new scan results posted...barely got it posted because of ad pop ups...

[Juliet]

It's late here.

Will check back in the morning

 

[rcb56]

this keeps opening in a new window and multiple windows...maybe 5 of them,

http://autoprofitreplicator.com/vid...id=1020d30c230816b30a21728224b453&aff_id=4344

also when i select a new tab my homepage is msn.com yet this opens in a new tab, i've removed yahoo from the search engines but still...

https://us.search.yahoo.com/yhs/web..._NT,205,0_0,NewTab,20150105,20031,0,FF35,6479

also i tried to log in at at&t to pay my phone bill and i've always had the same username and password, yet in firefox it kept prompting me for the name and password. i opened IE and tried with it and it opened the first time. is it possible firefox has just been made stupid by all of this? should i uninstall it?

 

[Juliet]

this keeps opening in a new window and multiple windows...maybe 5 of them,

http://autoprofitreplicator.com/vid...id=1020d30c230816b30a21728224b453&aff_id=4344

also when i select a new tab my homepage is msn.com yet this opens in a new tab, i've removed yahoo from the search engines but still...

https://us.search.yahoo.com/yhs/web..._NT,205,0_0,NewTab,20150105,20031,0,FF35,6479

also i tried to log in at at&t to pay my phone bill and i've always had the same username and password, yet in firefox it kept prompting me for the name and password. i opened IE and tried with it and it opened the first time. is it possible firefox has just been made stupid by all of this? should i uninstall it?

For Firefox

Instructions on how to backup your Favourites/Bookmarks and other data can be found below.

Backup Firefox Bookmarks

Please download and install Revo Uninstaller Free

• Double click Revo Uninstaller to run it.
• From the list of programs double click on Firefox
• When prompted if you want to uninstall click Yes.
• Be sure the Moderate option is selected then click Next.
• The program will run, If prompted again click Yes
• when the built-in uninstaller is finished click on Next.
• Once the program has searched for leftovers click Next.
• Check/tick the bolded items only on the list then click Delete
• when prompted click on Yes and then on next.
• put a check on any folders that are found and select delete
• when prompted select yes then on next
• Once done click Finish.

