 13:34 - 2014-10-31 13:34 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-OKSANA-HP-Microsoft-Windows-7-Home-Premium-(64-bit).dat
2014-10-31 13:27 - 2014-10-31 13:27 - 00000000 ____D () C:\RegBackup
2014-10-31 13:22 - 2014-10-31 13:26 - 00001636 _____ () C:\Users\Oksana\Desktop\Tweaking.com - Registry Backup.lnk
2014-10-31 13:22 - 2014-10-31 13:22 - 00000000 ____D () C:\Users\Oksana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2014-10-31 13:21 - 2014-10-31 13:22 - 00000000 ____D () C:\Users\Oksana\Desktop\Uninstall
2014-10-31 13:21 - 2014-10-31 13:22 - 00000000 ____D () C:\Users\Oksana\Desktop\files
2014-10-31 13:21 - 2014-10-31 13:22 - 00000000 ____D () C:\Users\Oksana\Desktop\color_presets
2014-10-31 13:21 - 2014-10-31 13:21 - 01346048 _____ (Indigo Rose Corporation) C:\Users\Oksana\Desktop\uninstall.exe
2014-10-31 13:21 - 2014-10-31 13:21 - 00325960 _____ () C:\Users\Oksana\Desktop\lua5.1.dll
2014-10-31 13:13 - 2014-10-31 13:14 - 04215584 _____ () C:\Users\Oksana\Downloads\tweaking.com_registry_backup_setup(1).exe
2014-10-31 13:13 - 2014-10-31 13:13 - 04215584 _____ () C:\Users\Oksana\Downloads\tweaking.com_registry_backup_setup.exe
2014-10-31 11:25 - 2014-10-31 11:25 - 00003192 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForOksana
2014-10-31 11:25 - 2014-10-31 11:25 - 00000336 _____ () C:\Windows\Tasks\HPCeeScheduleForOksana.job
2014-10-31 11:10 - 2014-10-31 11:10 - 00001418 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-10-31 11:07 - 2014-10-31 11:07 - 00000000 ____D () C:\Program Files\Windows Live
2014-10-31 10:20 - 2014-10-31 10:21 - 36445280 _____ () C:\Users\Oksana\Downloads\Firefox Setup 33.0.2.exe
2014-10-27 18:10 - 2014-10-27 18:10 - 00000000 ____D () C:\Users\Oksana\Downloads\The.Voice.US.S07E10.HDTV.x264-FiNCH
2014-10-27 02:29 - 2011-08-27 10:24 - 00000000 ____D () C:\Users\Oksana\Desktop\Student Data
2014-10-27 02:09 - 2014-10-27 07:04 - 00000932 ____N () C:\Users\Oksana\Desktop\Table of Contents.html
2014-10-27 02:09 - 2014-10-27 02:09 - 00000000 ____D () C:\Users\Oksana\Desktop\content
2014-10-26 01:00 - 2014-10-26 01:00 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-26 01:00 - 2014-10-26 01:00 - 00000000 _____ () C:\Windows\setupact.log
2014-10-25 17:07 - 2014-10-25 17:07 - 04974864 _____ (Piriform Ltd) C:\Users\Oksana\Downloads\ccsetup419.exe
2014-10-25 17:07 - 2014-10-25 17:07 - 04974864 _____ (Piriform Ltd) C:\Users\Oksana\Downloads\ccsetup419(1).exe
2014-10-25 03:58 - 2014-10-25 03:58 - 00003366 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1126822513-2444528795-2515040321-1000
2014-10-25 03:58 - 2014-10-25 03:58 - 00003234 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1126822513-2444528795-2515040321-1000
2014-10-23 23:42 - 2014-10-25 16:33 - 00003344 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1126822513-2444528795-2515040321-1000
2014-10-23 23:42 - 2014-10-25 16:33 - 00003212 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1126822513-2444528795-2515040321-1000
2014-10-22 05:44 - 2014-10-22 05:44 - 00003386 _____ () C:\Windows\System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1126822513-2444528795-2515040321-1000
2014-10-22 04:49 - 2014-10-22 04:50 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-10-22 04:37 - 2014-10-22 07:13 - 00000000 ____D () C:\Program Files (x86)\Photoshop CS6
2014-10-22 04:02 - 2014-10-22 04:38 - 00000000 ____D () C:\Users\Oksana\Downloads\Well Fed - Paleo Recipes for People Who Love to Eat
2014-10-18 00:17 - 2014-10-18 00:17 - 00000000 ____D () C:\Users\Oksana\Desktop\Sublime Text 2
2014-10-17 16:22 - 2014-10-17 16:24 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-10-17 16:22 - 2014-10-17 16:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2014-10-17 16:22 - 2011-02-28 01:00 - 00000038 _____ () C:\Windows\avisplitter.ini
2014-10-17 16:22 - 2010-12-07 11:40 - 00183808 _____ () C:\Windows\SysWOW64\xvidvfw.dll
2014-10-17 16:22 - 2010-12-07 11:22 - 00810496 _____ () C:\Windows\SysWOW64\xvidcore.dll
2014-10-17 16:22 - 2010-11-03 12:08 - 00237568 _____ (www.helixcommunity.org) C:\Windows\SysWOW64\yv12vfw.dll
2014-10-17 16:22 - 2010-03-15 03:31 - 00165376 _____ () C:\Windows\SysWOW64\unrar.dll
2014-10-17 16:22 - 2010-01-17 09:18 - 00151552 _____ (fccHandler) C:\Windows\SysWOW64\ac3acm.acm
2014-10-17 16:22 - 2008-10-03 06:30 - 00000414 _____ () C:\Windows\SysWOW64\lame_acm.xml
2014-10-17 16:22 - 2008-09-24 12:41 - 00839680 _____ (http://www.mp3dev.org/) C:\Windows\SysWOW64\lameACM.acm
2014-10-17 16:21 - 2014-10-17 16:21 - 00001200 _____ () C:\Users\Oksana\Desktop\Aura Video Editor.lnk
2014-10-17 16:21 - 2014-10-17 16:21 - 00000000 ____D () C:\Users\Oksana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aura4You
2014-10-17 16:21 - 2014-10-17 16:21 - 00000000 ____D () C:\Program Files (x86)\Aura4You
2014-10-17 13:08 - 2014-10-17 13:08 - 13844480 _____ () C:\Users\Oksana\Desktop\Sublime Text 2.0.2.tar
2014-10-17 13:04 - 2014-10-17 13:04 - 06513608 _____ ( ) C:\Users\Oksana\Downloads\Sublime Text 2.0.2 x64 Setup.exe
2014-10-17 12:55 - 2014-10-17 12:57 - 07945210 _____ () C:\Users\Oksana\Downloads\npp.6.6.9.Installer.exe
2014-10-17 12:50 - 2014-10-17 12:50 - 00699016 _____ (CNET Download.com) C:\Users\Oksana\Downloads\cbsidlm-cbsi213-Aura_Video_Editor-SEO-75670609.exe
2014-10-17 12:50 - 2014-10-17 12:50 - 00699016 _____ (CNET Download.com) C:\Users\Oksana\Downloads\cbsidlm-cbsi213-Aura_Video_Editor-SEO-75670609(1).exe