Download Firefox from here
https://www.mozilla.org/en-US/firefox/new/

~~~
Have you downloaded any new software, trading software?

Let me see a new FRST log.

• Right-Click FRST.exe / FRST64.exe and select
  
  Run as administrator to run the programme.
• Click Yes to the disclaimer.
• Ensure the Addition.txt box is checked.
• Click the Scan button and let the programme run.
• Upon completion, click OK, then OK on the Addition.txt pop up screen.
• Two logs (FRST.txt & Addition.txt) will now be open on your Desktop. Copy the contents of both logs and paste in your next reply.
  

 

[rcb56]

i haven't intentionally d'loaded anything except quicktime which i thought i needed but didn't. that's all tho and was just this morning. the yahoo search engine has now shown up in IE. grrrrrr!

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-02-2015
Ran by Dad at 2015-02-03 10:52:05
Running from C:\Users\Dad\Desktop\FRST-OlderVersion
Boot Mode: Safe Mode (with Networking)
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Spybot - Search and Destroy (Disabled - Out of date) {20A26C15-1AF0-7CA3-9380-FAB824A7EE0D}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Disabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.7.1.19610 - Adobe Systems Incorporated)
Adobe Digital Editions (HKLM-x32\...\Digital Editions) (Version: - )
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.296 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated)
Adobe PDF ePub DRM Removal 4.7.1 (HKLM-x32\...\{C9DD56CA-BAE9-452A-AFE9-834C7770D1A3}) (Version: 4.7.1 - EPUBSOFT)
Adobe Reader XI (11.0.06) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.0.150 - Adobe Systems, Inc.)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Audio Recorder for Free v12.9.8 (HKLM-x32\...\Audio Recorder for Free_is1) (Version: - Copyright(C) 2006-2012 AudioToolMedia Software.)
BEHRINGER UFX 1394 Drivers v6.11.0.0 (HKLM-x32\...\BEHRINGER UFX 1394 Drivers v6.11.0.0) (Version: 6.11.0.0 - BEHRINGER)
Belkin Setup and Router Monitor (HKLM-x32\...\Belkin Setup and Router Monitor_is1) (Version: - )
Best Buy pc app (Version: 3.3.0.0 - Best Buy) Hidden
Best Buy pc app (x32 Version: 3.3.0.0 - Best Buy) Hidden
Bing Bar (HKLM-x32\...\{FF6DD716-7B10-4269-9F19-FFB07AC4CD95}) (Version: 7.3.124.0 - Microsoft Corporation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CameraHelperMsi (x32 Version: 13.50.854.0 - Logitech) Hidden
Canon MP Navigator 3.0 (HKLM-x32\...\MP Navigator 3.0) (Version: - )
Canon MP160 (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP160) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 4.16 - Piriform)
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.2531.52 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Defraggler (HKLM\...\Defraggler) (Version: 2.15 - Piriform)
Dropbox (HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.)
Dwyco CDC-X version 2.10 (HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\Dwyco CDC-X_is1) (Version: 2.10 - Dwyco, Inc.)
Easy Thumbnails (Remove only) (HKLM-x32\...\Easy Thumbnails_is1) (Version: 3.0 - Fookes Software)
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
Etron USB3.0 Host Controller (x32 Version: 0.103 - Etron Technology) Hidden
Freemake Video Converter version 3.1.0 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 3.1.0 - Ellora Assets Corporation)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Gateway Recovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3504 - Gateway Incorporated)
Gateway Registration (HKLM-x32\...\Gateway Registration) (Version: 1.04.3503 - Gateway Incorporated)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Talk Plugin (HKLM-x32\...\{C77CC230-7417-3F01-B70D-52583DC9FEC9}) (Version: 5.40.2.0 - Google)
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
Google+ Auto Backup (HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\Google+ Auto Backup) (Version: 1.0.26.151 - Google, Inc.)
Hotkey Utility (HKLM-x32\...\Hotkey Utility) (Version: 2.05.3505 - Gateway Incorporated)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Gateway Incorporated)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2353 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.0.1008 - Intel Corporation)
iTunes (HKLM\...\{0225AD21-F3E2-4916-BFF3-65D3F9052582}) (Version: 11.0.2.26 - Apple Inc.)
Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217065FF}) (Version: 7.0.650 - Oracle)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Karaoke Builder Player 3.0 (HKLM-x32\...\Karaoke Builder Player 3.0) (Version: - )
Logitech SetPoint 6.65 (HKLM\...\sp6) (Version: 6.65.62 - Logitech)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.0 - Logitech Inc.)
LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden
Malwarebytes Anti-Malware version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Click-to-Run 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - English (HKLM-x32\...\{90140011-0066-0409-0000-0000000FF1CE}) (Version: 14.0.5131.5000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyFreeCodec (HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\MyFreeCodec) (Version: - )
Noise Reduction Plug-In 2.0 (HKLM-x32\...\{B94515E1-2DD6-11E2-849E-F04DA23A5C58}) (Version: 2.0.515 - Sony)
Paltalk Ad Remover 4.0 (HKLM-x32\...\Paltalk Ad Remover_is1) (Version: - The Anubis Group (T.A.G.))
Paltalk Messenger 11.4 (HKLM-x32\...\Paltalk Messenger) (Version: 11.4.564.16191 - AVM Software Inc.)
Peace Art App 2 version 1.1 (HKLM-x32\...\{36756AF9-18F1-467A-AE37-62BC72A0029A}_is1) (Version: 1.1 - Kelly Anne)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.45.516.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6873 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 3.1.2 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.2 - VS Revo Group, Ltd.)
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15013.17 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.15013.17 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Switch Sound File Converter (HKLM-x32\...\Switch) (Version: - NCH Software)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Taplika (HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\Taplika) (Version: 31.0.1650.23 - Taplika) <==== ATTENTION!
Tweaking.com - Registry Backup (HKLM-x32\...\Tweaking.com - Registry Backup) (Version: 2.0.0 - Tweaking.com)
VisioForge Video Capture SDK Delphi Redist (x32 Version: 6.2.0.2 - VisioForge) Hidden
Welcome Center (HKLM-x32\...\Gateway Welcome Center) (Version: 1.02.3504 - Gateway Incorporated)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Yahoo! Messenger (HKLM-x32\...\Yahoo! Messenger) (Version: - Yahoo! Inc.)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Dad\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Dad\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Dad\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points =========================

25-01-2015 19:00:17 Windows Backup
27-01-2015 10:01:28 Windows Update
27-01-2015 18:34:21 Installed Samsung Kies3
28-01-2015 09:27:57 Removed Samsung Kies
28-01-2015 22:51:57 Removed Sound Forge Pro 10.0
30-01-2015 20:48:48 Revo Uninstaller Pro's restore point - Google Chrome
30-01-2015 20:54:54 Windows Update
02-02-2015 11:29:56 Windows Backup
03-02-2015 08:22:48 Installed QuickTime 7
03-02-2015 10:19:10 Revo Uninstaller Pro's restore point - Mozilla Firefox 35.0.1 (x86 en-US)
03-02-2015 10:19:44 Revo Uninstaller Pro's restore point - Mozilla Firefox 35.0.1 (x86 en-US)

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 20:34 - 2015-01-30 20:54 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {0642325B-D49D-4797-BC3D-2F56533546BB} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {09EEC63B-21B8-4656-86A9-CCDD9C10A77F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-04] (Google Inc.)
Task: {3300F4CE-D879-4D35-8449-19AFCAB8A938} - System32\Tasks\WSE_Taplika => C:\Users\Dad\AppData\Roaming\WSE_TA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {346B439C-CE11-4CE0-B14C-D2FD4E18F124} - System32\Tasks\{1DD8B5E2-C122-4D1F-9758-9B0F5D4479E4} => pcalua.exe -a "C:\Users\Dad\Desktop\My Documents\mp160win64111ea23.exe" -d "C:\Users\Dad\Desktop\My Documents"
Task: {3EB83F69-6812-41E2-A848-7F3A8D689E89} - System32\Tasks\Wise Turbo Checker => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe
Task: {474B6DAF-131A-4A72-908B-2653EDE97FBF} - System32\Tasks\ArcadeGiant Updater => C:\Users\Dad\AppData\Local\ArcadeGiant\updater.exe [2015-02-03] (ArcadeGiant) <==== ATTENTION
Task: {490D819C-47D5-456C-A5EB-EEFBD6B58C82} - System32\Tasks\{62ACF029-05DB-43E9-B5E0-E093E965ED01} => C:\Program Files (x86)\Paltalk Messenger\paltalk.exe [2014-06-24] (AVM Software Inc.)
Task: {57F10B8A-E6DC-41AF-836F-3D3323A974EC} - System32\Tasks\{8438242B-619B-42CD-9AD1-2D389FF75225} => C:\Program Files (x86)\Paltalk Messenger\paltalk.exe [2014-06-24] (AVM Software Inc.)
Task: {65FBC813-8ECD-4300-99D3-4822AFCDAFE9} - System32\Tasks\{F2D720B6-011A-46ED-9209-2320052E5916} => pcalua.exe -a C:\PROGRA~2\Yahoo!\MESSEN~1\UNWISE.EXE -c /U C:\PROGRA~2\Yahoo!\MESSEN~1\INSTALL.LOG
Task: {89903DAE-62F9-4E24-BF41-F181F8031DD0} - System32\Tasks\AgSupport => Rundll32.exe C:\Users\Dad\AppData\Local\ARCADE~1\AgHelp.dll,Start
Task: {8C25C726-0EDD-419C-ABAE-AB81DD4A8954} - System32\Tasks\{DF80F471-10C4-4247-BCB7-5B67BA005FD2} => pcalua.exe -a C:\Users\Dad\Desktop\ts_webcam.exe -d C:\Users\Dad\Desktop
Task: {8D943107-6A50-440B-8E05-7B77AD0A1BEB} - System32\Tasks\{D9E1C870-B7E8-4995-8A98-D579504F6B41} => C:\Program Files (x86)\Paltalk Messenger\paltalk.exe [2014-06-24] (AVM Software Inc.)
Task: {91183DFD-7C1C-4471-B424-93FFA034740B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2107755742-302254199-1763176924-1001UA => C:\Users\Dad\AppData\Local\Google\Update\GoogleUpdate.exe [2015-02-03] (Google Inc.)
Task: {AE3C4923-DF05-46BF-9F7D-71972FD7EF73} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-03] (Adobe Systems Incorporated)
Task: {B0C3D0A2-E90E-41D9-A2AA-D31480DA3178} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-04] (Google Inc.)
Task: {B8D04CC6-6343-45C9-B405-F55D65E7D99C} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {CB7581B8-8545-4786-B62C-1567DBFA5960} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
Task: {CE4612D6-865E-46E6-A8C8-E78BF08ACC3D} - System32\Tasks\NBAgent => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe
Task: {E6392F7E-8094-4810-A3A2-612265F0F48F} - System32\Tasks\{F126331D-C6F2-47BE-94F5-C17820994183} => pcalua.exe -a "C:\Program Files (x86)\NCH Software\Recordpad\uninst.exe"
Task: {E738236C-04D2-4CBD-818D-A308E1376E2E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2107755742-302254199-1763176924-1001Core => C:\Users\Dad\AppData\Local\Google\Update\GoogleUpdate.exe [2015-02-03] (Google Inc.)
Task: {ED36A8FB-B1CF-421E-8C67-F352A7A69286} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {F4FE48D0-691E-474D-9BF8-E1EE2DC18853} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {FF5AE516-004E-406B-8236-DF11EE525F5D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-07-23] (Piriform Ltd)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2107755742-302254199-1763176924-1001Core.job => C:\Users\Dad\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2107755742-302254199-1763176924-1001UA.job => C:\Users\Dad\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Wise Turbo Checker.job => C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe
Task: C:\Windows\Tasks\WSE_Taplika.job => C:\Users\Dad\AppData\Roaming\WSE_TA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

==================== Loaded Modules (whitelisted) =============


==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Public\.DS_Store:AFP_AfpInfo

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Behringer UFX 1394 Control Panel.lnk => C:\Windows\pss\Behringer UFX 1394 Control Panel.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Dad^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Dad^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Product Registration.lnk => C:\Windows\pss\Logitech . Product Registration.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Dad^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^PalTalk.lnk => C:\Windows\pss\PalTalk.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: ConduitFloatingPlugin_lcnnhcneegeeojhgpfijnlnocjdmlaon => "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\Dad\AppData\Roaming\ValueApps\CH\TBVerifier.dll",RunConduitFloatingPlugin lcnnhcneegeeojhgpfijnlnocjdmlaon
MSCONFIG\startupreg: EvtMgr6 => C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
MSCONFIG\startupreg: Hotkey Utility => C:\Program Files (x86)\Gateway\Hotkey Utility\HotkeyUtility.exe
MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe
MSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exe
MSCONFIG\startupreg: InstaLAN => "C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe" startup
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: LWS => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
MSCONFIG\startupreg: Messenger (Yahoo!) => "C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe" -quiet
MSCONFIG\startupreg: Obrona Block Ads => "C:\Users\Dad\AppData\Local\Obrona Block Ads\ObronaBlockAds.exe" --hidden
MSCONFIG\startupreg: Persistence => C:\Windows\system32\igfxpers.exe
MSCONFIG\startupreg: RemoteControl10 => "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: SDTray => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
MSCONFIG\startupreg: smoother => C:\Users\Dad\AppData\Roaming\Booster-Web\Booster-Web-Installer.exe
MSCONFIG\startupreg: SoftonicAssistant => "C:\Users\Dad\AppData\Local\SoftonicAssistant\SoftonicAssistant.exe"
MSCONFIG\startupreg: SpybotSD TeaTimer => C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

========================= Accounts: ==========================

Administrator (S-1-5-21-2107755742-302254199-1763176924-500 - Administrator - Disabled)
Dad (S-1-5-21-2107755742-302254199-1763176924-1001 - Administrator - Enabled) => C:\Users\Dad
Guest (S-1-5-21-2107755742-302254199-1763176924-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-2107755742-302254199-1763176924-1003 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

Name: Microsoft Teredo Tunneling Adapter
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Microsoft Teredo Tunneling Adapter #2
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/03/2015 10:27:06 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/03/2015 10:26:27 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Failed to create restore point (Process = C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exe Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exe" ; Description = Revo Uninstaller Pro's restore point - QuickTime 2015 Packages; Error = 0x8007043c).

Error: (02/03/2015 10:25:36 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Activation context generation failed for "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1".Error in manifest or policy file "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" on line C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/03/2015 10:21:31 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/03/2015 10:19:44 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.
.
This is often caused by incorrect security settings in either the writer or requestor process.


Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {baae700c-cc61-4732-9a8c-1e02bd7b1d13}

Error: (02/03/2015 10:19:10 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.
.
This is often caused by incorrect security settings in either the writer or requestor process.


Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {baae700c-cc61-4732-9a8c-1e02bd7b1d13}

Error: (02/03/2015 09:24:22 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: dsisetup464480652.exe, version: 0.0.0.0, time stamp: 0x2a425e19
Faulting module name: dsisetup464480652.exe, version: 0.0.0.0, time stamp: 0x2a425e19
Exception code: 0xc0000005
Fault offset: 0x00002810
Faulting process id: 0x1d18
Faulting application start time: 0xdsisetup464480652.exe0
Faulting application path: dsisetup464480652.exe1
Faulting module path: dsisetup464480652.exe2
Report Id: dsisetup464480652.exe3

Error: (02/03/2015 04:33:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: plugin-container.exe, version: 35.0.1.5500, time stamp: 0x54c1f9f3
Faulting module name: mozalloc.dll, version: 35.0.1.5500, time stamp: 0x54c1f224
Exception code: 0x80000003
Fault offset: 0x00001425
Faulting process id: 0x59c
Faulting application start time: 0xplugin-container.exe0
Faulting application path: plugin-container.exe1
Faulting module path: plugin-container.exe2
Report Id: plugin-container.exe3

Error: (02/02/2015 08:46:46 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Information only.
Error: The server returned an invalid or unrecognized response
ErrorCode: 14007(0x36b7).

Error: (02/02/2015 08:30:08 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (02/03/2015 10:27:42 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068

Error: (02/03/2015 10:27:42 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068

Error: (02/03/2015 10:27:42 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068

Error: (02/03/2015 10:27:34 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068

Error: (02/03/2015 10:27:34 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068

Error: (02/03/2015 10:27:34 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068

Error: (02/03/2015 10:27:28 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068

Error: (02/03/2015 10:27:28 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068

Error: (02/03/2015 10:27:28 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068

Error: (02/03/2015 10:25:40 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068


Microsoft Office Sessions:
=========================
Error: (02/03/2015 10:27:06 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/03/2015 10:26:27 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exe Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exe" Revo Uninstaller Pro's restore point - QuickTime 2015 Packages0x8007043c

Error: (02/03/2015 10:25:36 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Dad\Desktop\esetsmartinstaller_enu.exe

Error: (02/03/2015 10:21:31 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/03/2015 10:19:44 AM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Access is denied.


Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {baae700c-cc61-4732-9a8c-1e02bd7b1d13}

Error: (02/03/2015 10:19:10 AM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Access is denied.


Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {baae700c-cc61-4732-9a8c-1e02bd7b1d13}

Error: (02/03/2015 09:24:22 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: dsisetup464480652.exe0.0.0.02a425e19dsisetup464480652.exe0.0.0.02a425e19c0000005000028101d1801d03fc5737b318eC:\Users\Dad\AppData\Local\dsisetup464480652.exeC:\Users\Dad\AppData\Local\dsisetup464480652.exeba6f92f1-abb8-11e4-a7fe-02060d5d6465

Error: (02/03/2015 04:33:52 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe35.0.1.550054c1f9f3mozalloc.dll35.0.1.550054c1f224800000030000142559c01d03f9cba71a908C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll2556d749-ab90-11e4-a7fe-02060d5d6465

Error: (02/02/2015 08:46:46 PM) (Source: CVHSVC) (EventID: 100) (User: )
Description: Error: The server returned an invalid or unrecognized response
ErrorCode: 14007(0x36b7).

Error: (02/02/2015 08:30:08 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i3-2120 CPU @ 3.30GHz
Percentage of memory in use: 15%
Total physical RAM: 6048.28 MB
Available physical RAM: 5106.27 MB
Total Pagefile: 12094.74 MB
Available Pagefile: 11220.72 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: (Gateway) (Fixed) (Total:918.41 GB) (Free:807.56 GB) NTFS
Drive d: (MAN_OF_STEEL) (CDROM) (Total:7.57 GB) (Free:0 GB) UDF
Drive k: (FreeAgent GoFlex Drive) (Fixed) (Total:465.76 GB) (Free:0.04 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 5D81C09C)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=918.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 465.8 GB) (Disk ID: 4E80EAC4)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== End Of Log ============================
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2015
Ran by Dad (administrator) on BRIDGES1 on 03-02-2015 10:51:31
Running from C:\Users\Dad\Desktop\FRST-OlderVersion
Loaded Profiles: Dad (Available profiles: Dad)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Taplika)
Boot Mode: Safe Mode (with Networking)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\RunOnce: [WSE_Taplika] => C:\Windows\SysWOW64\wscript.exe /E:vbscript /B "C:\Users\Dad\AppData\Roaming\WSE_Taplika\UpdateProc\bkup.dat"
HKLM-x32\...\RunOnce: [DelTr96190] => cmd.exe /c rd /s /q "C:\Users\Dad\AppData\Roaming\WSE_Taplika"
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\Run: [GoogleChromeAutoLaunch_C1DAAF30A00C843105EF5E39636EB999] => C:\Users\Dad\AppData\Local\Taplika\Application\taplika.exe [754176 2014-11-06] ()
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\Run: [Google Update] => C:\Users\Dad\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2015-02-03] (Google Inc.)
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\Run: [Google+ Auto Backup] => C:\Users\Dad\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3746120 2014-08-12] (Google Inc.)
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\RunOnce: [WSE_Taplika] => [X]
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\RunOnce: [DelTr96190] => cmd.exe /c rd /s /q "C:\Users\Dad\AppData\Roaming\WSE_Taplika"
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\RunOnce: [ArcadeGiant508] => cmd.exe /c rmdir "C:\Users\Dad\AppData\Local\ArcadeGiant" /s /q
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\RunOnce: [ArcadeGiant120] => cmd.exe /s /c reg delete "HKCU\Software\AppDataLow\ArcadeGiant" /f
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\MountPoints2: {474142ab-da60-11e1-b2fb-e840f20c0b8d} - J:\EasySuite.exe
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\MountPoints2: {474142ae-da60-11e1-b2fb-e840f20c0b8d} - E:\EasySuite.exe
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\MountPoints2: {474142b1-da60-11e1-b2fb-e840f20c0b8d} - E:\EasySuite.exe
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1me10IE10ENUS/MSN_WCP
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {4C4C7AAB-5854-4241-A414-E2F1EF119C4A} URL = http://www.dnsbasic.com/?prt=DNSBASIC111&sp=&keywords={searchTerms}
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.42.129
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396
FF DefaultSearchEngine: Taplika
FF SearchEngineOrder.1: Yahoo
FF SearchEngineOrder.2:
FF SelectedSearchEngine: Taplika
FF Homepage: hxxp://taplika.com/?f=1&a=tlk_dwndlm_15_06_ff&cd=2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0CtD0Bzz0D0FyE0DtAtN0D0Tzu0StCtCtBzytN1L2XzutAtFyBtFtBtFtDtN1L1CzutCyEtBzytDyD1V1BtAtN1L1G1B1V1N2Y1L1Qzu2StByD0AtDtAyEyBzytGzyyD0F0FtG0Ezy0F0BtG0EyCtA0BtGyCzytB0ByC0AtByBtDtA0A0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyB0FyCzz0E0AtDtG0AzyyB0CtGyE0C0C0BtGzy0Ezy0FtGyEyByCyEtCtCyD0AtDtCyEtA2Q&cr=1534779659&ir=
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_296.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll (Adobe Systems, Inc.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2107755742-302254199-1763176924-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\Dad\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKU\S-1-5-21-2107755742-302254199-1763176924-1001: @talk.google.com/O1DPlugin -> C:\Users\Dad\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKU\S-1-5-21-2107755742-302254199-1763176924-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Dad\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-2107755742-302254199-1763176924-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Dad\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Dad\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Dad\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\searchplugins\Taplika.xml
FF Extension: Booster Web - C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\Extensions\jid1-U7omKQ6kQfxMaQ@jetpack [2015-01-28]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-01-26]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: Logitech SetPoint - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-08-01]
FF Extension: No Name - C:\PROGRA~2\MOZILL~1\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
StartMenuInternet: FIREFOX.EXE - firefox.exe

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AffinegyService; C:\Program Files (x86)\Belkin\Router Setup and Monitor\BelkinService.exe [563104 2011-11-14] (Affinegy, Inc.)
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-12] (DEVGURU Co., LTD.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 cleanhlp; C:\Users\Dad\Desktop\bin\cleanhlp64.sys [57024 2015-02-02] (Emsisoft GmbH)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-30] (Malwarebytes Corporation)
S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl64.sys [22528 2011-08-02] (Apple Inc.) [File not signed]
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-11] (Microsoft Corporation)
S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]
S3 sxuptp; system32\DRIVERS\sxuptp.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-03 09:24 - 2015-02-03 09:24 - 00022528 _____ () C:\Users\Dad\AppData\Local\dsisetup464480652.exe
2015-02-03 08:28 - 2015-02-03 09:33 - 00000900 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2107755742-302254199-1763176924-1001UA.job
2015-02-03 08:28 - 2015-02-03 08:33 - 00000848 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2107755742-302254199-1763176924-1001Core.job
2015-02-03 08:28 - 2015-02-03 08:28 - 00880784 _____ (Google Inc.) C:\Users\Dad\Desktop\GoogleVoiceAndVideoSetup.exe
2015-02-03 08:28 - 2015-02-03 08:28 - 00003870 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2107755742-302254199-1763176924-1001UA
2015-02-03 08:23 - 2015-02-03 10:23 - 00000284 _____ () C:\Windows\Tasks\WSE_Taplika.job
2015-02-03 08:23 - 2015-02-03 09:24 - 00000000 ____D () C:\Users\Dad\AppData\Local\Taplika
2015-02-03 08:23 - 2015-02-03 08:23 - 00003220 _____ () C:\Windows\System32\Tasks\WSE_Taplika
2015-02-03 08:23 - 2015-02-03 08:23 - 00001852 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2015-02-03 08:23 - 2015-02-03 08:23 - 00000000 ____D () C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Taplika
2015-02-03 08:23 - 2015-02-03 08:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-02-03 08:22 - 2015-02-03 08:23 - 00000000 ____D () C:\Users\Dad\AppData\Roaming\WSE_Taplika
2015-02-03 08:22 - 2015-02-03 08:23 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2015-02-03 08:22 - 2015-02-03 08:22 - 00003128 _____ () C:\Windows\System32\Tasks\ArcadeGiant Updater
2015-02-03 08:21 - 2015-02-03 08:22 - 00000000 ____D () C:\Users\Dad\AppData\Local\ArcadeGiant
2015-02-03 08:21 - 2015-02-03 08:21 - 41945432 _____ (Apple Inc.) C:\Users\Dad\Downloads\QuickTime Setup [1].exe
2015-02-03 08:21 - 2015-02-03 08:21 - 00003254 _____ () C:\Windows\System32\Tasks\AgSupport
2015-02-02 20:04 - 2015-02-02 20:04 - 00037714 _____ () C:\Windows\SysWOW64\Result.txt
2015-02-02 20:03 - 2015-02-02 20:03 - 00401920 _____ (Farbar) C:\Users\Dad\Desktop\MiniToolBox.exe
2015-02-02 19:28 - 2015-02-02 19:28 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-02-02 19:27 - 2015-02-02 19:27 - 02347384 _____ (ESET) C:\Users\Dad\Desktop\esetsmartinstaller_enu.exe
2015-02-02 19:18 - 2015-02-02 19:18 - 00001048 _____ () C:\Users\Dad\Desktop\fixlist-1.txt
2015-02-02 14:03 - 2015-02-02 14:03 - 00004176 _____ () C:\Users\Dad\Desktop\a2scan_150202-120104.txt
2015-02-02 11:58 - 2015-02-02 11:58 - 00000694 _____ () C:\Users\Dad\Desktop\Start Emsisoft Emergency Kit.lnk
2015-02-02 11:57 - 2015-02-02 14:03 - 00000000 ____D () C:\Users\Dad\Desktop\bin
2015-02-02 11:57 - 2015-02-02 00:13 - 00432328 ____N (Emsisoft GmbH) C:\Users\Dad\Desktop\Start Emergency Kit Scanner.exe
2015-02-02 11:57 - 2015-02-02 00:13 - 00432328 ____N (Emsisoft GmbH) C:\Users\Dad\Desktop\Start Commandline Scanner.exe
2015-02-02 11:57 - 2015-02-02 00:13 - 00423064 ____N (Emsisoft GmbH) C:\Users\Dad\Desktop\Start BlitzBlank.exe
2015-02-02 11:57 - 2015-02-02 00:13 - 00004079 ____N () C:\Users\Dad\Desktop\readme.txt
2015-02-02 11:56 - 2015-02-02 11:57 - 170235400 _____ () C:\Users\Dad\Desktop\EmsisoftEmergencyKit.exe
2015-02-02 11:36 - 2015-02-03 10:51 - 00000000 ____D () C:\Users\Dad\Desktop\FRST-OlderVersion
2015-01-30 20:58 - 2015-01-30 20:58 - 02194432 _____ () C:\Users\Dad\Desktop\AdwCleaner.exe
2015-01-30 20:48 - 2015-02-02 11:33 - 00001237 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2015-01-30 20:48 - 2015-01-30 20:48 - 00000000 ____D () C:\Users\Dad\AppData\Local\VS Revo Group
2015-01-30 20:48 - 2015-01-30 20:48 - 00000000 ____D () C:\ProgramData\VS Revo Group
2015-01-30 20:48 - 2015-01-30 20:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2015-01-30 20:48 - 2015-01-30 20:48 - 00000000 ____D () C:\Program Files\VS Revo Group
2015-01-30 20:48 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2015-01-30 20:47 - 2015-01-30 20:47 - 10801480 _____ (VS Revo Group ) C:\Users\Dad\Desktop\RevoUninProSetup.exe
2015-01-28 19:58 - 2015-01-28 19:58 - 00000567 _____ () C:\Users\Dad\Desktop\aswMBR.txt
2015-01-28 19:56 - 2015-02-02 11:36 - 02131456 _____ (Farbar) C:\Users\Dad\Desktop\FRST64.exe
2015-01-28 19:56 - 2015-01-28 19:56 - 05198336 _____ (AVAST Software) C:\Users\Dad\Desktop\aswMBR.exe
2015-01-28 19:56 - 2015-01-28 19:56 - 00055206 _____ () C:\Users\Dad\Desktop\FRST.txt
2015-01-28 19:56 - 2015-01-28 19:56 - 00027818 _____ () C:\Users\Dad\Desktop\Addition.txt
2015-01-28 19:54 - 2015-01-28 19:54 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-BRIDGES1-Windows-7-Home-Premium-(64-bit).dat
2015-01-28 19:53 - 2015-01-28 19:53 - 00002242 _____ () C:\Users\Public\Desktop\Tweaking.com - Registry Backup.lnk
2015-01-28 19:52 - 2015-01-28 19:52 - 04712336 _____ () C:\Users\Dad\Desktop\tweaking.com_registry_backup_setup.exe
2015-01-28 19:51 - 2015-01-28 19:51 - 00000000 ____D () C:\ProgramData\Winferno
2015-01-28 19:47 - 2015-01-26 02:52 - 00272296 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2015-01-28 19:47 - 2015-01-26 02:52 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2015-01-28 19:47 - 2015-01-26 02:52 - 00176552 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2015-01-28 19:46 - 2015-01-28 09:45 - 00387200 _____ (Catalytix Web Services) C:\Windows\system32\CatWSPrx64.dll
2015-01-28 19:46 - 2015-01-28 09:45 - 00330808 _____ (Catalytix Web Services) C:\Windows\SysWOW64\CatWSPrx.dll
2015-01-28 19:19 - 2015-01-28 19:19 - 02930092 _____ (Gisburne Media) C:\Users\Dad\Desktop\kbplayer.exe
2015-01-28 19:19 - 2015-01-28 19:19 - 00000000 ____D () C:\Program Files (x86)\Karaoke Builder Player
2015-01-28 18:15 - 2015-01-28 18:15 - 00000000 ____D () C:\ProgramData\fpebkpiipncfojhgaddgnofadahpmcjm
2015-01-28 18:15 - 2015-01-28 18:15 - 00000000 ____D () C:\Program Files (x86)\52df7d05-df7b-4abf-8cb0-684d1a20a3e7
2015-01-28 17:54 - 2015-01-28 17:54 - 00000000 ____D () C:\Users\Dad\AppData\Roaming\Publish Providers
2015-01-28 17:35 - 2015-01-28 22:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-01-28 17:35 - 2015-01-28 17:54 - 00000000 ____D () C:\Users\Dad\AppData\Roaming\Sony
2015-01-28 17:35 - 2015-01-28 17:50 - 00000000 ____D () C:\Users\Dad\AppData\Local\Sony
2015-01-28 17:35 - 2015-01-28 17:35 - 00000000 ____D () C:\ProgramData\Sony
2015-01-28 17:35 - 2015-01-28 17:35 - 00000000 ____D () C:\Program Files (x86)\Sony
2015-01-28 09:34 - 2015-01-28 09:34 - 00389912 _____ (AnalogX, LLC) C:\Users\Dad\Downloads\autotune [1].exe
2015-01-28 09:21 - 2015-01-28 09:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Voxengo
2015-01-28 09:21 - 2015-01-28 09:26 - 00000000 ____D () C:\Program Files\Voxengo
2015-01-28 09:21 - 2015-01-28 09:26 - 00000000 ____D () C:\Program Files\Common Files\VST3
2015-01-28 09:21 - 2015-01-28 09:21 - 00000000 ____D () C:\Program Files\Common Files\Steinberg
2015-01-27 18:34 - 2015-01-27 18:34 - 00001976 _____ () C:\Users\Public\Desktop\Samsung Kies 3.lnk
2015-01-26 21:26 - 2015-02-03 10:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-25 14:50 - 2015-01-25 14:50 - 00003106 _____ () C:\Windows\System32\Tasks\{DF80F471-10C4-4247-BCB7-5B67BA005FD2}
2015-01-24 23:58 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2015-01-15 18:43 - 2014-12-18 21:06 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2015-01-15 18:43 - 2014-12-18 19:46 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-15 18:43 - 2014-12-11 11:47 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2015-01-15 18:43 - 2014-12-05 22:17 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2015-01-15 18:43 - 2014-12-05 21:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll
2015-01-15 18:43 - 2014-12-05 21:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll
2015-01-15 18:42 - 2014-12-11 23:35 - 05553592 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-15 18:42 - 2014-12-11 23:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-01-15 18:42 - 2014-12-11 23:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-01-15 18:42 - 2014-12-11 23:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-01-15 18:42 - 2014-12-11 23:11 - 03971512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-01-15 18:42 - 2014-12-11 23:11 - 03916728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-01-15 18:42 - 2014-12-11 23:07 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-01-15 18:40 - 2015-01-15 18:40 - 00000000 ____D () C:\Users\Dad\AppData\Roaming\ESET
2015-01-15 18:40 - 2015-01-15 18:40 - 00000000 ____D () C:\Users\Dad\AppData\Local\ESET
2015-01-07 16:10 - 2015-01-07 16:22 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-01-07 12:03 - 2015-01-07 12:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2015-01-05 12:21 - 2014-12-12 23:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-01-05 12:21 - 2014-12-12 21:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-01-04 15:25 - 2014-10-17 20:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-01-04 15:25 - 2014-10-17 19:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-01-04 15:24 - 2014-11-26 19:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-01-04 15:24 - 2014-11-26 19:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-01-04 15:24 - 2014-11-21 21:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-01-04 15:24 - 2014-11-21 21:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-01-04 15:24 - 2014-11-21 21:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-01-04 15:24 - 2014-11-21 20:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-01-04 15:24 - 2014-11-21 20:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-01-04 15:24 - 2014-11-21 20:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-01-04 15:24 - 2014-11-21 20:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-01-04 15:24 - 2014-11-21 20:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-01-04 15:24 - 2014-11-21 20:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-01-04 15:24 - 2014-11-21 20:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-01-04 15:24 - 2014-11-21 20:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-01-04 15:24 - 2014-11-21 20:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-01-04 15:24 - 2014-11-21 20:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-01-04 15:24 - 2014-11-21 20:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-01-04 15:24 - 2014-11-21 20:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-01-04 15:24 - 2014-11-21 20:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-01-04 15:24 - 2014-11-21 20:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-01-04 15:24 - 2014-11-21 20:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-01-04 15:24 - 2014-11-21 20:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-01-04 15:24 - 2014-11-21 20:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-01-04 15:24 - 2014-11-21 20:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-01-04 15:24 - 2014-11-21 20:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-01-04 15:24 - 2014-11-21 20:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-01-04 15:24 - 2014-11-21 20:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-01-04 15:24 - 2014-11-21 20:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-01-04 15:24 - 2014-11-21 20:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-01-04 15:24 - 2014-11-21 20:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-01-04 15:24 - 2014-11-21 19:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-01-04 15:24 - 2014-11-21 19:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-01-04 15:24 - 2014-11-21 19:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-01-04 15:24 - 2014-11-21 19:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-01-04 15:24 - 2014-11-21 19:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-01-04 15:24 - 2014-11-21 19:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-01-04 15:24 - 2014-11-21 19:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-01-04 15:24 - 2014-11-21 19:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-01-04 15:24 - 2014-11-21 19:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-01-04 15:24 - 2014-11-21 19:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-01-04 15:24 - 2014-11-21 19:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-01-04 15:24 - 2014-11-21 19:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-01-04 15:24 - 2014-11-21 19:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-01-04 15:24 - 2014-11-21 19:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-01-04 15:24 - 2014-11-21 19:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-01-04 15:24 - 2014-11-21 19:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-01-04 15:24 - 2014-11-21 19:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-01-04 15:24 - 2014-11-21 19:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-01-04 15:24 - 2014-11-21 19:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-01-04 15:24 - 2014-11-21 19:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-01-04 15:24 - 2014-11-21 19:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-01-04 15:24 - 2014-11-21 19:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-01-04 15:24 - 2014-11-21 19:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-01-04 15:24 - 2014-11-21 18:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-01-04 15:24 - 2014-11-21 18:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-01-04 15:23 - 2014-11-10 21:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-01-04 15:23 - 2014-11-10 20:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-01-04 15:22 - 2014-10-29 20:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-01-04 15:22 - 2014-10-29 19:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2015-01-04 15:22 - 2014-10-02 20:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-01-04 15:22 - 2014-10-02 20:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-01-04 15:22 - 2014-10-02 20:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-01-04 15:22 - 2014-10-02 20:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-01-04 15:22 - 2014-10-02 20:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-01-04 15:22 - 2014-10-02 19:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2015-01-04 15:22 - 2014-10-02 19:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2015-01-04 15:22 - 2014-10-02 19:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2015-01-04 15:22 - 2014-10-02 19:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2015-01-04 15:22 - 2014-10-02 19:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2015-01-04 15:19 - 2014-11-07 21:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-01-04 15:19 - 2014-11-07 20:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-01-04 15:12 - 2015-01-04 15:13 - 00000340 _____ () C:\Windows\LkmdfCoInst.log
2015-01-04 11:02 - 2015-01-04 11:02 - 00000000 __SHD () C:\Users\Dad\AppData\Local\EmieBrowserModeList

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-03 10:51 - 2014-10-14 12:26 - 00000000 ____D () C:\FRST
2015-02-03 10:30 - 2009-07-13 23:13 - 00783464 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-03 10:21 - 2014-10-16 10:25 - 00155336 _____ () C:\Windows\PFRO.log
2015-02-03 10:21 - 2014-09-04 19:35 - 00008850 _____ () C:\Windows\setupact.log
2015-02-03 10:21 - 2014-02-11 16:00 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-03 10:21 - 2009-07-13 23:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-03 10:20 - 2014-01-07 20:18 - 01421856 _____ () C:\Windows\WindowsUpdate.log
2015-02-03 10:16 - 2012-03-31 17:15 - 00000000 ____D () C:\Users\Dad\AppData\Local\Apple Computer
2015-02-03 09:43 - 2014-08-22 20:33 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-03 09:43 - 2013-01-04 20:52 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-03 09:24 - 2014-12-02 22:37 - 00000010 _____ () C:\Users\Dad\AppData\Local\DSI.DAT
2015-02-03 09:24 - 2012-04-06 02:18 - 00000000 ____D () C:\Users\Dad\AppData\Local\CrashDumps
2015-02-03 09:23 - 2014-02-13 10:52 - 00000136 _____ () C:\Users\Dad\AppData\Roaming\WB.CFG
2015-02-03 09:19 - 2014-02-09 16:47 - 03417600 ___SH () C:\Users\Dad\Desktop\Thumbs.db
2015-02-03 08:40 - 2014-02-13 10:57 - 00000000 ____D () C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2015-02-03 08:40 - 2012-10-03 00:44 - 00000000 ____D () C:\Users\Dad\AppData\Local\Google
2015-02-03 08:28 - 2012-10-03 00:44 - 00003474 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2107755742-302254199-1763176924-1001Core
2015-02-03 08:28 - 2012-03-29 11:48 - 00000000 ____D () C:\Users\Dad\AppData\Roaming\Mozilla
2015-02-03 05:31 - 2014-11-09 11:54 - 00000000 ____D () C:\Users\Dad\AppData\Local\Adobe
2015-02-03 05:31 - 2014-08-22 20:33 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-03 05:31 - 2014-08-22 20:33 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-03 05:31 - 2014-08-22 20:33 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-02 20:37 - 2009-07-13 22:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-02 20:37 - 2009-07-13 22:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-02 14:00 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-02 11:29 - 2014-01-04 07:24 - 00000398 _____ () C:\Windows\Tasks\Wise Turbo Checker.job
2015-01-30 21:02 - 2014-10-16 10:35 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-30 21:00 - 2014-10-15 08:47 - 00000000 ____D () C:\AdwCleaner
2015-01-30 20:56 - 2012-07-11 11:56 - 00000000 ____D () C:\Program Files (x86)\Yahoo!
2015-01-30 20:55 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2015-01-30 20:49 - 2013-01-04 20:52 - 00000000 ____D () C:\Program Files (x86)\Google
2015-01-28 22:52 - 2012-03-29 14:47 - 00000000 ____D () C:\ProgramData\Yahoo!
2015-01-28 22:51 - 2011-11-08 02:41 - 00000000 ____D () C:\ProgramData\Norton
2015-01-28 21:31 - 2014-12-04 13:31 - 00000000 ____D () C:\Users\Dad\Documents\Audio Recorder for Free
2015-01-28 21:31 - 2014-12-02 19:16 - 00000000 ____D () C:\Users\Dad\Desktop\My Recordings
2015-01-28 19:46 - 2014-10-16 15:37 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-28 19:19 - 2014-12-09 16:32 - 00001112 _____ () C:\Users\Public\Desktop\Karaoke Builder Player.lnk
2015-01-28 19:11 - 2011-11-08 02:40 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-01-28 18:47 - 2014-05-23 02:40 - 00000000 ____D () C:\Program Files (x86)\MarkAny
2015-01-28 18:47 - 2009-07-13 22:45 - 00271752 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-28 14:51 - 2012-03-29 14:02 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2015-01-28 09:28 - 2013-12-22 18:31 - 00000000 ____D () C:\Users\Dad\AppData\Roaming\Samsung
2015-01-28 09:28 - 2013-12-04 21:28 - 00000000 ____D () C:\Program Files (x86)\Samsung
2015-01-27 14:28 - 2014-02-08 19:02 - 00000000 ____D () C:\Users\Dad\Desktop\Samsung pics
2015-01-27 08:06 - 2014-12-09 11:08 - 00000000 ____D () C:\Users\Dad\Desktop\CDG.zip files
2015-01-26 05:26 - 2014-09-14 12:12 - 00000000 ____D () C:\Users\Dad\Desktop\CDG
2015-01-26 02:54 - 2013-10-17 16:34 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-26 02:52 - 2014-10-16 15:38 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-01-26 01:04 - 2014-08-04 23:52 - 02162696 _____ () C:\console.log
2015-01-25 14:57 - 2014-01-14 12:38 - 00059600 _____ () C:\Users\Dad\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-24 22:59 - 2014-11-03 14:51 - 00000000 ____D () C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dwyco CDC-X
2015-01-16 03:03 - 2013-08-16 02:00 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-16 03:00 - 2012-03-30 20:51 - 113365784 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-15 18:34 - 2012-07-18 19:56 - 00001945 _____ () C:\Windows\epplauncher.mif
2015-01-08 09:55 - 2010-11-20 21:27 - 00298120 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-01-07 17:35 - 2014-10-16 10:35 - 00096472 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-01-05 18:25 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\rescache
2015-01-05 15:49 - 2013-08-07 09:19 - 00000000 ___RD () C:\Users\Dad\Dropbox
2015-01-05 15:49 - 2013-07-07 09:31 - 00000000 ____D () C:\Users\Dad\AppData\Roaming\Dropbox
2015-01-04 15:35 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-01-04 15:12 - 2012-03-29 12:09 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2015-01-04 15:11 - 2012-03-29 11:32 - 00000000 ____D () C:\Users\Dad
2015-01-04 15:08 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files\Windows Portable Devices
2015-01-04 15:07 - 2015-01-03 16:38 - 00000000 ____D () C:\Users\Dad\AppData\Roaming\Avg_Update_1014av
2015-01-04 15:07 - 2015-01-03 16:38 - 00000000 ____D () C:\ProgramData\Avg_Update_1014av
2015-01-04 15:07 - 2015-01-03 16:31 - 00000000 ____D () C:\ProgramData\MFAData
2015-01-04 15:07 - 2014-12-09 16:32 - 00000000 ____D () C:\Users\Dad\AppData\Roaming\Karaoke Builder
2015-01-04 15:07 - 2014-10-14 12:20 - 00000000 ____D () C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2015-01-04 15:07 - 2014-10-14 12:20 - 00000000 ____D () C:\Program Files (x86)\Tweaking.com
2015-01-04 15:07 - 2014-08-22 12:20 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-01-04 15:07 - 2014-07-04 13:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Peace Art App
2015-01-04 15:07 - 2014-05-23 02:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec
2015-01-04 15:07 - 2014-01-10 23:00 - 00000000 ____D () C:\Program Files (x86)\Paltalk Messenger
2015-01-04 15:07 - 2013-04-29 03:49 - 00000000 ____D () C:\Program Files\Bonjour
2015-01-04 15:07 - 2013-04-29 03:49 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2015-01-04 15:07 - 2012-08-19 16:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
2015-01-04 15:07 - 2012-04-05 11:30 - 00000000 ____D () C:\Program Files (x86)\Microsoft Application Virtualization Client
2015-01-04 15:07 - 2012-02-06 05:15 - 00000000 ____D () C:\ProgramData\Temp
2015-01-04 15:07 - 2011-11-08 02:31 - 00000000 ___HD () C:\ProgramData\{37272A44-A110-4EB7-A5EF-88B2A05A08C4}
2015-01-04 15:07 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\servicing
2015-01-04 15:07 - 2009-07-13 21:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-01-04 15:06 - 2014-08-22 12:21 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2015-01-04 15:06 - 2013-03-16 02:01 - 00000000 __SHD () C:\Windows\SysWOW64\%APPDATA%
2015-01-04 15:06 - 2012-04-06 02:18 - 00000000 ____D () C:\Windows\SysWOW64\Adobe
2015-01-04 15:06 - 2011-11-08 02:41 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2015-01-04 15:06 - 2010-11-21 01:06 - 00000000 ____D () C:\Windows\SysWOW64\winrm
2015-01-04 15:06 - 2010-11-21 01:06 - 00000000 ____D () C:\Windows\SysWOW64\WCN
2015-01-04 15:06 - 2010-11-21 01:06 - 00000000 ____D () C:\Windows\SysWOW64\slmgr
2015-01-04 15:06 - 2010-11-21 01:06 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2015-01-04 15:06 - 2010-11-21 01:06 - 00000000 ____D () C:\Windows\system32\winrm
2015-01-04 15:06 - 2010-11-21 01:06 - 00000000 ____D () C:\Windows\system32\WCN
2015-01-04 15:06 - 2010-11-21 01:06 - 00000000 ____D () C:\Windows\system32\slmgr
2015-01-04 15:06 - 2010-11-21 01:06 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2015-01-04 15:06 - 2009-07-13 23:32 - 00000000 ____D () C:\Windows\SysWOW64\WindowsPowerShell
2015-01-04 15:06 - 2009-07-13 23:32 - 00000000 ____D () C:\Windows\system32\WindowsPowerShell
2015-01-04 15:06 - 2009-07-13 23:32 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns
2015-01-04 15:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\Web
2015-01-04 15:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\Vss
2015-01-04 15:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\spp
2015-01-04 15:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\Speech
2015-01-04 15:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\NetworkList
2015-01-04 15:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2015-01-04 15:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\Msdtc
2015-01-04 15:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz
2015-01-04 15:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\InstallShield
2015-01-04 15:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\IME
2015-01-04 15:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-01-04 15:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\SysWOW64\com
2015-01-04 15:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\sysprep
2015-01-04 15:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\spp
2015-01-04 15:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\spool
2015-01-04 15:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\Speech
2015-01-04 15:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\SMI
2015-01-04 15:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\oobe
2015-01-04 15:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\NetworkList
2015-01-04 15:06 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\registration
2015-01-04 15:05 - 2014-10-19 15:30 - 00000000 ____D () C:\Users\Dad\Documents\Dwyco
2015-01-04 15:05 - 2014-10-15 08:54 - 00000000 ____D () C:\Windows\ERUNT
2015-01-04 15:05 - 2014-05-02 02:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-01-04 15:05 - 2014-04-18 18:06 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information
2015-01-04 15:05 - 2013-03-16 02:01 - 00000000 __SHD () C:\Windows\system32\%APPDATA%
2015-01-04 15:05 - 2012-02-06 04:53 - 00000000 ____D () C:\Windows\NAPP_Dism_Log
2015-01-04 15:05 - 2011-11-08 02:41 - 00000000 ____D () C:\Windows\system32\Macromed
2015-01-04 15:05 - 2011-11-08 02:33 - 00000000 ____D () C:\Windows\es
2015-01-04 15:05 - 2011-11-08 02:31 - 00000000 ____D () C:\Windows\oem
2015-01-04 15:05 - 2009-07-13 23:32 - 00000000 ____D () C:\Windows\Performance
2015-01-04 15:05 - 2009-07-13 22:45 - 00000000 ____D () C:\Windows\Setup
2015-01-04 15:05 - 2009-07-13 21:20 - 00000000 __RSD () C:\Windows\Media
2015-01-04 15:05 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\MUI
2015-01-04 15:05 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\Msdtc
2015-01-04 15:05 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\migwiz
2015-01-04 15:05 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\IME
2015-01-04 15:05 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-01-04 15:05 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\system32\com
2015-01-04 15:05 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\Speech
2015-01-04 15:05 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\security
2015-01-04 15:05 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\schemas
2015-01-04 15:05 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\Resources
2015-01-04 15:05 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\PLA
2015-01-04 15:05 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\IME
2015-01-04 15:05 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\Help
2015-01-04 15:05 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\Globalization
2015-01-04 15:05 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\Branding
2015-01-04 15:05 - 2009-07-13 21:20 - 00000000 ____D () C:\Windows\AppCompat
2015-01-04 15:04 - 2014-12-02 18:54 - 00000000 ____D () C:\Program Files (x86)\PreSonus
2015-01-04 15:04 - 2014-10-16 10:35 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-01-04 15:04 - 2014-08-01 23:23 - 00000000 ____D () C:\Program Files\Logitech
2015-01-04 15:04 - 2014-04-18 20:20 - 00000000 ____D () C:\Program Files (x86)\Canon
2015-01-04 15:04 - 2014-04-18 18:05 - 00000000 ___HD () C:\Program Files\CanonBJ
2015-01-04 15:04 - 2013-09-18 01:41 - 00000000 ____D () C:\Program Files\behringer
2015-01-04 15:04 - 2013-08-07 23:30 - 00000000 ____D () C:\Program Files (x86)\AVS4YOU
2015-01-04 15:04 - 2013-05-13 16:12 - 00000000 ____D () C:\Program Files (x86)\EPUBSOFT
2015-01-04 15:04 - 2013-04-29 09:46 - 00000000 ____D () C:\Program Files\iTunes
2015-01-04 15:04 - 2013-04-29 09:46 - 00000000 ____D () C:\Program Files\iPod
2015-01-04 15:04 - 2013-04-29 09:46 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-01-04 15:04 - 2013-03-16 02:01 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-01-04 15:04 - 2013-03-16 02:01 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-01-04 15:04 - 2012-10-20 15:41 - 00000000 ____D () C:\Program Files (x86)\Belkin
2015-01-04 15:04 - 2012-09-17 10:56 - 00000000 ____D () C:\Program Files (x86)\Outsim
2015-01-04 15:04 - 2012-09-17 10:50 - 00000000 ____D () C:\Program Files (x86)\Image-Line
2015-01-04 15:04 - 2012-04-15 16:50 - 00000000 ____D () C:\Program Files\Defraggler
2015-01-04 15:04 - 2012-04-15 16:49 - 00000000 ____D () C:\Program Files\CCleaner
2015-01-04 15:04 - 2012-04-06 10:37 - 00000000 ____D () C:\Program Files (x86)\Freemake
2015-01-04 15:04 - 2012-04-06 02:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
2015-01-04 15:04 - 2012-04-05 11:35 - 00000000 __RHD () C:\MSOCache
2015-01-04 15:04 - 2012-04-05 11:30 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-01-04 15:04 - 2012-03-29 17:20 - 00000000 ____D () C:\Program Files (x86)\Logitech
2015-01-04 15:04 - 2012-03-29 15:08 - 00000000 ____D () C:\Program Files (x86)\The Anubis Group
2015-01-04 15:04 - 2012-03-29 12:09 - 00000000 ____D () C:\Program Files\Common Files\Logishrd
2015-01-04 15:04 - 2012-02-06 05:17 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-01-04 15:04 - 2012-02-06 05:15 - 00000000 ____D () C:\Program Files (x86)\CyberLink
2015-01-04 15:04 - 2012-02-06 05:12 - 00000000 ____D () C:\Program Files\Realtek
2015-01-04 15:04 - 2012-02-06 05:10 - 00000000 ____D () C:\Program Files (x86)\Etron Technology
2015-01-04 15:04 - 2012-02-06 05:07 - 00000000 ____D () C:\Program Files (x86)\Realtek
2015-01-04 15:04 - 2012-02-06 04:58 - 00000000 ____D () C:\Program Files\Common Files\Intel
2015-01-04 15:04 - 2011-11-08 02:33 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-01-04 15:04 - 2011-11-08 02:32 - 00000000 ____D () C:\Program Files\Windows Live
2015-01-04 15:04 - 2011-11-08 02:32 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2015-01-04 15:04 - 2011-11-08 02:31 - 00000000 ____D () C:\Program Files\Gateway
2015-01-04 15:04 - 2011-11-08 02:31 - 00000000 ____D () C:\Program Files (x86)\Gateway
2015-01-04 15:04 - 2011-11-08 02:24 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-01-04 15:04 - 2011-11-08 02:24 - 00000000 ____D () C:\Program Files (x86)\Intel
2015-01-04 15:04 - 2011-11-08 02:15 - 00000000 ___HD () C:\OEM
2015-01-04 15:04 - 2011-08-17 21:01 - 00000000 ___HD () C:\dad
2015-01-04 15:04 - 2011-08-17 20:39 - 00000000 ____D () C:\C_
2015-01-04 15:04 - 2010-11-21 01:17 - 00000000 ____D () C:\Program Files\Windows Journal
2015-01-04 15:04 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
2015-01-04 15:04 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2015-01-04 15:04 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files\Windows Defender
2015-01-04 15:04 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files\Reference Assemblies
2015-01-04 15:04 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files\MSBuild
2015-01-04 15:04 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files\Microsoft Games
2015-01-04 15:04 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files\DVD Maker
2015-01-04 15:04 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
2015-01-04 15:04 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2015-01-04 15:04 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-01-04 15:04 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies
2015-01-04 15:04 - 2009-07-13 23:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2015-01-04 15:04 - 2009-07-13 21:20 - 00000000 ____D () C:\Program Files\Windows NT
2015-01-04 15:04 - 2009-07-13 21:20 - 00000000 ____D () C:\Program Files\Common Files\System
2015-01-04 15:04 - 2009-07-13 21:20 - 00000000 ____D () C:\Program Files\Common Files\SpeechEngines
2015-01-04 15:04 - 2009-07-13 21:20 - 00000000 ____D () C:\Program Files (x86)\Windows NT
2015-01-04 14:51 - 2015-01-03 16:34 - 00000000 ____D () C:\ProgramData\AVG2015

==================== Files in the root of some directories =======

2013-08-07 06:12 - 2014-11-16 00:53 - 0001181 _____ () C:\Users\Dad\AppData\Roaming\trace_FilterInstaller.1.txt
2013-08-07 06:12 - 2014-03-30 11:59 - 0000919 _____ () C:\Users\Dad\AppData\Roaming\trace_FilterInstaller.2.txt
2013-08-07 06:12 - 2014-03-29 18:54 - 0001181 _____ () C:\Users\Dad\AppData\Roaming\trace_FilterInstaller.3.txt
2013-08-07 06:12 - 2013-08-07 06:34 - 0000919 _____ () C:\Users\Dad\AppData\Roaming\trace_FilterInstaller.4.txt
2013-08-07 06:12 - 2013-08-07 06:12 - 0001181 _____ () C:\Users\Dad\AppData\Roaming\trace_FilterInstaller.5.txt
2013-08-07 06:12 - 2014-12-02 18:47 - 0000919 _____ () C:\Users\Dad\AppData\Roaming\trace_FilterInstaller.txt
2013-08-07 06:12 - 2014-12-02 18:47 - 0000000 _____ () C:\Users\Dad\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2012-05-12 15:58 - 2012-05-12 15:58 - 0024597 _____ () C:\Users\Dad\AppData\Roaming\UserTile.png
2014-09-01 02:18 - 2014-09-01 02:18 - 0001248 _____ () C:\Users\Dad\AppData\Roaming\UZNYUL
2014-02-13 10:52 - 2015-02-03 09:23 - 0000136 _____ () C:\Users\Dad\AppData\Roaming\WB.CFG
2014-09-01 02:18 - 2014-09-01 02:18 - 0002086 _____ () C:\Users\Dad\AppData\Roaming\WTPQZFD
2012-04-14 21:46 - 2014-01-03 22:33 - 0119296 _____ () C:\Users\Dad\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-12-02 22:37 - 2015-02-03 09:24 - 0000010 _____ () C:\Users\Dad\AppData\Local\DSI.DAT
2015-02-03 09:24 - 2015-02-03 09:24 - 0022528 _____ () C:\Users\Dad\AppData\Local\dsisetup464480652.exe
2012-08-18 05:51 - 2012-08-18 05:51 - 0004028 _____ () C:\Users\Dad\AppData\Local\HWVendorDetection.log
2013-01-10 08:07 - 2013-01-10 08:07 - 0000866 _____ () C:\Users\Dad\AppData\Local\recently-used.xbel
2012-07-16 06:22 - 2014-01-11 09:02 - 0007629 _____ () C:\Users\Dad\AppData\Local\Resmon.ResmonCfg
2012-03-29 12:09 - 2012-03-29 12:09 - 0017408 _____ () C:\Users\Dad\AppData\Local\WebpageIcons.db
2013-04-11 00:27 - 2013-04-11 00:27 - 0000000 _____ () C:\ProgramData\2a3b3a3028372a59_c
2012-11-19 02:10 - 2012-11-19 02:10 - 0000105 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc

Some content of TEMP:
====================
C:\Users\Dad\AppData\Local\Temp\SpOrder.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-16 09:14

==================== End Of Log ============================

 

[rcb56]

also juliet i'm getting this popped up quite frequent...i think it was part of the quicktime i d'loaded and uninstalled earlier

there was a problem starting


C:\Users\Dad\AppData\Local|ARCADE~1\AgHelp.dll

the specified module could not be found

 

[Juliet]

Don't know what your using for an antivirus but let me post info on some you might want to consider

• 
  avast! Free Anti-Virus (free)
• 
  Avira AntiVir Personal - Free Antivirus
• Microsoft Security Essentials (free)
• ESET NOD32 Anti-Virus (paid)
• Kaspersky Anti-Virus (paid)
• 
  Emsisoft Internet Security (paid)