2014-10-17 11:54 - 2014-10-17 11:58 - 327828865 _____ (Oleg N. Scherbakov) C:\Users\Oksana\Downloads\Adobe Photoshop CS6 13.0.1.3 Extended RePack by JFK2005 (Upd. 04.06.14).exe
2014-10-17 11:41 - 2014-10-17 11:41 - 00000000 ____D () C:\Users\Oksana\Desktop\__MACOSX
2014-10-17 11:41 - 2009-12-09 10:43 - 17436398 ____N () C:\Users\Oksana\Desktop\WG_Watercolor_1.abr
2014-10-17 11:17 - 2014-10-17 11:18 - 96379392 _____ () C:\Users\Oksana\Downloads\zdesktop_7_2_5_ga_b12038_20140417012326_win32.msi
2014-10-17 09:42 - 2014-10-17 09:42 - 00699016 _____ (CNET Download.com) C:\Users\Oksana\Downloads\cbsidlm-cbsi213-Sandboxie-SEO-10371434.exe
2014-10-17 09:25 - 2014-10-17 09:25 - 04991400 _____ (Adobe Systems Inc.) C:\Users\Oksana\Downloads\Shockwave_Installer_Slim(1).exe
2014-10-17 09:02 - 2014-10-31 10:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-10-17 08:39 - 2014-10-17 08:39 - 04991400 _____ (Adobe Systems Inc.) C:\Users\Oksana\Downloads\Shockwave_Installer_Slim.exe
2014-10-15 18:35 - 2014-10-06 19:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-15 18:35 - 2014-10-06 19:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-10-15 18:35 - 2014-09-25 15:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-10-15 18:35 - 2014-09-25 15:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-10-15 18:35 - 2014-09-25 15:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-10-15 18:35 - 2014-09-25 15:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-10-15 18:35 - 2014-09-25 15:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-10-15 18:35 - 2014-09-25 15:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-15 18:35 - 2014-09-18 18:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-15 18:35 - 2014-09-18 18:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-15 18:35 - 2014-09-18 18:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-10-15 18:35 - 2014-09-18 18:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-15 18:35 - 2014-09-18 18:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-15 18:35 - 2014-09-18 18:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-15 18:35 - 2014-09-18 18:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-15 18:35 - 2014-09-18 18:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-10-15 18:35 - 2014-09-18 18:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-15 18:35 - 2014-09-18 18:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-10-15 18:35 - 2014-09-18 18:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-15 18:35 - 2014-09-18 18:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-15 18:35 - 2014-09-18 18:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-10-15 18:35 - 2014-09-18 18:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-10-15 18:35 - 2014-09-18 17:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-10-15 18:35 - 2014-09-18 17:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-10-15 18:35 - 2014-09-18 17:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-10-15 18:35 - 2014-09-18 17:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-10-15 18:35 - 2014-09-18 17:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-10-15 18:35 - 2014-09-18 17:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-10-15 18:35 - 2014-09-18 17:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-15 18:35 - 2014-09-18 17:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-15 18:35 - 2014-09-18 17:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-10-15 18:35 - 2014-09-18 17:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-10-15 18:35 - 2014-09-18 17:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-10-15 18:35 - 2014-09-18 17:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-15 18:35 - 2014-09-18 16:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-10-15 18:34 - 2014-09-25 15:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-15 18:34 - 2014-09-18 19:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-15 18:34 - 2014-09-18 18:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-15 18:34 - 2014-09-18 18:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-15 18:34 - 2014-09-18 18:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-15 18:34 - 2014-09-18 18:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-15 18:34 - 2014-09-18 18:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-15 18:34 - 2014-09-18 18:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-15 18:34 - 2014-09-18 18:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-15 18:34 - 2014-09-18 18:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-15 18:34 - 2014-09-18 18:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-10-15 18:34 - 2014-09-18 18:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-15 18:34 - 2014-09-18 18:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-15 18:34 - 2014-09-18 17:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-10-15 18:34 - 2014-09-18 17:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-15 18:34 - 2014-09-18 17:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-15 18:34 - 2014-09-18 17:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-15 18:34 - 2014-09-18 17:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-10-15 18:34 - 2014-09-18 16:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-10-15 