~~~~

Next, launch Notepad, (Start > Run, type in: notepad) copy and paste next present in the quotebox below in it: (don't forget to copy and paste REGEDIT4)

REGEDIT4

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ConduitFloatingPlugin_lcnnhcneegeeojhgpfijnlnocjdmlaon]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ConduitFloatingPlugin lcnnhcneegeeojhgpfijnlnocjdmlaon"=-

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Obrona Block Ads]

Save this as fix.reg and change the "Save as type" to "All Files" and place it on your desktop. It should look like this:

Double-click on it and when it asks you if you want to merge the contents to the registry, click "Yes" or "OK". You should receive a message that it was successful. You may delete the file afterwards

~~~~~~~~~~~~~~~~~~~~~~~~~

Taplika (HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\Taplika) (Version: 31.0.1650.23 - Taplika) <==== ATTENTION!
The above entry should had been taken out using MBAM, we can go to add/remove programs list to uninstall/delete or run MBAM again (Updated first)


Open notepad. Please copy the contents of the quote box below. To do this highlight the contents of the box and right click on it and select copy.
Paste this into the open notepad. save it to the Desktop as fixlist.txt
NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
It needs to be saved Next to the "Farbar Recovery Scan Tool" (If asked to overwrite existing one please allow)

start
CloseProcesses:
Task: {3300F4CE-D879-4D35-8449-19AFCAB8A938} - System32\Tasks\WSE_Taplika => C:\Users\Dad\AppData\Roaming\WSE_TA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {474B6DAF-131A-4A72-908B-2653EDE97FBF} - System32\Tasks\ArcadeGiant Updater => C:\Users\Dad\AppData\Local\ArcadeGiant\updater.exe [2015-02-03] (ArcadeGiant) <==== ATTENTION
Task: {89903DAE-62F9-4E24-BF41-F181F8031DD0} - System32\Tasks\AgSupport => Rundll32.exe C:\Users\Dad\AppData\Local\ARCADE~1\AgHelp.dll,Start
Task: C:\Windows\Tasks\WSE_Taplika.job => C:\Users\Dad\AppData\Roaming\WSE_TA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
C:\Users\Dad\AppData\Local\Obrona Block Ads\ObronaBlockAds.exe
HKLM-x32\...\RunOnce: [WSE_Taplika] => C:\Windows\SysWOW64\wscript.exe /E:vbscript /B "C:\Users\Dad\AppData\Roaming\WSE_Taplika\UpdateProc\bkup.dat"
HKLM-x32\...\RunOnce: [DelTr96190] => cmd.exe /c rd /s /q "C:\Users\Dad\AppData\Roaming\WSE_Taplika"
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\Run: [GoogleChromeAutoLaunch_C1DAAF30A00C843105EF5E39636EB999] => C:\Users\Dad\AppData\Local\Taplika\Application\taplika.exe [754176 2014-11-06] ()
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\RunOnce: [WSE_Taplika] => [X]
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\RunOnce: [DelTr96190] => cmd.exe /c rd /s /q "C:\Users\Dad\AppData\Roaming\WSE_Taplika"
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\RunOnce: [ArcadeGiant508] => cmd.exe /c rmdir "C:\Users\Dad\AppData\Local\ArcadeGiant" /s /q
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\RunOnce: [ArcadeGiant120] => cmd.exe /s /c reg delete "HKCU\Software\AppDataLow\ArcadeGiant" /f
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF DefaultSearchEngine: Taplika
FF SearchEngineOrder.1: Yahoo
FF SelectedSearchEngine: Taplika
FF Homepage: hxxp://taplika.com/?f=1&a=tlk_dwndlm_15_06_ff&cd=2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0CtD0Bzz0D0FyE0DtAtN0D0Tzu0StCtCtBzytN1L2XzutAtFyBtFtBtFtDtN1L1CzutCyEtBzytDyD1V1BtAtN1L1G1B1V1N2Y1L1Qzu2StByD0AtDtAyEyBzytGzyyD0F0FtG0Ezy0F0BtG0EyCtA0BtGyCzytB0ByC0AtByBtDtA0A0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyB0FyCzz0E0AtDtG0AzyyB0CtGyE0C0C0BtGzy0Ezy0FtGyEyByCyEtCtCyD0AtDtCyEtA2Q&cr=1534779659&ir=
FF SearchPlugin: C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\searchplugins\Taplika.xml
FF Extension: No Name - C:\PROGRA~2\MOZILL~1\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
2015-02-03 08:23 - 2015-02-03 10:23 - 00000284 _____ () C:\Windows\Tasks\WSE_Taplika.job
2015-02-03 08:23 - 2015-02-03 09:24 - 00000000 ____D () C:\Users\Dad\AppData\Local\Taplika
2015-02-03 08:23 - 2015-02-03 08:23 - 00003220 _____ () C:\Windows\System32\Tasks\WSE_Taplika
2015-02-03 08:23 - 2015-02-03 08:23 - 00000000 ____D () C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Taplika
2015-02-03 08:22 - 2015-02-03 08:23 - 00000000 ____D () C:\Users\Dad\AppData\Roaming\WSE_Taplika
2015-02-03 08:22 - 2015-02-03 08:22 - 00003128 _____ () C:\Windows\System32\Tasks\ArcadeGiant Updater
2015-02-03 08:21 - 2015-02-03 08:22 - 00000000 ____D () C:\Users\Dad\AppData\Local\ArcadeGiant
C:\Users\Dad\AppData\Local\Temp\SpOrder.dll
C:\Users\Dad\AppData\Local|ARCADE~1\AgHelp.dll
EmptyTemp:
Hosts:
End

Open FRST/FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

~~~~~~
Please run a Threat Scan with Malwarebytes' Anti-Malware.

Right click and choose "Run as administrator" to open Malwarebytes Anti-Malware and from the Dashboard please Check for Updates by clicking the Update Now... link
Open up Malwarebytes > Settings > Detection and Protection > Enable Scan for rootkit and Under Non Malware Protection set both PUP and PUM to Treat detections as malware.
Click on the SCAN button and run a Threat Scan with Malwarebytes Anti-Malware by clicking the Scan Now>> button.
Once completed please click on the History > Application Logs and find your scan log and open it and then click on the "copy to clipboard" button and post back the results on your next reply.

Please post
Fixlog.txt
MBAM log

 

[rcb56]

i was using microsoft essentials when all this happened, when i used the eset scanner i saw they had a trial ver. and had been using it.

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 2/3/2015
Scan Time: 3:45:00 PM
Logfile:
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.02.03.07
Rootkit Database: v2015.02.03.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Dad

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 347691
Time Elapsed: 11 min, 41 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 3
PUP.Optional.Taplika.A, HKU\S-1-5-21-2107755742-302254199-1763176924-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Taplika Browser, Quarantined, [987aca50b4d62d091e30cbba4ab912ee],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2107755742-302254199-1763176924-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, Quarantined, [40d217034248df573fd4aa20669db848],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2107755742-302254199-1763176924-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, Quarantined, [21f101190b7f7cba4fd87b657490b24e],

Registry Values: 1
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2107755742-302254199-1763176924-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0U1N2S1K1M, Quarantined, [21f101190b7f7cba4fd87b657490b24e]

Registry Data: 0
(No malicious items detected)

Folders: 17
PUP.Optional.SmootherWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\jetpack\jid1-U7omKQ6kQfxMaQ@jetpack, Quarantined, [d2407e9cb9d1e94d4393e394fc07a759],
PUP.Optional.SmootherWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\jetpack\jid1-U7omKQ6kQfxMaQ@jetpack\simple-storage, Quarantined, [d2407e9cb9d1e94d4393e394fc07a759],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\defaults, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\defaults\preferences, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\locale, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\resources, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\resources\addon-sdk, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\resources\addon-sdk\lib, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\resources\livecharity, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\resources\livecharity\data, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\resources\livecharity\data\fonts, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\resources\livecharity\data\img, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\resources\smootherweb, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\resources\smootherweb\data, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\resources\smootherweb\lib, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\resources\smootherweb\tests, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],

Files: 16
PUP.Optional.Taplika.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\h46m51x5.default-1342635577168\searchplugins\Taplika.xml, Quarantined, [18fa5fbb9eecf244123bdfa6dd2617e9],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\.buildpath, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\.project, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\bootstrap.js, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\harness-options.json, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\icon.png, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\icon64.png, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\install.rdf, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\locales.json, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\defaults\preferences\prefs.js, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\resources\smootherweb\data\content.js, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\resources\smootherweb\data\easylist.txt, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\resources\smootherweb\lib\ajax.js, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\resources\smootherweb\lib\main.js, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\resources\smootherweb\lib\main.js-backup, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],
PUP.Optional.BoosterWeb.A, C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\extensions\jid1-U7omKQ6kQfxMaQ@jetpack\resources\smootherweb\lib\main.js-backup last, Quarantined, [c44e17030b7f5ed8ef80701144bf02fe],

Physical Sectors: 0
(No malicious items detected)


(end)

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 01-02-2015
Ran by Dad at 2015-02-03 15:42:03 Run:8
Running from C:\Users\Dad\Desktop
Loaded Profiles: Dad (Available profiles: Dad)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
CloseProcesses:
Task: {3300F4CE-D879-4D35-8449-19AFCAB8A938} - System32\Tasks\WSE_Taplika => C:\Users\Dad\AppData\Roaming\WSE_TA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {474B6DAF-131A-4A72-908B-2653EDE97FBF} - System32\Tasks\ArcadeGiant Updater => C:\Users\Dad\AppData\Local\ArcadeGiant\updater.exe [2015-02-03] (ArcadeGiant) <==== ATTENTION
Task: {89903DAE-62F9-4E24-BF41-F181F8031DD0} - System32\Tasks\AgSupport => Rundll32.exe C:\Users\Dad\AppData\Local\ARCADE~1\AgHelp.dll,Start
Task: C:\Windows\Tasks\WSE_Taplika.job => C:\Users\Dad\AppData\Roaming\WSE_TA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
C:\Users\Dad\AppData\Local\Obrona Block Ads\ObronaBlockAds.exe
HKLM-x32\...\RunOnce: [WSE_Taplika] => C:\Windows\SysWOW64\wscript.exe /E:vbscript /B "C:\Users\Dad\AppData\Roaming\WSE_Taplika\UpdateProc\bkup.dat"
HKLM-x32\...\RunOnce: [DelTr96190] => cmd.exe /c rd /s /q "C:\Users\Dad\AppData\Roaming\WSE_Taplika"
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\Run: [GoogleChromeAutoLaunch_C1DAAF30A00C843105EF5E39636EB999] => C:\Users\Dad\AppData\Local\Taplika\Application\taplika.exe [754176 2014-11-06] ()
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\RunOnce: [WSE_Taplika] => [X]
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\RunOnce: [DelTr96190] => cmd.exe /c rd /s /q "C:\Users\Dad\AppData\Roaming\WSE_Taplika"
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\RunOnce: [ArcadeGiant508] => cmd.exe /c rmdir "C:\Users\Dad\AppData\Local\ArcadeGiant" /s /q
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\...\RunOnce: [ArcadeGiant120] => cmd.exe /s /c reg delete "HKCU\Software\AppDataLow\ArcadeGiant" /f
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF DefaultSearchEngine: Taplika
FF SearchEngineOrder.1: Yahoo
FF SelectedSearchEngine: Taplika
FF Homepage: hxxp://taplika.com/?f=1&a=tlk_dwndlm_15_06_ff&cd=2XzuyEtN2Y1L1Qzu0EzzyEtD0FtBtD0CtD0Bzz0D0FyE0DtAtN0D0Tzu0StCtCtBzytN1L2XzutAtFyBtFtBtFtDtN1L1CzutCyEtBzytDyD1V1BtAtN1L1G1B1V1N2Y1L1Qzu2StByD0AtDtAyEyBzytGzyyD0F0FtG0Ezy0F0BtG0EyCtA0BtGyCzytB0ByC0AtByBtDtA0A0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyB0FyCzz0E0AtDtG0AzyyB0CtGyE0C0C0BtGzy0Ezy0FtGyEyByCyEtCtCyD0AtDtCyEtA2Q&cr=1534779659&ir=
FF SearchPlugin: C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\searchplugins\Taplika.xml
FF Extension: No Name - C:\PROGRA~2\MOZILL~1\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
2015-02-03 08:23 - 2015-02-03 10:23 - 00000284 _____ () C:\Windows\Tasks\WSE_Taplika.job
2015-02-03 08:23 - 2015-02-03 09:24 - 00000000 ____D () C:\Users\Dad\AppData\Local\Taplika
2015-02-03 08:23 - 2015-02-03 08:23 - 00003220 _____ () C:\Windows\System32\Tasks\WSE_Taplika
2015-02-03 08:23 - 2015-02-03 08:23 - 00000000 ____D () C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Taplika
2015-02-03 08:22 - 2015-02-03 08:23 - 00000000 ____D () C:\Users\Dad\AppData\Roaming\WSE_Taplika
2015-02-03 08:22 - 2015-02-03 08:22 - 00003128 _____ () C:\Windows\System32\Tasks\ArcadeGiant Updater
2015-02-03 08:21 - 2015-02-03 08:22 - 00000000 ____D () C:\Users\Dad\AppData\Local\ArcadeGiant
C:\Users\Dad\AppData\Local\Temp\SpOrder.dll
C:\Users\Dad\AppData\Local|ARCADE~1\AgHelp.dll
EmptyTemp:
Hosts:
End
*****************

Processes closed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3300F4CE-D879-4D35-8449-19AFCAB8A938}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3300F4CE-D879-4D35-8449-19AFCAB8A938}" => Key deleted successfully.
C:\Windows\System32\Tasks\WSE_Taplika => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WSE_Taplika" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{474B6DAF-131A-4A72-908B-2653EDE97FBF}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{474B6DAF-131A-4A72-908B-2653EDE97FBF}" => Key deleted successfully.
C:\Windows\System32\Tasks\ArcadeGiant Updater => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ArcadeGiant Updater" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{89903DAE-62F9-4E24-BF41-F181F8031DD0}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{89903DAE-62F9-4E24-BF41-F181F8031DD0}" => Key deleted successfully.
C:\Windows\System32\Tasks\AgSupport => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AgSupport" => Key deleted successfully.
C:\Windows\Tasks\WSE_Taplika.job => Moved successfully.
"C:\Users\Dad\AppData\Local\Obrona Block Ads\ObronaBlockAds.exe" => File/Directory not found.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\WSE_Taplika => Value not found.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\DelTr96190 => Value not found.
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_C1DAAF30A00C843105EF5E39636EB999 => Value not found.
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce\\WSE_Taplika => Value not found.
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce\\DelTr96190 => Value not found.
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ArcadeGiant508 => Value not found.
HKU\S-1-5-21-2107755742-302254199-1763176924-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ArcadeGiant120 => Value not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
Firefox DefaultSearchEngine deleted successfully.
Firefox SearchEngineOrder.1 deleted successfully.
Firefox SelectedSearchEngine deleted successfully.
Firefox homepage deleted successfully.
C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\searchplugins\Taplika.xml => Moved successfully.
C:\PROGRA~2\MOZILL~1\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} not found.
"C:\Windows\Tasks\WSE_Taplika.job" => File/Directory not found.
"C:\Users\Dad\AppData\Local\Taplika" => File/Directory not found.
"C:\Windows\System32\Tasks\WSE_Taplika" => File/Directory not found.
"C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Taplika" => File/Directory not found.
"C:\Users\Dad\AppData\Roaming\WSE_Taplika" => File/Directory not found.
"C:\Windows\System32\Tasks\ArcadeGiant Updater" => File/Directory not found.
"C:\Users\Dad\AppData\Local\ArcadeGiant" => File/Directory not found.
C:\Users\Dad\AppData\Local\Temp\SpOrder.dll => Moved successfully.
"C:\Users\Dad\AppData\Local|ARCADE~1\AgHelp.dll" => File/Directory not found.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 835.5 MB temporary data.


The system needed a reboot.

==== End of Fixlog 15:42:58 ====

 

[Juliet]

Goodness we found a ton of junk

How's the computer?

 

[rcb56]

i believe there was a load here huh? it seems to be doing ok...a lot better...and that is a big improvement. i just used the link you gave for firefox and just reinstalled it. i'll know more in a little bit about any pop ups or excessive tabs and all.

 

[Juliet]

Let's run an online scan for assurance

ESET Online Scan
Note: This scan may take a long time to complete. Please do not browse the Internet whilst your Anti-Virus is disabled.

• Please download ESET Online Scan and save the file to your Desktop.
• Temporarily disable your anti-virus software. For instructions, please refer to the following link.
• Double-click esetsmartinstaller_enu.exe to run the programme.
• Agree to the EULA by placing a checkmark next to Yes, I accept the Terms of Use. Then click Start.
• Agree to the Terms of Use once more and click Start. Allow components to download.
• Place a checkmark next to Enable detection of potentially unwanted applications.
• Click Advanced settings. Place a checkmark next to:
  • Scan archives
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth technology
• Ensure Remove found threats is unchecked.
• Click Start.
• Wait for the scan to finish. Please be patient as this can take some time.
• Upon completion, click
  
  . If no threats were found, skip the next two bullet points.
• Click
  
  and save the file to your Desktop, naming it something such as "MyEsetScan".
• Push the Back button.
• Place a checkmark next to
  
  and click
  
  .
• Re-enable your anti-virus software.
• Copy the contents of the log and paste in your next reply.
  

======================================================

 

[rcb56]

ok...is it the same to run the trial of eset? i started it about an hour or so ago and is almost through. so far it has found 18 threats and cleaned three. if i need to run the online scanner i will, it may be tomorrow before i post again. so far firefox has done fine and all the new tabs and windows popping up have stopped. none!

 

[Juliet]

ok...is it the same to run the trial of eset? i started it about an hour or so ago and is almost through. so far it has found 18 threats and cleaned three. if i need to run the online scanner i will, it may be tomorrow before i post again. so far firefox has done fine and all the new tabs and windows popping up have stopped. none!

That should be the free online scanner?

Good deal for Firefox!

Sometimes these infections can be quite a bugger to get rid of.

 

[rcb56]

haha...i'm proof of that! why people put that crap in stuff is beside me...money i guess. that scan is still running and is just past halfway so it'll be a while yet.

 

[rcb56]

and after all you've helped with...eset shows now 71 threats found!

 

[rcb56]

ok it just finished...

Scan Log
Version of virus signature database: 11118

(20150203)
Date: 2/3/2015 Time: 5:20:58 PM
Scanned disks, folders and files: Operating

memory;C:\Boot sector;K:\Boot sector;Q:\Boot

sector;C:\;K:\;Q:\
Boot sector of disk Q: - error opening [4]
C:\hiberfil.sys - error opening [4]
C:\pagefile.sys - error opening [4]
C:\AdwCleaner\Quarantine\C\Program Files

\V-bates\Firefox\{21EAF666-26B3-4a3c-

ABD0-CA2F5A326744}.xpi.vir » ZIP »

chrome/content/main.js -

Win32/Toolbar.Perion.K potentially unwanted

application - action selection postponed until

scan completion
C:\dad\Desktop\My Documents

\setup_11.0.0.1245.x01_2011_07_17_19_16.e

xe » RAR » 1324898rar.exe » RAR - error -

password-protected file
C:\dad\Desktop\My Documents

\setup_11.0.0.1245.x01_2011_08_10_03_17.e

xe » RAR » 9091789rar.exe » RAR - error -

password-protected file
C:\Documents\Downloads\kav8.0.0.523en.exe »

NSIS » kav.en.msi » MSI » KAV8.cab » CAB »

ushata.dll - is OK
C:\Documents\Downloads\kav9.0.0.736en.exe »

NSIS » kav.en.msi » MSI » KAV9.cab » CAB »

ushata.dll - is OK
C:\Documents\Downloads\setup (1).exe » 7ZSD

» data/Microsoft Windows Installer

2.0/mWinRun.dll/unicode/shfolder.dll - is OK
C:\Documents\Downloads\setup (1).exe » 7ZSD

» data/Microsoft Windows Installer

2.0/mWinRun.dll/ansi/shfolder.dll - is OK
C:\Downloads\GRMWDK_EN_7600_1.ISO »

ISO » instmsi.exe » CAB » shfolder.dll - is

OK
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\CodecTweakTool-0.bin -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\CodecTweakTool-1.bin -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\Win7DSFilterTweaker-

0.bin - error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\Win7DSFilterTweaker-

1.bin - error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Info\faq.htm - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Info\faq_64bit.htm - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Info\faq_configuration.htm -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Info\faq_display_issues.htm -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Info\faq_dxva.htm - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Info\faq_general.htm - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Info\faq_installation.htm -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Info\faq_miscellaneous.htm -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Info\faq_mpc.htm - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Info\faq_playback_issues.htm

- error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Info\faq_subtitles.htm -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Info\faq_thumbnails.htm -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Info\faq_troubleshooting.htm

- error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Info\faq_windows_issues.htm

- error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Info\faq_wmp.htm - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Info\faq.css - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Icons\xvid.ico - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Icons\delete.ico - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Icons\config.ico - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\ffmpegmt.dll - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\libavcodec.dll - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\libmplayer.dll - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\ffdshow.ax - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\ff_liba52.dll - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\ff_libdts.dll - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\ff_libfaad2.dll -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\ff_libmad.dll - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\ff_unrar.dll - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\libmpeg2_ff.dll -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\ff_samplerate.dll -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\ff_wmv9.dll - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {sys}\ff_vfw.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\ff_kernelDeint.dll -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\TomsMoComp_ff.dll

- error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO »

{code:GetDScalerDir|}\FLT_ffdshow.dll - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\openIE.js - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\ffdshow.ax.manifest

- error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {sys}\ff_vfw.dll.manifest - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\languages

\ffdshow.1026.bg - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\languages

\ffdshow.1028.tc - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\languages

\ffdshow.1029.cs - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\languages

\ffdshow.1029.cz - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\languages

\ffdshow.1031.de - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\languages

\ffdshow.1033.en - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\languages

\ffdshow.1034.es - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\languages

\ffdshow.1035.fi - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\languages

\ffdshow.1036.fr - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\languages

\ffdshow.1038.hu - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\languages

\ffdshow.1040.it - error - password-protected

file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\languages

\ffdshow.1041.ja - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\languages

\ffdshow.1045.pl - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\languages

\ffdshow.1046.br - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\languages

\ffdshow.1049.ru - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\languages

\ffdshow.1051.sk - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\languages

\ffdshow.1053.se - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\languages

\ffdshow.1053.sv - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\languages

\ffdshow.2052.sc - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\custom matrices

\andreas_78er.matrix.xcm - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\custom matrices

\andreas_doppelte_99er.matrix.xcm - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\custom matrices

\andreas_einfache_99er.matrix.xcm - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\custom matrices

\Bulletproof's Heavy Compression Matrix.xcm -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\custom matrices

\Bulletproof's High Quality Matrix.xcm - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\custom matrices

\CG-Animation Matrix.xcm - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\custom matrices

\hvs-best-picture.xcm - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\custom matrices

\hvs-better-picture.xcm - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\custom matrices

\hvs-good-picture.xcm - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\custom matrices\Low

Bitrate Matrix.xcm - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\custom matrices

\MPEG.xcm - error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\custom matrices

\pvcd.xcm - error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\custom matrices

\Soulhunters V3.xcm - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\custom matrices

\Soulhunters V5.xcm - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\custom matrices

\Standard.xcm - error - password-protected

file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\custom matrices

\Ultimate Matrix.xcm - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\custom matrices

\Ultra Low Bitrate Matrix.xcm - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\ffdshow\custom matrices\Very

Low Bitrate Matrix.xcm - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Media Player Classic\mpc-

hc.ini - error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Media Player Classic\mpc-

hc.exe - error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Media Player Classic\mpc-

hc.exe - error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Media Player Classic

\mpciconlib.dll - error - password-protected

file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Media Player Classic

\D3DX9_41.dll - error - password-protected

file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Media Player Classic

\toolbar.bmp - error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\DivXDecH264.ax -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\xvid.ax - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {sys}\xvidvfw.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {sys}\xvidcore.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\XvidQuantMatrices

\andreas_78er.matrix.txt - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\XvidQuantMatrices

\andreas_doppelte_99er.matrix.txt - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\XvidQuantMatrices

\andreas_einfache_99er.matrix.txt - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\XvidQuantMatrices

\Bulletproof's Heavy Compression Matrix.TXT

- error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\XvidQuantMatrices

\Bulletproof's High Quality Matrix.TXT -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\XvidQuantMatrices

\CG-Animation Matrix.txt - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\XvidQuantMatrices

\hvs-best-picture.txt - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\XvidQuantMatrices

\hvs-better-picture.txt - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\XvidQuantMatrices

\hvs-good-picture.txt - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\XvidQuantMatrices\Low

Bitrate Matrix.txt - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\XvidQuantMatrices

\MPEG.txt - error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\XvidQuantMatrices

\Standard.txt - error - password-protected

file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\XvidQuantMatrices

\Ultimate Matrix.txt - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\XvidQuantMatrices

\Ultra Low Bitrate Matrix.txt - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\XvidQuantMatrices\Very

Low Bitrate Matrix.txt - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\StatsReader.exe -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\vp7dec.ax - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {sys}\vp7vfw.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {sys}\yv12vfw.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {sys}\huffyuv.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\ac3filter.ax - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\ac3config.exe - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {sys}\ac3acm.acm - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\ac3file.ax - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\mmamr.ax - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\mmmpcdmx.ax - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\mmmpcdec.ax - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\mmaacd.ax - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\CoreVorbis.ax - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {sys}\lameACM.acm - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {sys}\lame_acm.xml - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\WavPackDSDecoder.ax

- error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\WavPackDSSplitter.ax

- error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\madFlac.ax - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\libFLAC.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\DCBassSource.ax -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\bass.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\bass_alac.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\bass_tta.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\bass_aac.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\RLOFRDec.ax - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\OptimFROG.dll - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\MonkeySource.ax -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\MACDec.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\CLVSD.ax - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\Mpeg2DecFilter.ax -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\MpegSplitter.ax -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\FLVSplitter.ax - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\cdxareader.ax - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\MP4Splitter.ax - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\MatroskaSplitter.ax -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\OggSplitter.ax - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\avisplitter.ax - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {win}\avisplitter.ini - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\Haali\mkx.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\Haali\ogm.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\Haali\mp4.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\Haali\ts.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\Haali\avi.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\Haali\mmfinfo.dll -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\Haali\splitter.ax -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\Haali\mkzlib.dll -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\Haali\mkunicode.dll -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\Haali\avs.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\Haali\avss.dll - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\Haali\gdsmux.exe -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\Haali\cue2xml.js -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\Haali\dxr.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\vsfilter.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Filters\vsfilter.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {sys}\unrar.dll - error - password-

protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\VobSubStrip.exe -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\mediainfo.exe - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Media Player Classic

\mediainfo.dll - error - password-protected

file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\graphstudio.exe - error

- password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\xmllite.dll - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\minicalc.exe - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\SetACL_x86.exe -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\SetACL_x64.exe -

error - password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » {app}\Tools\dsconfig.exe - error -

password-protected file
C:\Downloads\K-Lite_Codec_Pack_590_Full.exe

» INNO » script_decompiled.pas - is OK
C:\Downloads\kis11.0.2.556EN-US.exe »

NSIS » kavkis.msi » MSI » KAVKIS11.cab »

CAB » ushata.dll - is OK
C:\Downloads\kis11.0.2.556EN-US.exe »

NSIS » kavkis.msi » MSI » mklifx86nt500.cab

» CAB - error reading archive
C:\Downloads\The.A-

Team.Extended.Cut.2010.Bluray.AVCHD.1080p.