18:34 - 2014-09-18 16:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-15 18:34 - 2014-09-18 16:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-10-15 18:32 - 2014-09-28 17:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-15 18:32 - 2014-09-12 18:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-15 18:32 - 2014-09-12 18:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-10-15 18:32 - 2014-06-18 15:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-15 18:32 - 2014-06-18 15:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-10-15 18:32 - 2014-06-18 15:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2014-10-15 18:32 - 2014-06-18 15:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-15 18:32 - 2014-06-18 15:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2014-10-15 18:32 - 2014-06-18 15:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-15 18:31 - 2014-10-09 19:05 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-15 18:31 - 2014-10-09 19:05 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-15 18:31 - 2014-10-09 19:00 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-15 18:31 - 2014-09-17 19:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-15 18:30 - 2014-10-15 18:31 - 30147792 _____ (CBS Interactive) C:\Users\Oksana\Downloads\DownloadApp_1_7_5_198_Setup.exe
2014-10-15 18:30 - 2014-09-17 18:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-10-15 18:30 - 2014-09-03 22:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-15 18:30 - 2014-09-03 22:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-10-15 18:26 - 2014-07-16 19:07 - 03722240 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-15 18:26 - 2014-07-16 19:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-15 18:26 - 2014-07-16 19:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-15 18:26 - 2014-07-16 19:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-15 18:26 - 2014-07-16 19:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-15 18:26 - 2014-07-16 19:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-15 18:26 - 2014-07-16 19:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-15 18:26 - 2014-07-16 19:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-15 18:26 - 2014-07-16 18:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2014-10-15 18:26 - 2014-07-16 18:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-10-15 18:26 - 2014-07-16 18:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-10-15 18:26 - 2014-07-16 18:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-10-15 18:26 - 2014-07-16 18:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-10-15 18:26 - 2014-07-16 18:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-10-15 18:26 - 2014-07-16 18:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-15 18:26 - 2014-07-16 18:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-15 18:22 - 2014-10-15 18:22 - 36240048 _____ () C:\Users\Oksana\Downloads\Firefox Setup 33.0(1).exe
2014-10-15 18:06 - 2014-10-15 18:06 - 36240048 _____ () C:\Users\Oksana\Downloads\Firefox Setup 33.0.exe
2014-10-12 05:04 - 2014-10-12 05:04 - 02091098 _____ () C:\Users\Oksana\Downloads\CB49.tmp
2014-10-12 05:04 - 2014-10-12 05:04 - 02091098 _____ () C:\Users\Oksana\Downloads\B059.tmp
2014-10-12 05:04 - 2014-10-12 05:04 - 02091098 _____ () C:\Users\Oksana\Downloads\90A7.tmp
2014-10-12 05:03 - 2014-10-12 05:03 - 02091098 _____ () C:\Users\Oksana\Downloads\E20D.tmp
2014-10-12 05:03 - 2014-10-12 05:03 - 02091098 _____ () C:\Users\Oksana\Downloads\549F.tmp
2014-10-12 05:02 - 2014-10-12 05:03 - 02091098 _____ () C:\Users\Oksana\Downloads\8DB5.tmp
2014-10-12 05:02 - 2014-10-12 05:02 - 02091098 _____ () C:\Users\Oksana\Downloads\D74B.tmp
2014-10-12 05:02 - 2014-10-12 05:02 - 02091098 _____ () C:\Users\Oksana\Downloads\7988.tmp
2014-10-12 05:02 - 2014-10-12 05:02 - 02091098 _____ () C:\Users\Oksana\Downloads\4F5C.tmp
2014-10-12 05:02 - 2014-10-12 05:02 - 02091098 _____ () C:\Users\Oksana\Downloads\1B7D.tmp
2014-10-12 05:01 - 2014-10-12 05:01 - 02091098 _____ () C:\Users\Oksana\Downloads\F80D.tmp
2014-10-12 05:01 - 2014-10-12 05:01 - 02091098 _____ () C:\Users\Oksana\Downloads\D71.tmp
2014-10-12 05:01 - 2014-10-12 05:01 - 02091098 _____ () C:\Users\Oksana\Downloads\9319.tmp
2014-10-12 05:01 - 2014-10-12 05:01 - 02091098 _____ () C:\Users\Oksana\Downloads\39B3.tmp
2014-10-12 05:01 - 2014-10-12 05:01 - 02091098 _____ () C:\Users\Oksana\Downloads\22A8.tmp
2014-10-12 05:00 - 2014-10-12 05:01 - 02091098 _____ () C:\Users\Oksana\Downloads\B909.tmp
2014-10-12 05:00 - 2014-10-12 05:00 - 02091098 _____ () C:\Users\Oksana\Downloads\FB2E.tmp
2014-10-12 05:00 - 2014-10-12 05:00 - 02091098 _____ () C:\Users\Oksana\Downloads\F2E3.tmp
2014-10-12 05:00 - 2014-10-12 05:00 - 02091098 _____ () C:\Users\Oksana\Downloads\E941.tmp
2014-10-12 05:00 - 2014-10-12 05:00 - 02091098 _____ () C:\Users\Oksana\Downloads\E106.tmp
2014-10-12 05:00 - 2014-10-12 05:00 - 02091098 _____ () C:\Users\Oksana\Downloads\D4D5.tmp
2014-10-12 05:00 - 2014-10-12 05:00 - 02091098 _____ () C:\Users\Oksana\Downloads\9EB5.tmp
2014-10-12 05:00 - 2014-10-12 05:00 - 02091098 _____ () C:\Users\Oksana\Downloads\7785.tmp
2014-10-12 05:00 - 2014-10-12 05:00 - 02091098 _____ () C:\Users\Oksana\Downloads\6C3.tmp
2014-10-12 05:00 - 2014-10-12 05:00 - 02091098 _____ () C:\Users\Oksana\Downloads\5340.tmp