x264.ac3.HD-R-US\The A-Team Extended Cut

- Bluray & AVCHD [HD-R-US].iso » ISO -

error - unknown compression method
C:\FRST\Quarantine\C\Program Files

(x86)\Lydynamidae\Lydynamidae.exe.xBAD -

Win32/Adware.ObronaAds.D application -

cleaned by deleting - quarantined [1]
C:\FRST\Quarantine\C\Program Files

(x86)\Lydynamidae

\LydynamidaeHelper.exe.xBAD -

Win32/Adware.ObronaAds.D application -

cleaned by deleting - quarantined [1]
C:\FRST\Quarantine\C\Users\Dad\AppData

\Local\Temp\BootstrapperIminent.exe.xBAD -

a variant of Win32/Toolbar.Iminent.C

potentially unwanted application - action

selection postponed until scan completion
C:\FRST\Quarantine\C\Users\Dad\AppData

\Local\Temp\ConsumerInputSetup.exe.xBAD -

Win32/Compete.A potentially unwanted

application - action selection postponed until

scan completion
C:\FRST\Quarantine\C\Users\Dad\AppData

\Local\Temp\optprosetup.exe.xBAD - a variant

of Win32/OptimizerEliteMax.C potentially

unwanted application - action selection

postponed until scan completion
C:\FRST\Quarantine\C\Users\Dad\AppData

\Local\Temp\sprz.exe.xBAD » INNO »

{app}\spdata.dat » RAR - error - password-

protected file
C:\FRST\Quarantine\C\Users\Dad\AppData

\Local\Temp\sprz.exe.xBAD » INNO »

{app}\Firefox\{{5081D2D4-1637-404c-B74F-

50526718257D}.xpi » ZIP »

chrome/content/main.js -

Win32/Toolbar.Perion.K potentially unwanted

application - action selection postponed until

scan completion
C:\FRST\Quarantine\C\Users\Dad\AppData

\Local\Temp\sprz.exe.xBAD » INNO »

{app}\Firefox\chrome\content\main.js -

Win32/Toolbar.Perion.K potentially unwanted

application - action selection postponed until

scan completion
C:\FRST\Quarantine\C\Users\Dad\AppData

\Local\Temp\sprz.exe.xBAD » INNO »

{app}\source.crx » CHROMEEXTENSION »

content.zip » ZIP » main.js -

Win32/Toolbar.Perion.K potentially unwanted

application - action selection postponed until

scan completion
C:\FRST\Quarantine\C\Users\Dad\AppData

\Local\Temp\sprz.exe.xBAD » INNO »

{app}\DGChrome.exe - Win32/Toolbar.Perion.J

potentially unwanted application - action

selection postponed until scan completion
C:\FRST\Quarantine\C\Users\Dad\AppData

\Roaming\HQ.xBAD » ZIP » content/overlay.js

- JS/Toolbar.Crossrider.C potentially unwanted

application - action selection postponed until

scan completion
C:\FRST\Quarantine\C\Users\Dad\AppData

\Roaming\NEDL.xBAD » ZIP » background.js -

JS/Toolbar.Crossrider.C potentially unwanted

application - action selection postponed until

scan completion
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD » Best Buy pc app Setup.msi - Incorrect

file checksum (CRC); the file is probably

password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD » Best Buy pc app Setup.res - Incorrect

file checksum (CRC); the file is probably

password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD » mia.lib - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/arrow_left.png.

deploy - Incorrect file checksum (CRC); the

file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/arrow_right.pn

g.deploy - Incorrect file checksum (CRC); the

file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/availableAgents

.gif.deploy - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/BBSI_Logo_Fin

al.png.deploy - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/btn_connectNo

w.gif.deploy - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/busy.gif.deploy

- Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD » OFFLINE/217807D8/1559E68B/card-

CID-A.png.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD » OFFLINE/217807D8/1559E68B/card-

CID-B.png.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD » OFFLINE/217807D8/1559E68B/Cart-

BtnSm.png.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/checkMark_12x

12.png.deploy - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/CID_40x18.jpg

.deploy - Incorrect file checksum (CRC); the

file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/Click_button5.

wav.deploy - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/ESRB_Graphic.

JPG.deploy - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/geek_squad_su

pport_2.gif.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/HelveticaLTStd

-Bold.otf.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/HelveticaLTStd

-Roman.otf.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/Icon_error.png

.deploy - Incorrect file checksum (CRC); the

file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/icon_good.png.

deploy - Incorrect file checksum (CRC); the

file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/MajorUpdateBG

.png.deploy - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/OfficeActivatio

nImage.png.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/offline.gif.depl

oy - Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/OfflineBG.png.

deploy - Incorrect file checksum (CRC); the

file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/online.gif.deplo

y - Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/OutsideUS-

BG.png.deploy - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/QuickUpdateBG

.png.deploy - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/remoteSupport

Header.gif.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/StarEmpty.png.

deploy - Incorrect file checksum (CRC); the

file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/StarFull.png.de

ploy - Incorrect file checksum (CRC); the file

is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/VeriSignLogo_7

6x36.jpg.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/Verisign_69x33

.png.deploy - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/1559E68B/WelcomeBG.pn

g.deploy - Incorrect file checksum (CRC); the

file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD » OFFLINE/217807D8/15DD5D7A/Best

Buy pc app.application - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/66710953/About.rtf.deplo

y - Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/66710953/license.rtf.depl

oy - Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/66710953/WelcomeScreen

.rtf.deploy - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/6B0763A5/Cart.ico.deploy

- Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/6B0763A5/Check.ico.deplo

y - Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/6B0763A5/Clock.ico.deplo

y - Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/6B0763A5/Home.ico.deplo

y - Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/6B0763A5/icon_ESRB_Ad

ultsOnly.gif.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/6B0763A5/icon_ESRB_Ear

lyChildhood.gif.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/6B0763A5/icon_ESRB_Eve

ryone.gif.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/6B0763A5/icon_ESRB_Eve

ryone10plus.gif.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/6B0763A5/icon_ESRB_Ma

ture.gif.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/6B0763A5/icon_ESRB_Pen

ding.gif.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/6B0763A5/icon_ESRB_Te

en.gif.deploy - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/6B0763A5/Installed.ico.d

eploy - Incorrect file checksum (CRC); the file

is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/BACDC67A/Translations.x

ml.deploy - Incorrect file checksum (CRC); the

file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/CF3B1E60/tempCategories

.xml.deploy - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/CF3B1E60/TranslationSch

ema.xsd.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/EF84C981/ApexNew-

BoldItalic.ttf.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/EF84C981/ApexNew-

Book.ttf.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/EF84C981/ApexNew-

BookItalic.ttf.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/EF84C981/ApexNew-

Medium.ttf.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/EF84C981/ApexNew-

MediumItalic.ttf.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/EF84C981/Knockout-

66FullFlyweight.ttf.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/EF84C981/Knockout-

67FullBantamwt.ttf.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/EF84C981/Knockout-

68FullFeatherwt.ttf.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/EF84C981/Knockout-

69FullLiteweight.ttf.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/EF84C981/Knockout-

70FullWelterwt.ttf.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/EF84C981/Knockout-

90UltmtWelterwt.ttf.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/EF84C981/Knockout-

91UltmtMiddlewt.ttf.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/EF84C981/Knockout-

92UltmtCruiserwt.ttf.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/EF84C981/Knockout-

93UltmtHeviwt.ttf.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/EF84C981/Knockout-

94UltmtSumo.ttf.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/AppIcon.ico.de

ploy - Incorrect file checksum (CRC); the file

is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/AppMeasureme

nt_DotNET_Strong.dll.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD » OFFLINE/217807D8/F86FA20C/Best

Buy pc app.exe.config.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD » OFFLINE/217807D8/F86FA20C/Best

Buy pc app.exe.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD » OFFLINE/217807D8/F86FA20C/Best

Buy pc app.exe.manifest - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/BestBuySoftwa

reInstaller.dll.config.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/BestBuySoftwa

reInstaller.dll.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/Common.dll.con

fig.deploy - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/Common.dll.dep

loy - Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/Communication

Net.dll.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/Controls.dll.de

ploy - Incorrect file checksum (CRC); the file

is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/FluidKit.dll.dep

loy - Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/Interop.IWshR

untimeLibrary.dll.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/Ionic.Zip.Redu

ced.dll.deploy - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/Localization.dll.

deploy - Incorrect file checksum (CRC); the

file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/Microsoft.Prac

tices.Composite.dll.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/Microsoft.Prac

tices.Composite.Presentation.dll.deploy -

Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/Microsoft.Prac

tices.Composite.UnityExtensions.dll.deploy -

Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/Microsoft.Prac

tices.EnterpriseLibrary.Common.dll.deploy -

Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/Microsoft.Prac

tices.EnterpriseLibrary.Logging.dll.deploy -

Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/Microsoft.Prac

tices.ObjectBuilder2.dll.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/Microsoft.Prac

tices.ServiceLocation.dll.deploy - Incorrect

file checksum (CRC); the file is probably

password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/Microsoft.Prac

tices.Unity.dll.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/Microsoft.Prac

tices.Unity.Interception.dll.deploy - Incorrect

file checksum (CRC); the file is probably

password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD » OFFLINE/217807D8/F86FA20C/pc app

Installer.exe.config.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD » OFFLINE/217807D8/F86FA20C/pc app

Installer.exe.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/PCImage.Modul

es.Default.dll.config.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/PCImage.Modul

es.Default.dll.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/PCImage.Modul

es.GeekSquad.Common.dll.config.deploy -

Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/PCImage.Modul

es.GeekSquad.Common.dll.deploy - Incorrect

file checksum (CRC); the file is probably

password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/PCImage.Modul

es.GeekSquad.Controller.dll.deploy - Incorrect

file checksum (CRC); the file is probably

password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/PCImage.Modul

es.GeekSquad.ViewModels.dll.config.deploy -

Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/PCImage.Modul

es.GeekSquad.ViewModels.dll.deploy -

Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/PCImage.Modul

es.GeekSquad.Views.dll.config.deploy -

Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/PCImage.Modul

es.GeekSquad.Views.dll.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/PCImage.Modul

es.Home.dll.config.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/PCImage.Modul

es.Home.dll.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/PCImage.Modul

es.Omniture.dll.config.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/PCImage.Modul

es.Omniture.dll.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/PCImage.Modul

es.Update.dll.config.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/PCImage.Modul

es.Update.dll.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/PCImageInfras

tructure.dll.config.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/PCImageInfras

tructure.dll.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/Restarter.exe.

deploy - Incorrect file checksum (CRC); the

file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/SecureDownloa

dAPI.dll.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/SecureDownloa

dAPI64.dll.deploy - Incorrect file checksum

(CRC); the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/SecureDownloa

dAPIHelper.exe.deploy - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/SharpBITS.Bas

e.dll.deploy - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/ViewModels.dll.

config.deploy - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/ViewModels.dll.

deploy - Incorrect file checksum (CRC); the

file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/217807D8/F86FA20C/WCFCompressio

n.dll.deploy - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD » Best Buy pc app Setup.exe - Incorrect

file checksum (CRC); the file is probably

password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/224E16D/373872A7/BestBuyPcAppDe

tector.ocx - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD » OFFLINE/4C9F5FE/373872A7/Best

Buy pc app Launcher.exe - Incorrect file

checksum (CRC); the file is probably password

protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/8E070D3B/373872A7/npBestBuyPcAp

pDetector.dll - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/E5D03152/373872A7/ClickOnceSetup

.exe - Incorrect file checksum (CRC); the file

is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/E8AF95C2/373872A7/ClickOnceUnins

taller.exe - Incorrect file checksum (CRC);

the file is probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD » OFFLINE/mDown.dll/mDownExec.dll -

Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD »

OFFLINE/mWinRun.dll/mWinRunExec.dll -

Incorrect file checksum (CRC); the file is

probably password protected.
C:\OEM\BBYAP\Best Buy pc app Setup.exe »

7ZSD » OFFLINE/mXML.dll/mXMLRun.dll -

Incorrect file checksum (CRC); the file is

probably password protected.
C:\Program Files (x86)\52df7d05-df7b-4abf-

8cb0-684d1a20a3e7\5a89858f-5858-4f90-

a59a-a2378246373a.dll - a variant of

Win32/Toolbar.CrossRider.BM potentially

unwanted application - action selection

postponed until scan completion
C:\Program Files (x86)\Adobe\52df7d05-

df7b-4abf-8cb0-684d1a20a3e7.dll - a variant

of Win32/Toolbar.CrossRider.BM potentially

unwanted application - action selection

postponed until scan completion
C:\Program Files (x86)\Common Files\LogiShrd

\Installer\{D40EB009-0499-459c-A8AF-

C9C110766215}\uninstall.exe » NSIS - archive

damaged
C:\Program Files (x86)\Common Files\LogiShrd

\LWSPlugins\LWS\Applets\Gallery

\SocialNetworking\Applets\YouKu\ikuacc.dat »

ZIP » - - error - password-protected file
C:\Program Files (x86)\Common Files\Wise

Installation Wizard

\WISACF5FE1B377240688B872D2A6EFD0A05_

4_17_6_4336.MSI » MSI » Cabs.w1.cab »

CAB » initrd.gz2 » GZIP » newinitrd » CPIO »

- archive damaged
C:\Program Files (x86)\Google\Update

\1.3.25.11\GoogleUpdateHelper.msi » MSI »

required.cab » CAB - error reading archive
C:\ProgramData

\fpebkpiipncfojhgaddgnofadahpmcjm

\Q1Z5xr6X.js - JS/Kryptik.ATB trojan -

cleaned by deleting - quarantined [1]
C:\ProgramData\Microsoft\Application

Virtualization Client\SoftGrid Client\sftfs.fsd

- error opening [4]
C:\ProgramData\Microsoft\Application

Virtualization Client\SoftGrid Client\sftfs.fsG

- error opening [4]
C:\ProgramData\Microsoft\Search\Data

\Applications\Windows\MSS.log - error opening

[4]
C:\ProgramData\Microsoft\Search\Data

\Applications\Windows\tmp.edb - error opening

[4]
C:\ProgramData\Microsoft\Search\Data

\Applications\Windows\Windows.edb - error

opening [4]
C:\ProgramData\Microsoft\Windows Defender

\IMpService925A3ACA-C353-458A-AC8D-

A7E5EB378092.lock - error opening [4]
C:\ProgramData\Oracle\Java\installcache

\baseimagefam8 » ZIP » lib/rt.pack » PACK200

- archive damaged
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Cache-0000.zip » ZIP » 140822-

132418.xml - error - password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Cache-0000.zip » ZIP »

Quarantine.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Cache-0000.zip » ZIP » Cache-

0000.sfv - error - password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\ConstaSurf-0000.zip » ZIP »

140822-132418.xml - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\ConstaSurf-0000.zip » ZIP »

Quarantine.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\ConstaSurf-0000.zip » ZIP »

ConstaSurf-0000.sfv - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\ConstaSurf-0000.zip » ZIP »

Quarantine.reg - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Cookie-0000.zip » ZIP » 140822

-132418.xml - error - password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Cookie-0000.zip » ZIP »

Quarantine.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Cookie-0000.zip » ZIP » Cookie-

0000.sfv - error - password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\History-0000.zip » ZIP »

140822-132418.xml - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\History-0000.zip » ZIP »

Quarantine.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\History-0000.zip » ZIP »

History-0000.sfv - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Internet Explorer-0000.zip » ZIP

» 140822-132418.xml - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Internet Explorer-0000.zip » ZIP

» Quarantine.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Internet Explorer-0000.zip » ZIP

» Internet Explorer-0000.sfv - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Internet Explorer-0000.zip » ZIP

» Quarantine.reg - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine

\iPhone.Spyware.GoogleAnalytics.Storm8.World

War-0000.zip » ZIP » 140822-132418.xml -

error - password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine

\iPhone.Spyware.GoogleAnalytics.Storm8.World

War-0000.zip » ZIP » Quarantine.ini - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine

\iPhone.Spyware.GoogleAnalytics.Storm8.World

War-0000.zip » ZIP » Quarantine.lst - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine

\iPhone.Spyware.GoogleAnalytics.Storm8.World

War-0000.zip » ZIP »

iPhone.Spyware.GoogleAnalytics.Storm8.World

War-0000.sfv - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine

\iPhone.Spyware.GoogleAnalytics.Storm8.World

War-0000.zip » ZIP »

iPhone.Spyware.GoogleAnalytics.Storm8.World

War-0000.md5 - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine

\iPhone.Spyware.GoogleAnalytics.Storm8.World

War-0000.zip » ZIP »

Users/Dad/Music/iTunes/iTunes Media/Mobile

Applications/World War.ipa - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP » 140822-132418.xml - error

- password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP » Quarantine.ini - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP » Quarantine.lst - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Macromedia.FlashPlayer.Cookies-0000.sfv -

error - password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Macromedia.FlashPlayer.Cookies-0000.md5 -

error - password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/dick.net/f

lashcoms6_0.sol - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/host71690

.123flashchat.com/fc_gomi.sol - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/host71690

.123flashchat.com/fc_userinfo.sol - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/img.widge

ts.video.s-msn.com/AdModel.sol - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/img.widge

ts.video.s-msn.com/CountryCode.sol - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/img.widge

ts.video.s-msn.com/reportingSegment.sol -

error - password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/img.widge

ts.video.s-msn.com/VideoWindow.sol - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/mindjolt-

a.akamaihd.net/gameOptions.sol - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/opf.ooyala

.com/com.conviva.livePass.sol - archive

damaged - the file could not be extracted.
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/player.ooy

ala.com/auth.sol - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/player.ooy

ala.com/auth2.sol - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/player.ooy

ala.com/auth_id.sol - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/player.ooy

ala.com/ooyala_guid.sol - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/player.ooy

ala.com/perf.sol - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/recording1

1.singsnap.com/snap2_cookie.sol - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/recording1

3.singsnap.com/snap2_cookie.sol - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/recording3

2.singsnap.com/snap2_cookie.sol - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/recording4

1.singsnap.com/snap2_cookie.sol - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/recording4

2.singsnap.com/snap2_cookie.sol - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/s.ytimg.co

m/soundData.sol - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/secure-

us.imrworldwide.com/_ggCvar.sol - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/secure-

us.imrworldwide.com/_ggCvar_temp.sol - error

- password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/secure-

us.imrworldwide.com/_ggMCvar_1.sol - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/secure-

us.imrworldwide.com/_ggMCvar_2.sol - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/songs.sing

snap.com/snap2_cookie.sol - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/t03.ashem

aletube.com/com.jeroenwijering.sol - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Macromedia.FlashPlayer.Cookies-