2014-10-12 05:00 - 2014-10-12 05:00 - 02091098 _____ () C:\Users\Oksana\Downloads\4183.tmp
2014-10-12 05:00 - 2014-10-12 05:00 - 02091098 _____ () C:\Users\Oksana\Downloads\3543.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\F91C.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\C7AA.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\BA12.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\ABDE.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\A4EB.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\9DB9.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\981D.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\92FD.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\8D71.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\85B2.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\815E.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\7B26.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\76A2.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\65AF.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\5F8.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\5CF8.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\596E.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\51CF.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\4F2F.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\46B6.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\398B.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\2BE4.tmp
2014-10-12 04:59 - 2014-10-12 04:59 - 02091098 _____ () C:\Users\Oksana\Downloads\1026.tmp
2014-10-12 04:58 - 2014-10-12 04:58 - 02091098 _____ () C:\Users\Oksana\Downloads\DEF6.tmp
2014-10-12 04:58 - 2014-10-12 04:58 - 02091098 _____ () C:\Users\Oksana\Downloads\C741.tmp
2014-10-12 04:58 - 2014-10-12 04:58 - 02091098 _____ () C:\Users\Oksana\Downloads\BD9F.tmp
2014-10-12 04:58 - 2014-10-12 04:58 - 02091098 _____ () C:\Users\Oksana\Downloads\B998.tmp
2014-10-12 04:58 - 2014-10-12 04:58 - 02091098 _____ () C:\Users\Oksana\Downloads\B16D.tmp
2014-10-12 04:58 - 2014-10-12 04:58 - 02091098 _____ () C:\Users\Oksana\Downloads\AE12.tmp
2014-10-12 04:58 - 2014-10-12 04:58 - 02091098 _____ () C:\Users\Oksana\Downloads\AAB7.tmp
2014-10-12 04:58 - 2014-10-12 04:58 - 02091098 _____ () C:\Users\Oksana\Downloads\A672.tmp
2014-10-12 04:58 - 2014-10-12 04:58 - 02091098 _____ () C:\Users\Oksana\Downloads\9957.tmp
2014-10-12 04:58 - 2014-10-12 04:58 - 02091098 _____ () C:\Users\Oksana\Downloads\90FD.tmp
2014-10-12 04:58 - 2014-10-12 04:58 - 02091098 _____ () C:\Users\Oksana\Downloads\8C4A.tmp
2014-10-12 04:58 - 2014-10-12 04:58 - 02091098 _____ () C:\Users\Oksana\Downloads\87B6.tmp
2014-10-12 04:58 - 2014-10-12 04:58 - 02091098 _____ () C:\Users\Oksana\Downloads\8584.tmp
2014-10-12 04:58 - 2014-10-12 04:58 - 02091098 _____ () C:\Users\Oksana\Downloads\82C5.tmp
2014-10-12 04:58 - 2014-10-12 04:58 - 02091098 _____ () C:\Users\Oksana\Downloads\7C10.tmp
2014-10-12 04:58 - 2014-10-12 04:58 - 02091098 _____ () C:\Users\Oksana\Downloads\7B25.tmp
2014-10-12 04:58 - 2014-10-12 04:58 - 02091098 _____ () C:\Users\Oksana\Downloads\777C.tmp
2014-10-10 23:31 - 2014-10-10 23:31 - 00000248 _____ () C:\Users\Oksana\Downloads\Flatiron_Functional_Medicine_Newsletter.vcf
2014-10-10 01:57 - 2014-10-10 02:12 - 00000000 ____D () C:\Users\Oksana\Downloads\The Blacklist*Season*1*COMPLETE*- 480p- HDTV -*[itz_theo]
2014-10-10 00:10 - 2014-10-10 00:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-10-09 21:40 - 2014-10-09 21:40 - 04965896 _____ (Piriform Ltd) C:\Users\Oksana\Downloads\ccsetup418.exe
2014-10-04 00:37 - 2014-10-04 01:33 - 00000000 ____D () C:\Users\Oksana\Downloads\Breaking Bad Season 2 Complete 720p.BRrip.Sujaidr
2014-10-01 20:15 - 2014-09-24 19:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-10-01 20:15 - 2014-09-24 18:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-31 14:12 - 2013-09-29 01:51 - 00000000 ____D () C:\Users\Oksana\AppData\Roaming\uTorrent
2014-10-31 14:09 - 2013-05-10 00:48 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-31 14:09 - 2013-05-10 00:48 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-31 14:06 - 2013-05-09 15:40 - 00000000 ____D () C:\ProgramData\MFAData
2014-10-31 13:53 - 2013-11-14 03:11 - 00000912 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1126822513-2444528795-2515040321-1000UA.job
2014-10-31 13:40 - 2013-05-09 15:43 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-31 13:36 - 2013-09-29 01:57 - 00000294 _____ () C:\Windows\Tasks\Dealply.job
2014-10-31 13:26 - 2014-08-31 12:57 - 00000000 ____D () C:\Users\Oksana\Desktop\Sept 2013
2014-10-31 13:26 - 2012-05-17 19:51 - 00000679 _____ () C:\Users\Oksana\Desktop\Settings.ini
2014-10-31 12:00 - 2013-06-08 17:56 - 00629760 ___SH () C:\Users\Oksana\Desktop\Thumbs.db
2014-10-31 11:10 - 2014-01-04 21:41 - 01863025 _____ () C:\Windows\WindowsUpdate.log
2014-10-31 11:07 - 2011-08-11 00:55 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-10-31 08:09 - 2013-08-21 18:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-10-31 08:08 - 2013-05-09 21:26 - 00000000 ____D () C:\Users\Oksana\AppData\Local\CrashDumps
2014-10-31 07:53 - 2013-11-14 03:11 - 00000860 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1126822513-2444528795-2515040321-1000Core.job
2014-10-31 00:05 - 2013-06-07 17:32 - 00003934 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{2D2C2150-9937-4DF0-9BCD-7130B250B743}
2014-10-30 00:16 - 2013-05-09 23:35 - 00000000 ____D () C:\Users\Oksana\AppData\Roaming\Skype
2014-10-27 16:29 - 2009-07-13 21:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-27 16:29 - 2009-07-13 21:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-27 02:13 - 2014-09-09 00:08 - 00000000 ____D () C:\SUPERDelete
2014-10-25 17:09 - 2013-05-13 15:23 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-10-25 17:09 - 2013-05-13 15:23 - 00000000 ____D () C:\Program Files\CCleaner
2014-10-25 16:34 - 2013-12-11 22:13 - 00000000 ___RD () C:\Users\Oksana\Dropbox
2014-10-25 16:34 - 2013-12-11 21:30 - 00000000 ____D () C:\Users\Oksana\AppData\Roaming\Dropbox
2014-10-25 16:33 - 2009-07-13 22:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-22 04:50 - 2013-05-10 00:48 - 00000000 ____D () C:\Users\Oksana\AppData\Local\Google
2014-10-22 04:47 - 2013-05-09 15:38 - 00000000 ____D () C:\Users\Oksana\AppData\Roaming\Adobe
2014-10-22 04:31 - 2014-03-30 17:08 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-21 05:53 - 2012-05-02 15:59 - 01397728 _____ (Tweaking.com) C:\Users\Oksana\Desktop\TweakingRegistryBackup.exe
2014-10-16 21:20 - 2009-07-13 21:45 - 00267672 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-16 21:16 - 2014-05-07 02:15 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-16 20:14 - 2013-07-12 03:26 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-16 16:26 - 2013-05-18 14:34 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-14 14:59 - 2009-07-13 20:20 - 00000000 ____D () C:\Windows\rescache
2014-10-12 03:31 - 2009-07-13 20:20 - 00000000 ____D () C:\Windows\Resources
2014-10-11 22:36 - 2013-10-04 01:53 - 00000000 ____D () C:\Users\Oksana\AppData\Roaming\vlc
2014-10-11 21:17 - 2009-07-13 22:08 - 00032560 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-10-11 03:26 - 2014-09-17 01:13 - 00000000 ____D () C:\Users\Oksana\Desktop\images
2014-10-11 02:49 - 2013-06-02 05:12 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-10-09 21:28 - 2013-10-14 17:36 - 00000000 ____D () C:\Users\Oksana\Desktop\PIX
2014-10-07 18:04 - 2013-09-05 12:16 - 00078816 _____ (PcWinTech.com) C:\Users\Oksana\Desktop\pcwintech_tasksch.dll
2014-10-07 18:01 - 2013-08-19 19:25 - 00234464 _____ (Tweaking.com) C:\Users\Oksana\Desktop\tweaking_tabs.ocx
2014-10-01 17:31 - 2012-05-02 15:58 - 00005948 _____ () C:\Users\Oksana\Desktop\TweakingRegistryBackup.exe.manifest
Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.6164.dll
Some content of TEMP:
====================
C:\Users\Oksana\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpzrry33.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-10-14 14:51
==================== End Of Log ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-10-2014 01
Ran by Oksana at 2014-10-31 14:13:32
Running from C:\Users\Oksana\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2015 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 4.0.0.1390 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.167 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader X (10.1.12) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.12 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.5.9.620 - Adobe Systems, Inc.)
Amazon Kindle (HKCU\...\Amazon Kindle) (Version: - Amazon)
ArcSoft WebCam Companion 4 (HKLM-x32\...\{12450631-3289-40F7-AEC3-F6DCB6E1BDCF}) (Version: 4.0.20.365 - ArcSoft)
ATI Catalyst Install Manager (HKLM\...\{E686FBB0-B356-96BE-A9ED-2D8286AA0386}) (Version: 3.0.829.0 - ATI Technologies, Inc.)
Aura Video Editor 1.1.2 (HKLM-x32\...\Aura Video Editor) (Version: 1.1.2 - Aura4You.com)
AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5315 - AVG Technologies)
AVG 2015 (Version: 15.0.4189 - AVG Technologies) Hidden
AVG 2015 (Version: 15.0.5315 - AVG Technologies) Hidden
AX88772A (HKLM-x32\...\{CAAF899F-D15F-480F-AF10-22B1431A5E9F}) (Version: 1.00.0000 - )
Blio (HKLM-x32\...\{9368DDD5-CE7F-4BD7-A83A-F00FABE338EC}) (Version: 2.2.6699 - K-NFB Reading Technology, Inc.)
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: - Broadcom Corporation)
Broadcom Bluetooth Software (HKLM\...\{6E7F4CA3-B2DE-413C-A7A1-43AA5BE19EA1}) (Version: 6.5.0.1600 - Broadcom Corporation)
Broadcom InConcert Maestro (HKLM\...\{57DD35E9-D9BB-4089-BB05-EF933C586CB3}) (Version: 1.0.1.1600 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.1.4305 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKCU\...\Dropbox) (Version: 2.10.30 - Dropbox, Inc.)
ESU for Microsoft Windows 7 SP1 (HKLM-x32\...\{E96CAA2A-0244-4A2A-8403-0C3C9534778B}) (Version: 2.1.1 - Hewlett-Packard)
Evernote v. 4.2.3 (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 4.2.3.22 - Evernote Corp.)
f.lux (HKCU\...\Flux) (Version: - )
ffdshow v1.2.4422 [2012-04-09] (HKLM-x32\...\ffdshow_is1) (Version: 1.2.4422.0 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.116 - Google Inc.)
Google Drive (HKLM-x32\...\{E87022D3-C8C9-4C76-8E27-BC7F18F9B8FB}) (Version: 1.14.6059.644 - Google, Inc.)
Google Talk (remove only) (HKCU\...\{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk) (Version: - )
Google Talk Plugin (HKLM-x32\...\{E121A4FE-009B-385B-BB0D-B934E2A88288}) (Version: 5.2.4.18058 - Google)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
Google+ Auto Backup (HKCU\...\Google+ Auto Backup) (Version: 1.0.25.133 - Google, Inc.)