0000.zip » ZIP »

Users/Dad/AppData/Roaming/Macromedia/Flash

Player/#SharedObjects/EBVPQQYT/opf.ooyala

.com/3rdparty/ESPNAnalytics_comscore_3.48b

_omniture_3.42.swf/com.comscore.ESPNAnalyti

cs_comscore_3.48b_omniture_3.42.sol - error

- password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\MS Direct3D-0000.zip » ZIP »

140822-132418.xml - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\MS Direct3D-0000.zip » ZIP »

Quarantine.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\MS Direct3D-0000.zip » ZIP »

MS Direct3D-0000.sfv - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\MS Direct3D-0000.zip » ZIP »

Quarantine.reg - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\MS DirectDraw-0000.zip » ZIP »

140822-132418.xml - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\MS DirectDraw-0000.zip » ZIP »

Quarantine.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\MS DirectDraw-0000.zip » ZIP »

MS DirectDraw-0000.sfv - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\MS DirectDraw-0000.zip » ZIP »

Quarantine.reg - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\MS Media Player-0000.zip » ZIP

» 140822-132418.xml - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\MS Media Player-0000.zip » ZIP

» Quarantine.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\MS Media Player-0000.zip » ZIP

» MS Media Player-0000.sfv - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\MS Media Player-0000.zip » ZIP

» Quarantine.reg - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\MS Paint-0000.zip » ZIP »

140822-132418.xml - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\MS Paint-0000.zip » ZIP »

Quarantine.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\MS Paint-0000.zip » ZIP » MS

Paint-0000.sfv - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\MS Paint-0000.zip » ZIP »

Quarantine.reg - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\MS Regedit-0000.zip » ZIP »

140822-132418.xml - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\MS Regedit-0000.zip » ZIP »

Quarantine.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\MS Regedit-0000.zip » ZIP » MS

Regedit-0000.sfv - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\MS Regedit-0000.zip » ZIP »

Quarantine.reg - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\myPCBackup-0000.zip » ZIP »

140822-132418.xml - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\myPCBackup-0000.zip » ZIP »

Quarantine.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\myPCBackup-0000.zip » ZIP »

Quarantine.lst - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\myPCBackup-0000.zip » ZIP »

myPCBackup-0000.sfv - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\myPCBackup-0000.zip » ZIP »

myPCBackup-0000.md5 - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\myPCBackup-0000.zip » ZIP »

Quarantine.reg - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\myPCBackup-0000.zip » ZIP »

Users/Dad/Desktop/Sync Folder.lnk - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\myPCBackup-0000.zip » ZIP »

Users/Dad/AppData/Roaming/Microsoft/Windo

ws/Start Menu/Programs/Startup/MyPC

Backup.lnk - error - password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\myPCBackup-0000.zip » ZIP »

Users/Dad/AppData/Roaming/Microsoft/Windo

ws/Start Menu/Programs/MyPC Backup/MyPC

Backup.lnk - error - password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\myPCBackup-0000.zip » ZIP »

Users/Dad/AppData/Roaming/Microsoft/Windo

ws/Start Menu/Programs/MyPC

Backup/Uninstall.lnk - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Explorer-0000.zip » ZIP

» 140822-132418.xml - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Explorer-0000.zip » ZIP

» Quarantine.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Explorer-0000.zip » ZIP

» Windows Explorer-0000.sfv - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Explorer-0000.zip » ZIP

» Quarantine.reg - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Media SDK-0000.zip »

ZIP » 140822-132418.xml - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Media SDK-0000.zip »

ZIP » Quarantine.ini - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Media SDK-0000.zip »

ZIP » Windows Media SDK-0000.sfv - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Media SDK-0000.zip »

ZIP » Quarantine.reg - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Media SDK-0001.zip »

ZIP » 140822-132418.xml - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Media SDK-0001.zip »

ZIP » Quarantine.ini - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Media SDK-0001.zip »

ZIP » Windows Media SDK-0001.sfv - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Media SDK-0001.zip »

ZIP » Quarantine.reg - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Media SDK-0002.zip »

ZIP » 140822-132418.xml - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Media SDK-0002.zip »

ZIP » Quarantine.ini - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Media SDK-0002.zip »

ZIP » Windows Media SDK-0002.sfv - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Media SDK-0002.zip »

ZIP » Quarantine.reg - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Media SDK-0003.zip »

ZIP » 140822-132418.xml - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Media SDK-0003.zip »

ZIP » Quarantine.ini - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Media SDK-0003.zip »

ZIP » Windows Media SDK-0003.sfv - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Media SDK-0003.zip »

ZIP » Quarantine.reg - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Media SDK-0004.zip »

ZIP » 140822-132418.xml - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Media SDK-0004.zip »

ZIP » Quarantine.ini - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Media SDK-0004.zip »

ZIP » Windows Media SDK-0004.sfv - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows Media SDK-0004.zip »

ZIP » Quarantine.reg - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows-0000.zip » ZIP »

140822-132418.xml - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows-0000.zip » ZIP »

Quarantine.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows-0000.zip » ZIP »

Windows-0000.sfv - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows-0000.zip » ZIP »

Quarantine.reg - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows.OpenWith-0000.zip »

ZIP » 140822-132418.xml - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows.OpenWith-0000.zip »

ZIP » Quarantine.ini - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows.OpenWith-0000.zip »

ZIP » Windows.OpenWith-0000.sfv - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Quarantine\Windows.OpenWith-0000.zip »

ZIP » Quarantine.reg - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\AdSupremeSavings.zip » ZIP »

sbRecovery.reg - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\AdSupremeSavings.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\AnchorHss.zip » ZIP »

Users/Dad/AppData/Roaming/OpenCandy/4DC7

CF1D493240D98787324E906449D0/RealPlayerR

71POC5_p2v2.exe - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\AnchorHss.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\AnchorHss1.zip » ZIP »

sbRecovery.reg - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\AnchorHss1.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\BarowwsoeSave.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\iCrossRider.zip » ZIP »

sbRecovery.reg - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\iCrossRider.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\iCrossRider1.zip » ZIP »

sbRecovery.reg - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\iCrossRider1.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\PCUtilitiesOptimizerPro.zip » ZIP »

Users/Dad/Documents/Optimizer

Pro/CookiesException.txt - error - password-

protected file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\PCUtilitiesOptimizerPro.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\RelevantKnowledge.zip » ZIP »

Program Files

(x86)/RelevantKnowledge/ncncf.dat - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\RelevantKnowledge.zip » ZIP »

Program Files

(x86)/RelevantKnowledge/nscf.dat - error -

password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\RelevantKnowledge.zip » ZIP »

Program Files

(x86)/RelevantKnowledge/rlservice.exe - error

- password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\RelevantKnowledge.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\SweetIM.zip » ZIP » sbRecovery.ini

- error - password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\ToolbarMySearchDial.zip » ZIP »

sbRecovery.reg - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\ToolbarMySearchDial.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WiIQfraud.zip » ZIP »

sbRecovery.reg - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WiIQfraud.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen1.zip » ZIP »

END - error - password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen1.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen10.zip » ZIP »

Alert.dll - error - password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen10.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen11.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen2.zip » ZIP »

Users/Dad/AppData/Roaming/SearchProtect/Re

s/SPSetup.exe - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen2.zip » ZIP »

Users/Dad/AppData/Roaming/SearchProtect/ff

protect/SProtectorRepository/searchProtector

Data - error - password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen2.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen3.zip » ZIP »

sbRecovery.reg - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen3.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen4.zip » ZIP »

sbRecovery.reg - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen4.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen5.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen6.zip » ZIP »

Alert.dll - error - password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen6.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen7.zip » ZIP »

END - error - password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen7.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen8.zip » ZIP »

Users/Dad/AppData/Roaming/SearchProtect/Re

s/SPSetup.exe - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen8.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinDownloadergen9.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinFraudPack.zip » ZIP » 2.exe -

error - password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinFraudPack.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinFraudPack1.zip » ZIP » 2.exe -

error - password-protected file
C:\ProgramData\Spybot - Search & Destroy

\Recovery\WinFraudPack1.zip » ZIP »

sbRecovery.ini - error - password-protected

file
C:\Users\All Users\Microsoft\Application

Virtualization Client\SoftGrid Client\sftfs.fsd

- error opening [4]
C:\Users\All Users\Microsoft\Application

Virtualization Client\SoftGrid Client\sftfs.fsG

- error opening [4]
C:\Users\All Users\Microsoft\Search\Data

\Applications\Windows\MSS.log - error opening

[4]
C:\Users\All Users\Microsoft\Search\Data

\Applications\Windows\tmp.edb - error opening

[4]
C:\Users\All Users\Microsoft\Search\Data

\Applications\Windows\Windows.edb - error

opening [4]
C:\Users\All Users\Microsoft\Windows

Defender\IMpService925A3ACA-C353-458A-

AC8D-A7E5EB378092.lock - error opening [4]
C:\Users\Dad\ntuser.dat - error opening [4]
C:\Users\Dad\ntuser.dat.LOG1 - error opening

[4]
C:\Users\Dad\ntuser.dat.LOG2 - error opening

[4]
C:\Users\Dad\AppData\Local\Google\Update

\1.3.25.11\GoogleUpdateHelper.msi » MSI »

required.cab » CAB - error reading archive
C:\Users\Dad\AppData\Local\Microsoft

\Internet Explorer\Recovery\High\Active

\RecoveryStore.{0ED6258B-ABFE-11E4-B5C3

-02060D5D6465}.dat - error opening [4]
C:\Users\Dad\AppData\Local\Microsoft

\Internet Explorer\Recovery\High\Active

\{0ED6258D-ABFE-11E4-B5C3-

02060D5D6465}.dat - error opening [4]
C:\Users\Dad\AppData\Local\Microsoft

\Internet Explorer\Recovery\High\Active

\{AB34832E-ABFE-11E4-B5C3-

02060D5D6465}.dat - error opening [4]
C:\Users\Dad\AppData\Local\Microsoft

\Windows\UsrClass.dat - error opening [4]
C:\Users\Dad\AppData\Local\Microsoft

\Windows\UsrClass.dat.LOG1 - error opening

[4]
C:\Users\Dad\AppData\Local\Microsoft

\Windows\UsrClass.dat.LOG2 - error opening

[4]
C:\Users\Dad\AppData\Local\Microsoft

\Windows\WebCacheLock.dat - error opening

[4]
C:\Users\Dad\AppData\Local\Microsoft

\Windows\WebCache\V01.log - error opening

[4]
C:\Users\Dad\AppData\Local\Microsoft

\Windows\WebCache\WebCacheV01.dat -

error opening [4]
C:\Users\Dad\AppData\Local\Microsoft

\Windows\WebCache\WebCacheV01.tmp -

error opening [4]
C:\Users\Dad\AppData\Local\Mozilla\Firefox

\Profiles\fen9gfz2.default-

1409800020396\cache2\entries

\9F778B07C562234AD47D5C0D515E37B6F8BA8

53F » CWS » file.swf - unpack error
C:\Users\Dad\AppData\Local\Mozilla\Firefox

\Profiles\fen9gfz2.default-

1409800020396\cache2\entries

\AC1B79EC9B867BEF0EF5BD8624B433DCEF444

076 » CWS » file.swf - unpack error
C:\Users\Dad\AppData\Local\Mozilla\Firefox

\Profiles\fen9gfz2.default-

1409800020396\cache2\entries

\D495EC48FD74A2CE83F3D68D7F3F3BDA099F7

5F5 » CWS » file.swf - unpack error
C:\Users\Dad\AppData\Roaming\UZNYUL »

ZIP » background.js - JS/Toolbar.Crossrider.C

potentially unwanted application - action

selection postponed until scan completion
C:\Users\Dad\AppData\Roaming\WTPQZFD »

ZIP » content/overlay.js -

JS/Toolbar.Crossrider.C potentially unwanted

application - action selection postponed until

scan completion
C:\Users\Dad\AppData\Roaming\Mozilla

\Firefox\Profiles\fen9gfz2.default-

1409800020396\parent.lock - error opening [4]
C:\Users\Dad\AppData\Roaming\Mozilla

\Firefox\Profiles\h46m51x5.default-

1342635577168\extensions\staged\jid1-

U7omKQ6kQfxMaQ@jetpack\resources

\smootherweb\data\content.js -

Win32/SmootherWeb.C potentially unwanted

application - action selection postponed until

scan completion
C:\Users\Dad\Desktop

\tweaking.com_registry_backup_setup.exe »

INDIGOROSE - error reading archive
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » images/bg-close-program.png - error -

password-protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » images/bg-download-bar-empty.png -

error - password-protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » images/bg-download-bar-error.png -

error - password-protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » images/bg-download-bar-full.png - error

- password-protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » images/bg-header-error.gif - error -

password-protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » images/button-center-highlight.png -

error - password-protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » images/button-center.png - error -

password-protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » images/button-left-highlight.png - error

- password-protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » images/button-left.png - error -

password-protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » images/button-right-highlight.png -

error - password-protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » images/button-right.png - error -

password-protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » images/icon-blank.gif - error -

password-protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » images/icon-complete-error.gif - error

- password-protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » images/icon-complete.gif - error -

password-protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » images/icon-error.png - error -

password-protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » images/logo-adobe.gif - error -

password-protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » interop/downloader.dll - error -

password-protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/cn.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/cs.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/da.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/de.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/en-us.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/es.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/fi.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/fr.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/hr.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/hu.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/it.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/ja.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/ko.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/nl.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/no.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/pl.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/pt.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/ro.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/ru.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/sk.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/sl.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/sv.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/tr.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/tw.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » locale/ua.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » util/gccheck.exe - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » util/gtbcheck.exe - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » app.config.xml - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » compact.min.js - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » environment.json - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » logo.ico - error - password-protected

file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » mainwindow.config.xml - error -

password-protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » mainwindow.css - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » mainwindow.html - error - password-

protected file
C:\Users\Dad\Downloads\adobe_flash.exe »

ZIP » workflow.json - error - password-

protected file
C:\Users\Dad\Downloads\lws231_full.exe »

NSIS » YouKuInstaller_Release_x86.exe »

NSIS » ikuacc.dat » ZIP » - - error -

password-protected file
C:\Users\Dad\Downloads\lws231_full.exe »

NSIS » puninstc.exe » NSIS » uninstall.exe »

NSIS - archive damaged
C:\Users\Dad\Downloads\lws231_full.exe »

NSIS » puninstt.exe » NSIS » uninstall.exe »

NSIS - archive damaged
C:\Windows\Installer\3d2c53b.msi » MSI »

Data1.cab » CAB - error reading archive
C:\Windows\ServiceProfiles\LocalService

\ntuser.dat - error opening [4]
C:\Windows\ServiceProfiles\LocalService

\NTUSER.DAT.LOG1 - error opening [4]
C:\Windows\ServiceProfiles\LocalService

\NTUSER.DAT.LOG2 - error opening [4]
C:\Windows\ServiceProfiles\LocalService

\AppData\Local\lastalive0.dat - error opening

[4]
C:\Windows\ServiceProfiles\LocalService

\AppData\Local\lastalive1.dat - error opening

[4]
C:\Windows\ServiceProfiles\NetworkService

\ntuser.dat - error opening [4]
C:\Windows\ServiceProfiles\NetworkService

\NTUSER.DAT.LOG1 - error opening [4]
C:\Windows\ServiceProfiles\NetworkService

\NTUSER.DAT.LOG2 - error opening [4]
C:\Windows\SoftwareDistribution\Download

\480cfcd381645ba223a2e0b57c76e73c

\BITAFA7.tmp » CAB » mpasbase.vdm -

archive damaged - the file could not be

extracted.
C:\Windows\SoftwareDistribution\Download

\480cfcd381645ba223a2e0b57c76e73c

\BITAFA7.tmp » CAB » mpengine.dll - archive

damaged - the file could not be extracted.
C:\Windows\System32\catroot2\edb.log -

error opening [4]
C:\Windows\System32\catroot2\{127D0A1D-

4EF2-11D1-8608-00C04FC295EE}\catdb -

error opening [4]
C:\Windows\System32\catroot2\{F750E6C3-

38EE-11D1-85E5-00C04FC295EE}\catdb -

error opening [4]
C:\Windows\System32\config\default - error

opening [4]
C:\Windows\System32\config\DEFAULT.LOG1

- error opening [4]
C:\Windows\System32\config\DEFAULT.LOG2

- error opening [4]
C:\Windows\System32\config\sam - error

opening [4]
C:\Windows\System32\config\SAM.LOG1 -

error opening [4]
C:\Windows\System32\config\SAM.LOG2 -

error opening [4]
C:\Windows\System32\config\security - error

opening [4]
C:\Windows\System32\config\SECURITY.LOG1

- error opening [4]
C:\Windows\System32\config\SECURITY.LOG2

- error opening [4]
C:\Windows\System32\config\software - error

opening [4]
C:\Windows\System32\config

\SOFTWARE.LOG1 - error opening [4]
C:\Windows\System32\config

\SOFTWARE.LOG2 - error opening [4]
C:\Windows\System32\config\system - error

opening [4]
C:\Windows\System32\config\SYSTEM.LOG1 -

error opening [4]
C:\Windows\System32\config\SYSTEM.LOG2 -

error opening [4]
C:\Windows\System32\config\RegBack

\DEFAULT - error opening [4]
C:\Windows\System32\config\RegBack\SAM -

error opening [4]
C:\Windows\System32\config\RegBack

\SECURITY - error opening [4]
C:\Windows\System32\config\RegBack

\SOFTWARE - error opening [4]
C:\Windows\System32\config\RegBack

\SYSTEM - error opening [4]
K:\$RECYCLE.BIN\S-1-5-21-3919409391-

1048297547-940179561-1000\

$RZE94D0\sv.moviestudio.pe.10.0.179.exe »

CAB » ac3studioplug.dll - archive damaged -

the file could not be extracted.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » product.ico - Incorrect file checksum