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version: - )
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP 3D DriveGuard (HKLM\...\{DFB497E0-CE3F-40FC-9596-FC7A48775DE4}) (Version: 4.1.16.1 - Hewlett-Packard Company)
HP Connection Manager (HKLM-x32\...\{B65FCAA5-F3A6-4B3F-ABEE-CBC2B085796B}) (Version: 4.1.25.1 - Hewlett-Packard Company)
HP CoolSense (HKLM-x32\...\{11AF9A96-6D83-4C3B-8DCB-16EA2A358E3F}) (Version: 2.10.51 - Hewlett-Packard Company)
HP Documentation (HKLM-x32\...\{57C760B4-2EBA-4CE6-9695-EC241C8A650E}) (Version: 1.1.0.0 - Hewlett-Packard)
HP Launch Box (HKLM\...\{9CAB2212-0732-4827-8EC4-61D8EF0AA65B}) (Version: 1.0.11 - Hewlett-Packard Company)
HP MovieStore (HKLM-x32\...\{9008D736-35CA-40DB-A2BE-5F32D954E5AA}) (Version: 2.0 - Hewlett-Packard Company)
HP On Screen Display (HKLM-x32\...\{ED1BD69A-07E3-418C-91F1-D856582581BF}) (Version: 1.3.5 - Hewlett-Packard Company)
HP Power Manager (HKLM-x32\...\{7E799992-5DA0-4A1A-9443-B1836B063FEC}) (Version: 1.4.8 - Hewlett-Packard Company)
HP Product Detection (HKLM-x32\...\{879F7C80-BCA3-4A11-BDB1-658252ECD7E0}) (Version: 11.15.0005 - HP)
HP Quick Launch (HKLM-x32\...\{53B17A98-5BF0-40BC-AAFF-850A357975AC}) (Version: 2.7.2 - Hewlett-Packard Company)
HP QuickWeb (HKLM-x32\...\{57D8E376-0E8A-4AFD-9040-DA2D33B7FF94}) (Version: 3.1.0.9791 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{5036764A-435D-40C9-869C-31085A3D741D}) (Version: 8.7.4751.3798 - Hewlett-Packard Company)
HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.1.13476.3753 - Hewlett-Packard Company)
HP Software Framework (HKLM-x32\...\{675D093B-815D-47FD-AB2C-192EC751E8E2}) (Version: 4.6.10.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.510 - Oracle)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
K-Lite Codec Pack 7.0.0 (Full) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 7.0.0 - )
LastPass (uninstall only) (HKLM-x32\...\LastPass) (Version: - LastPass)
Logitech Webcam Software (HKLM\...\{987FE247-4E69-4A2E-A961-D14F901FDBF6}) (Version: 12.10.1113 - Logitech Inc.)
Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 33.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 33.0.2 (x86 en-US)) (Version: 33.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0.2 - Mozilla)
Mozilla Thunderbird 24.1.0 (x86 en-US) (HKLM-x32\...\Mozilla Thunderbird 24.1.0 (x86 en-US)) (Version: 24.1.0 - Mozilla)
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
ooVoo (HKLM-x32\...\{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}) (Version: 3.6.3001 - ooVoo LLC.)
PeaZip 5.1.0 (WIN64) (HKLM\...\{5A2BC38A-406C-4A5B-BF45-6991F9A05325}_is1) (Version: - Giorgio Tani)
Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PicasaAlbumDownloader (HKLM-x32\...\{BB734FD5-65DF-4AF9-B096-FAA2828D323A}) (Version: 1.0.0 - SunshineBox)
PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
QuickShare (HKLM-x32\...\{B630320B-4B6A-4623-A05D-80DAA4C73CE9}) (Version: 1.38.61.10911 - Linkury Inc.) <==== ATTENTION
RealDownloader (x32 Version: 17.0.13 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.54.309.2012 - Realtek)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7601.30130 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
Recovery Manager (x32 Version: 2.0.0 - Hewlett-Packard) Hidden
RoxioNow Player (HKLM-x32\...\{0EDEB615-1A60-425E-8306-0E10519C7B55}) (Version: 1.9.5.103 - RoxioNow)
Skype™ 6.20 (HKLM-x32\...\{1845470B-EB14-4ABC-835B-E36C693DC07D}) (Version: 6.20.104 - Skype Technologies S.A.)
Snap (remove only) (HKLM-x32\...\Snap) (Version: - )
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 6.0.1108 - SUPERAntiSpyware.com)
Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 16.0.1.0 - Synaptics Incorporated)
Tweaking.com - Registry Backup (HKLM-x32\...\Tweaking.com - Registry Backup) (Version: 1.10.1 - Tweaking.com)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
UpdateService (x32 Version: 1.0.0 - RealNetworks, Inc.) Hidden
Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Xilisoft Movie Maker 6 (HKLM-x32\...\Xilisoft Movie Maker 6) (Version: 6.6.0.20130116 - Xilisoft)
Yahoo! Messenger (HKLM-x32\...\Yahoo! Messenger) (Version: - Yahoo! Inc.)
Yahoo! Software Update (HKLM-x32\...\Yahoo! Software Update) (Version: - )
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-1126822513-2444528795-2515040321-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Oksana\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1126822513-2444528795-2515040321-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Oksana\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1126822513-2444528795-2515040321-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Oksana\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1126822513-2444528795-2515040321-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Oksana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1126822513-2444528795-2515040321-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Oksana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1126822513-2444528795-2515040321-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Oksana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1126822513-2444528795-2515040321-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Oksana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1126822513-2444528795-2515040321-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Oksana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1126822513-2444528795-2515040321-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Oksana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1126822513-2444528795-2515040321-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Oksana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1126822513-2444528795-2515040321-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Oksana\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
==================== Restore Points =========================
31-10-2014 17:59:55 Windows Live Essentials
31-10-2014 18:05:42 Installed WLSetup
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 19:34 - 2014-03-01 16:35 - 00000872 ____A C:\Windows\system32\Drivers\etc\hosts
54.225.95.126 dmcecclamecbinmplcolhaljlclhbgah
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {05B7E255-94AC-499D-ABC0-DCBFBFAA03FA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-10] (Google Inc.)
Task: {115464FC-7475-47FE-BE24-9141E742BBC9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {310D5E80-CCB6-46AB-B9AD-2AFC2F27D93D} - \Dealply No Task File <==== ATTENTION
Task: {3145906F-C40B-4646-AAE8-824117C570A2} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1126822513-2444528795-2515040321-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2014-07-30] (RealNetworks, Inc.)
Task: {4137D20D-8593-4343-9A23-24DDDD8D5DDE} - \Advanced System Protector_startup No Task File <==== ATTENTION
Task: {47FA3B1C-E56B-4E13-BEAB-F3B0A1A61C50} - System32\Tasks\SomotoUpdateCheckerAutoStart => C:\Users\Oksana\AppData\Local\FilesFrog Update Checker\update_checker.exe <==== ATTENTION
Task: {4BAB2486-CFDF-47EE-83D9-C39D8A945688} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1126822513-2444528795-2515040321-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2014-07-30] (RealNetworks, Inc.)
Task: {4F64470C-83BB-4B83-A829-91F5F036FD8F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1126822513-2444528795-2515040321-1000UA => C:\Users\Oksana\AppData\Local\Google\Update\GoogleUpdate.exe [2013-11-14] (Google Inc.)
Task: {585F1B4B-AFD8-4B05-A7E0-39FECFCFA440} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-05-10] (Google Inc.)
Task: {5B91FA97-0703-4D7E-ACFD-F42D773DA69B} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1126822513-2444528795-2515040321-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-07-30] (RealNetworks, Inc.)
Task: {60C93FCE-63DD-4E33-A916-11AF79D8EEDF} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: {6493EC23-84B1-4B87-B519-6C612D866113} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1126822513-2444528795-2515040321-1000Core => C:\Users\Oksana\AppData\Local\Google\Update\GoogleUpdate.exe [2013-11-14] (Google Inc.)
Task: {688E9822-F8A7-4885-A946-F8FC8C219D3A} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-07-06] (CyberLink)
Task: {7B06C875-4873-4E6C-AD34-C4E8FF1A857D} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1126822513-2444528795-2515040321-1000
Task: {8235E8E3-08EF-4155-8441-B97C21F8E611} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
Task: {8241041D-D9A1-4612-B931-2EA3B83F8C36} - \RegClean Pro No Task File <==== ATTENTION
Task: {9245AA43-3B6A-4A52-A08D-3F83E478CA81} - System32\Tasks\HPCeeScheduleForOksana => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {A70E432D-E321-4EA8-9836-B5110E5A19DE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24] (Adobe Systems Incorporated)
Task: {B559844E-2D0B-41F6-B689-71CFF27518D0} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1126822513-2444528795-2515040321-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2014-07-30] (RealNetworks, Inc.)
Task: {B7D3E681-1A1D-49FB-B403-1271F7C63F90} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {D3A1EDD9-7088-4249-A698-351858F21F7D} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1126822513-2444528795-2515040321-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-07-30] (RealNetworks, Inc.)
Task: {E6C74172-C325-449B-BDB5-A02DB58D6430} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-09-22] (Hewlett-Packard)
Task: {E6CE16DC-CA25-434F-A14C-7E443DCFC265} - System32\Tasks\LaunchApp => C:\Program Files (x86)\JustCloud\JustCloud.exe
Task: {E97ABB05-736C-4A66-9319-BAC35020F195} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-23] (Piriform Ltd)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Dealply.job => C:\Users\Oksana\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1126822513-2444528795-2515040321-1000Core.job => C:\Users\Oksana\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1126822513-2444528795-2515040321-1000UA.job => C:\Users\Oksana\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForOksana.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Loaded Modules (whitelisted) =============
2014-07-30 02:17 - 2014-07-30 02:17 - 00039568 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
2014-07-30 05:04 - 2014-07-30 05:04 - 00023552 _____ () C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
2011-06-27 16:18 - 2011-06-27 16:18 - 00107320 _____ () C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar1.exe
2011-06-29 00:38 - 2011-06-29 00:38 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2011-06-17 14:42 - 2011-06-17 14:42 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2014-04-11 03:01 - 2014-09-23 16:28 - 00864856 _____ () c:\program files (x86)\real\realplayer\RPDS\Plugins\cldplin.dll
2014-10-25 16:34 - 2014-10-25 16:34 - 00043008 _____ () c:\users\oksana\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpzrry33.dll
2013-08-23 12:01 - 2013-08-23 12:01 - 25100288 _____ () C:\Users\Oksana\AppData\Roaming\Dropbox\bin\libcef.dll
2011-04-27 17:05 - 2011-04-27 17:05 - 00514570 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\sqlite3.dll
2014-10-17 09:02 - 2014-10-31 08:08 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-04-11 03:01 - 2014-09-23 16:28 - 00573528 _____ () c:\program files (x86)\real\realplayer\RPDS\Lib\r1api.dll
2014-09-11 20:41 - 2014-09-11 20:41 - 16825520 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\ProgramData\Temp:373E1720
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk => C:\Windows\pss\Bluetooth.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Install LastPass FF RunOnce.lnk => C:\Windows\pss\Install LastPass FF RunOnce.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Install LastPass IE RunOnce.lnk => C:\Windows\pss\Install LastPass IE RunOnce.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Oksana^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Oksana^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MyPC Backup.lnk => C:\Windows\pss\MyPC Backup.lnk.Startup
MSCONFIG\startupreg: AVG_UI => "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY
MSCONFIG\startupreg: googletalk => C:\Users\Oksana\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart
MSCONFIG\startupreg: LogitechQuickCamRibbon => "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide
MSCONFIG\startupreg: Messenger (Yahoo!) => "C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe" -quiet
MSCONFIG\startupreg: ooVoo.exe => C:\Program Files (x86)\ooVoo\oovoo.exe /minimized
MSCONFIG\startupreg: OtShot => C:\Program Files (x86)\OtShot\otshot.exe -minimize
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SUPERAntiSpyware => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpywar
========================= Accounts: ==========================
Administrator (S-1-5-21-1126822513-2444528795-2515040321-500 - Administrator - Disabled)
Guest (S-1-5-21-1126822513-2444528795-2515040321-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1126822513-2444528795-2515040321-1002 - Limited - Enabled)
Oksana (S-1-5-21-1126822513-2444528795-2515040321-1000 - Administrator - Enabled) => C:\Users\Oksana
==================== Faulty Device Manager Devices =============
Name: Broadcom 20702 Bluetooth 4.0 Adapter
Description: Broadcom 20702 Bluetooth 4.0 Adapter
Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}
Manufacturer: Broadcom
Service: BTHUSB
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (10/31/2014 01:59:08 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program FRST64.exe version 30.10.2014.1 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 47e4
Start Time: 01cff54c7d76c061
Termination Time: 55
Application Path: C:\Users\Oksana\Downloads\FRST64.exe
Report Id:
Error: (10/31/2014 11:55:10 AM) (Source: Microsoft-Windows-RestartManager) (EventID: 10007) (User: Oksana-HP)
Description: Application or service 'Windows Search' could not be restarted.
Error: (10/31/2014 11:05:39 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Failed to create restore point (Process = C:\Windows\system32\msiexec.exe /V; Description = WLSetup; Error = 0x80042319).
Error: (10/31/2014 11:03:27 AM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Oksana-HP)
Description: Application or service 'Windows Search' could not be shut down.
Error: (10/31/2014 11:03:22 AM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Oksana-HP)
Description: Application or service 'Windows Live Mail' could not be shut down.
Error: (10/31/2014 08:07:30 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: plugin-container.exe, version: 33.0.0.5397, time stamp: 0x543924b1
Faulting module name: mozalloc.dll, version: 33.0.0.5397, time stamp: 0x5438ffbb
Exception code: 0x80000003
Fault offset: 0x00001425
Faulting process id: 0x4434
Faulting application start time: 0xplugin-container.exe0
Faulting application path: plugin-container.exe1
Faulting module path: plugin-container.exe2
Report Id: plugin-container.exe3
Error: (10/30/2014 11:12:47 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program Skype.exe version 6.20.32.104 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 1920
Start Time: 01cff0f4fbcc61d8
Termination Time: 3291
Application Path: C:\Program Files (x86)\Skype\Phone\Skype.exe
Report Id:
Error: (10/25/2014 04:41:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: hpCMSrv.exe, version: 4.1.25.1, time stamp: 0x4e6fcefa
Faulting module name: KERNELBASE.dll, version: 6.1.7601.18409, time stamp: 0x53159a86
Exception code: 0xe06d7363
Fault offset: 0x0000c42d
Faulting process id: 0x1138
Faulting application start time: 0xhpCMSrv.exe0
Faulting application path: hpCMSrv.exe1
Faulting module path: hpCMSrv.exe2
Report Id: hpCMSrv.exe3
Error: (10/25/2014 04:38:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: hpCMSrv.exe, version: 4.1.25.1, time stamp: 0x4e6fcefa
Faulting module name: KERNELBASE.dll, version: 6.1.7601.18409, time stamp: 0x53159a86
Exception code: 0xe06d7363
Fault offset: 0x0000c42d
Faulting process id: 0x1630
Faulting application start time: 0xhpCMSrv.exe0
Faulting application path: hpCMSrv.exe1
Faulting module path: hpCMSrv.exe2
Report Id: hpCMSrv.exe3
Error: (10/25/2014 04:33:47 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (10/25/2014 06:07:54 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
Error: (10/25/2014 04:41:57 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {000098D5-6857-477B-B1D2-8B04CD9EB234}
Error: (10/25/2014 04:41:55 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The HP Connection Manager 4 Service service terminated unexpectedly. It has done this 2 time(s).
Error: (10/25/2014 04:40:55 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {DCF1FC65-DA3B-404B-B4CC-BF8669E4947C}
Error: (10/25/2014 04:38:51 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {24DB46C8-C842-4E91-9AC4-8A9525A5551D}
Error: (10/25/2014 04:38:38 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The HP Connection Manager 4 Service service terminated unexpectedly. It has done this 1 time(s).
Error: (10/25/2014 04:33:05 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The avast! Antivirus service failed to start due to the following error:
%%2
Error: (10/25/2014 04:33:02 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 4:56:49 AM on 25/10/2014 was unexpected.
Error: (10/25/2014 03:57:10 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The avast! Antivirus service failed to start due to the following error:
%%2
Error: (10/25/2014 03:55:40 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
Microsoft Office Sessions:
=========================
Error: (10/31/2014 01:59:08 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: FRST64.exe30.10.2014.147e401cff54c7d76c06155C:\Users\Oksana\Downloads\FRST64.exe
Error: (10/31/2014 11:55:10 AM) (Source: Microsoft-Windows-RestartManager) (EventID: 10007) (User: Oksana-HP)
Description: 1SearchIndexer.exeWindows Search03026217836640
Error: (10/31/2014 11:05:39 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Windows\system32\msiexec.exe /VWLSetup0x80042319
Error: (10/31/2014 11:03:27 AM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Oksana-HP)
Description: 1SearchIndexer.exeWindows Search03026216136640
Error: (10/31/2014 11:03:22 AM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: Oksana-HP)
Description: 1C:\Program Files (x86)\Windows Live\Mail\wlmail.exeWindows Live Mail01117177680
Error: (10/31/2014 08:07:30 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe33.0.0.5397543924b1mozalloc.dll33.0.0.53975438ffbb8000000300001425443401cff4a7f70278afC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dlla1a4f184-610f-11e4-951e-ec9a74421f85
Error: (10/30/2014 11:12:47 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Skype.exe6.20.32.104192001cff0f4fbcc61d83291C:\Program Files (x86)\Skype\Phone\Skype.exe
Error: (10/25/2014 04:41:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: hpCMSrv.exe4.1.25.14e6fcefaKERNELBASE.dll6.1.7601.1840953159a86e06d73630000c42d113801cff0acd590bb19C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exeC:\Windows\syswow64\KERNELBASE.dll76cd3e16-5ca0-11e4-951e-ec9a74421f85
Error: (10/25/2014 04:38:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: hpCMSrv.exe4.1.25.14e6fcefaKERNELBASE.dll6.1.7601.1840953159a86e06d73630000c42d163001cff0ac8b7c05e8C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exeC:\Windows\syswow64\KERNELBASE.dll00dd8b32-5ca0-11e4-951e-ec9a74421f85
Error: (10/25/2014 04:33:47 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
==================== Memory info ===========================
Processor: AMD E-450 APU with Radeon(tm) HD Graphics
Percentage of memory in use: 86%
Total physical RAM: 3689.41 MB
Available physical RAM: 493.79 MB
Total Pagefile: 8252.5 MB
Available Pagefile: 1165.89 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:277.78 GB) (Free:212.74 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Recovery) (Fixed) (Total:16.15 GB) (Free:1.77 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:3.96 GB) (Free:1.09 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 1F25C2FA)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=277.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=16.1 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=4 GB) - (Type=0C)
==================== End Of Log ============================
+ r on your keyboard at the same time. Type appwiz.cpl and click OK.
Farbar Recovery Scan Tool (FRST)