(CRC); the file is probably password protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » MsiZap.exe.manifest - Incorrect file

checksum (CRC); the file is probably password

protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_1028.txt - Incorrect file

checksum (CRC); the file is probably password

protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_1030.txt - Incorrect file

checksum (CRC); the file is probably password

protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_1031.txt - Incorrect file

checksum (CRC); the file is probably password

protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_1033.txt - Incorrect file

checksum (CRC); the file is probably password

protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_1034.txt - Incorrect file

checksum (CRC); the file is probably password

protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_1036.txt - Incorrect file

checksum (CRC); the file is probably password

protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_1040.txt - Incorrect file

checksum (CRC); the file is probably password

protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_1041.txt - Incorrect file

checksum (CRC); the file is probably password

protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_1042.txt - Incorrect file

checksum (CRC); the file is probably password

protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_1043.txt - Incorrect file

checksum (CRC); the file is probably password

protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_2052.txt - Incorrect file

checksum (CRC); the file is probably password

protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_4100.TXT - Incorrect file

checksum (CRC); the file is probably password

protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_csy.txt - Incorrect file checksum

(CRC); the file is probably password protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_ell.txt - Incorrect file checksum

(CRC); the file is probably password protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_fin.txt - Incorrect file checksum

(CRC); the file is probably password protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_hun.txt - Incorrect file checksum

(CRC); the file is probably password protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_nor.txt - Incorrect file checksum

(CRC); the file is probably password protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_plk.txt - Incorrect file checksum

(CRC); the file is probably password protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_ptg.txt - Incorrect file checksum

(CRC); the file is probably password protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_rus.txt - Incorrect file checksum

(CRC); the file is probably password protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_sve.txt - Incorrect file checksum

(CRC); the file is probably password protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » lic_trk.txt - Incorrect file checksum

(CRC); the file is probably password protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » Compress.log - Incorrect file

checksum (CRC); the file is probably password

protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » MsiZap.exe - Incorrect file

checksum (CRC); the file is probably password

protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » PostBuild.exe - Incorrect file

checksum (CRC); the file is probably password

protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » CLScan.dll - Incorrect file checksum

(CRC); the file is probably password protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » GetDXVer.dll - Incorrect file

checksum (CRC); the file is probably password

protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » GetSTime.dll - Incorrect file

checksum (CRC); the file is probably password

protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » Helper.dll - Incorrect file checksum

(CRC); the file is probably password protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » HwCtrlMgr.dll - Incorrect file

checksum (CRC); the file is probably password

protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » RegKey64Bit.dll - Incorrect file

checksum (CRC); the file is probably password

protected.
K:\APP\Social Networks V3.0\SupportFiles.7z

» 7ZIP » Rpc2.dll - Incorrect file checksum

(CRC); the file is probably password protected.
K:\BRIDGES1\Backup Set 2012-08-19

210549\Backup Files 2012-08-19

210549\Backup files 25.zip » ZIP » C\Users

\Dad\Music\iTunes\iTunes Media\Mobile

Applications\CapcomGame 1.ipa » ZIP » -

archive damaged
K:\BRIDGES1\Backup Set 2012-08-19

210549\Backup Files 2012-08-19

210549\Backup files 31.zip » ZIP » C\Users

\Dad\Music\iTunes\iTunes Media\Mobile

Applications\Nike Training.ipa » ZIP » -

archive damaged
K:\BRIDGES1\Backup Set 2012-08-19

210549\Backup Files 2012-08-19

210549\Backup files 37.zip » ZIP » C\Users

\Dad\Music\iTunes\Mobile Applications

\Battleheart 1.0.4.ipa » ZIP » - archive

damaged
K:\BRIDGES1\Backup Set 2012-08-19

210549\Backup Files 2012-08-19

210549\Backup files 38.zip » ZIP » C\Users

\Dad\Music\iTunes\Mobile Applications\Drag

Racing 1.0.5.ipa » ZIP » - archive damaged
K:\BRIDGES1\Backup Set 2012-08-19

210549\Backup Files 2012-08-19

210549\Backup files 41.zip » ZIP » C\Users

\Dad\Music\iTunes\Mobile Applications

\sf4iPhone 1.00.07.ipa » ZIP » - archive

damaged
K:\BRIDGES1\Backup Set 2012-08-19

210549\Backup Files 2012-08-19

210549\Backup files 43.zip » ZIP » C\Users

\Dad\Music\iTunes\Mobile Applications\Tiger

12 1.0.4.ipa » ZIP » - archive damaged
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-01-01

005614\Backup files 25.zip » ZIP » C\Users

\Dad\AppData\Local\Mozilla\Firefox\Profiles

\1jn9px60.default\Cache\8\2A\3AF02d01 »

CWS » file.swf - unpack error
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-02-03

222942\Backup files 1.zip » ZIP » C\Users

\Dad\AppData\Local\Mozilla\Firefox\Profiles

\1jn9px60.default\Cache\3\46\4AB1Fd01 »

CWS » file.swf - unpack error
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-02-03

222942\Backup files 11.zip » ZIP » C\Users

\Dad\Music\iTunes\iTunes Media\Mobile

Applications\Nike Training.ipa » ZIP » -

archive damaged
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-02-03

222942\Backup files 17.zip » ZIP » C\Users

\Dad\Music\iTunes\Mobile Applications

\Battleheart 1.0.4.ipa » ZIP » - archive

damaged
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-02-03

222942\Backup files 18.zip » ZIP » C\Users

\Dad\Music\iTunes\Mobile Applications\Drag

Racing 1.0.5.ipa » ZIP » - archive damaged
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-02-03

222942\Backup files 21.zip » ZIP » C\Users

\Dad\Music\iTunes\Mobile Applications

\sf4iPhone 1.00.07.ipa » ZIP » - archive

damaged
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-02-03

222942\Backup files 23.zip » ZIP » C\Users

\Dad\Music\iTunes\Mobile Applications\Tiger

12 1.0.4.ipa » ZIP » - archive damaged
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-02-03

222942\Backup files 27.zip » ZIP » C\Users

\Dad\Downloads\lws231_full.exe » NSIS »

YouKuInstaller_Release_x86.exe » NSIS »

ikuacc.dat » ZIP » - - error - password-

protected file
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-02-03

222942\Backup files 27.zip » ZIP » C\Users

\Dad\Downloads\lws231_full.exe » NSIS »

puninstc.exe » NSIS » uninstall.exe » NSIS -

archive damaged
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-02-03

222942\Backup files 27.zip » ZIP » C\Users

\Dad\Downloads\lws231_full.exe » NSIS »

puninstt.exe » NSIS » uninstall.exe » NSIS -

archive damaged
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-02-03

222942\Backup files 3.zip » ZIP » C\Users

\Dad\Downloads\audacitywin2.0.1.exe » INNO

» - archive damaged
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-02-03

222942\Backup files 3.zip » ZIP » C\Users

\Dad\Downloads\jxpiinstall.exe » CAB »

jusched - archive damaged - the file could not

be extracted.
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-02-03

222942\Backup files 3.zip » ZIP » C\Users

\Dad\Downloads\jxpiinstall.exe » CAB »

task.xml - archive damaged - the file could

not be extracted.
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-02-03

222942\Backup files 3.zip » ZIP » C\Users

\Dad\Downloads\jxpiinstall.exe » CAB »

task64.xml - archive damaged - the file could

not be extracted.
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-02-03

222942\Backup files 3.zip » ZIP » C\Users

\Dad\Downloads

\pal_install_a729_r1105_p128.exe »

INDIGOROSE » PaltalkToolbar-1.0.0.12.exe »

NSIS » searchresultstb.dll - a variant of

Win32/Toolbar.Visicom.A potentially unwanted

application - action selection postponed until

scan completion
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-02-03

222942\Backup files 3.zip » ZIP » C\Users

\Dad\Downloads

\pal_install_a729_r1105_p128.exe »

INDIGOROSE » PaltalkToolbar-1.0.0.12.exe »

NSIS » paltalkX.dll - a variant of

Win32/Toolbar.Visicom.B potentially unwanted

application - action selection postponed until

scan completion
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-02-03

222942\Backup files 3.zip » ZIP » C\Users

\Dad\Downloads

\pal_install_a729_r1105_p128.exe »

INDIGOROSE » PaltalkToolbar-1.0.0.12.exe »

NSIS » dtUser.exe - a variant of

Win32/Toolbar.Visicom.C potentially unwanted

application - action selection postponed until

scan completion
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-02-03

222942\Backup files 3.zip » ZIP » C\Users

\Dad\Downloads

\pal_install_a729_r1105_p128.exe »

INDIGOROSE » %AppFolder%\shfolder.dll - is

OK
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-02-03

222942\Backup files 3.zip » ZIP » C\Users

\Dad\Downloads\wpsetup.exe » CAB »

setup.exe - a variant of

Win32/Toolbar.Conduit.H potentially unwanted

application - action selection postponed until

scan completion
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-02-03

222942\Backup files 5.zip » ZIP » C\Users

\Dad\Music\iTunes\iTunes Media\Mobile

Applications\CapcomGame 1.ipa » ZIP » -

archive damaged
K:\BRIDGES1\Backup Set 2013-01-01

005614\Backup Files 2013-03-05

012758\Backup files 1.zip » ZIP » C\Users

\Dad\AppData\Local\Mozilla\Firefox\Profiles

\1jn9px60.default\Cache\6\02\97126d01 »

GZIP » 97126d01 - unpack error
K:\BRIDGES1\Backup Set 2013-03-07

182223\Backup Files 2013-03-07

182223\Backup files 27.zip » ZIP » C\Users

\Dad\Downloads

\pal_install_a729_r1105_p128.exe »

INDIGOROSE » PaltalkToolbar-1.0.0.12.exe »

NSIS » searchresultstb.dll - a variant of

Win32/Toolbar.Visicom.A potentially unwanted

application - action selection postponed until

scan completion
K:\BRIDGES1\Backup Set 2013-03-07

182223\Backup Files 2013-03-07

182223\Backup files 27.zip » ZIP » C\Users

\Dad\Downloads

\pal_install_a729_r1105_p128.exe »

INDIGOROSE » PaltalkToolbar-1.0.0.12.exe »

NSIS » paltalkX.dll - a variant of

Win32/Toolbar.Visicom.B potentially unwanted

application - action selection postponed until

scan completion
K:\BRIDGES1\Backup Set 2013-03-07

182223\Backup Files 2013-03-07

182223\Backup files 27.zip » ZIP » C\Users

\Dad\Downloads

\pal_install_a729_r1105_p128.exe »

INDIGOROSE » PaltalkToolbar-1.0.0.12.exe »

NSIS » dtUser.exe - a variant of

Win32/Toolbar.Visicom.C potentially unwanted

application - action selection postponed until

scan completion
K:\BRIDGES1\Backup Set 2013-03-07

182223\Backup Files 2013-03-07

182223\Backup files 27.zip » ZIP » C\Users

\Dad\Downloads

\pal_install_a729_r1105_p128.exe »

INDIGOROSE » %AppFolder%\shfolder.dll - is

OK
K:\BRIDGES1\Backup Set 2013-03-07

182223\Backup Files 2013-03-07

182223\Backup files 27.zip » ZIP » C\Users

\Dad\Downloads\wpsetup.exe » CAB »

setup.exe - a variant of

Win32/Toolbar.Conduit.H potentially unwanted

application - action selection postponed until

scan completion
K:\BRIDGES1\Backup Set 2013-03-07

182223\Backup Files 2013-03-07

182223\Backup files 29.zip » ZIP » C\Users

\Dad\Music\iTunes\iTunes Media\Mobile

Applications\CapcomGame 1.ipa » ZIP » -

archive damaged
K:\BRIDGES1\Backup Set 2013-03-07

182223\Backup Files 2013-03-07

182223\Backup files 35.zip » ZIP » C\Users

\Dad\Music\iTunes\iTunes Media\Mobile

Applications\Nike Training.ipa » ZIP » -

archive damaged
K:\BRIDGES1\Backup Set 2013-03-07

182223\Backup Files 2013-03-07

182223\Backup files 41.zip » ZIP » C\Users

\Dad\Music\iTunes\Mobile Applications

\Battleheart 1.0.4.ipa » ZIP » - archive

damaged
K:\BRIDGES1\Backup Set 2013-03-07

182223\Backup Files 2013-03-07

182223\Backup files 42.zip » ZIP » C\Users

\Dad\Music\iTunes\Mobile Applications\Drag

Racing 1.0.5.ipa » ZIP » - archive damaged
K:\BRIDGES1\Backup Set 2013-03-07

182223\Backup Files 2013-03-07

182223\Backup files 47.zip » ZIP » C\Users

\Dad\Music\iTunes\Mobile Applications\Tiger

12 1.0.4.ipa » ZIP » - archive damaged
K:\BRIDGES1\Backup Set 2013-03-07

182223\Backup Files 2013-03-10

225710\Backup files 3.zip » ZIP » C\Users

\Dad\AppData\LocalLow\Google\GoogleEarth

\webdata\f_000103 » ZIP » hu.kml - archive

damaged - the file could not be extracted.
K:\BRIDGES1\Backup Set 2013-03-07

182223\Backup Files 2013-03-10

225710\Backup files 3.zip » ZIP » C\Users

\Dad\AppData\LocalLow\Google\GoogleEarth

\webdata\f_000103 » ZIP » - archive

damaged
K:\BRIDGES1\Backup Set 2013-03-07

182223\Backup Files 2013-04-11

034020\Backup files 1.zip » ZIP » C\Users

\Dad\Desktop\FlashPlayer_V.64396923b.exe »

NSIS » Script.nsi - Win32/DomaIQ.C

potentially unwanted application - action

selection postponed until scan completion
K:\BRIDGES1\Backup Set 2013-03-07

182223\Backup Files 2013-04-11

034020\Backup files 1.zip » ZIP » C\Users

\Dad\Desktop\FlashPlayer_V.64396923b.exe »

NSIS » DomaIQ10.exe - Win32/DomaIQ.AB

potentially unwanted application - action

selection postponed until scan completion
K:\BRIDGES1\Backup Set 2013-03-07

182223\Backup Files 2013-04-11

034020\Backup files 1.zip » ZIP » C\Users

\Dad\Desktop\FlashPlayer_V.64396923b.exe »

NSIS » DomaIQ.exe - Win32/DomaIQ.AB

potentially unwanted application - action

selection postponed until scan completion
K:\BRIDGES1\Backup Set 2013-03-07

182223\Backup Files 2013-04-11

034020\Backup files 1.zip » ZIP » C\Users

\Dad\Desktop\FlashPlayer_V.64396923b.exe »

NSIS » OfferBrokerage_14003.exe - a

variant of Win32/InstallIQ.A potentially

unwanted application - action selection

postponed until scan completion
K:\BRIDGES1\Backup Set 2013-03-07

182223\Backup Files 2013-04-11

034020\Backup files 1.zip » ZIP » C\Users

\Dad\AppData\Local\Mozilla\Firefox\Profiles

\1jn9px60.default\Cache\7\5D\E5DD0d01 »

CWS » file.swf - unpack error
K:\BRIDGES1\Backup Set 2013-03-07

182223\Backup Files 2013-04-11

034020\Backup files 1.zip » ZIP » C\Users

\Dad\AppData\Local

\Updater19962\Updater19962.exe - a variant

of Win32/Toolbar.CrossRider.C potentially

unwanted application - action selection

postponed until scan completion
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Roaming\SearchProtect\Res

\SPSetup.exe » NSIS » application.js -

Win32/Conduit.SearchProtect.A potentially

unwanted application - action selection

postponed until scan completion
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Roaming\SearchProtect\Res

\SPSetup.exe » NSIS » nsprotector.js -

Win32/Conduit.SearchProtect.A potentially

unwanted application - action selection

postponed until scan completion
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Roaming\SearchProtect\Res

\SPSetup.exe » NSIS » 耩 -

Win32/Conduit.SearchProtect.S potentially

unwanted application - action selection

postponed until scan completion
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Roaming\SearchProtect\Res

\SPSetup.exe » NSIS » uninstall.exe » NSIS

» 耩 - Win32/Conduit.SearchProtect.S

potentially unwanted application - action

selection postponed until scan completion
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Roaming\SearchProtect\Res

\SPSetup.exe » NSIS » cltmng.exe - a variant

of Win32/Conduit.SearchProtect.B potentially

unwanted application - action selection

postponed until scan completion
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Roaming\SearchProtect\Res

\SPSetup.exe » NSIS » SPRunner.exe - a

variant of Win32/Conduit.SearchProtect.D

potentially unwanted application - action

selection postponed until scan completion
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Roaming\SearchProtect\Res

\SPSetup.exe » NSIS » ChromeModule.dll - a

variant of Win32/Conduit.SearchProtect.C

potentially unwanted application - action

selection postponed until scan completion
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Roaming\SearchProtect\Res

\SPSetup.exe » NSIS » FirefoxModule.dll - a

variant of Win32/Conduit.SearchProtect.C

potentially unwanted application - action

selection postponed until scan completion
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Roaming\SearchProtect\Res

\SPSetup.exe » NSIS »

InternetExplorerModule.dll - a variant of

Win32/Conduit.SearchProtect.C potentially

unwanted application - action selection

postponed until scan completion
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Roaming\SearchProtect\Res

\SPSetup.exe » NSIS » SPHook32.dll - is OK
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Local\Conduit\Chrome

\CT3306061\CHUninstaller.exe » NSIS »

ilesDir - archive damaged - the file could not

be extracted.
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Local\Conduit\Chrome

\CT3306061\CHUninstaller.exe » NSIS »

nsUtils.dll - a variant of

Win32/Conduit.SearchProtect.N potentially

unwanted application - action selection

postponed until scan completion
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Local\Conduit\Chrome

\CT3306061\CHUninstaller.exe » NSIS »

Omnibox.dll - a variant of

Win32/Toolbar.Conduit.AJ potentially unwanted

application - action selection postponed until

scan completion
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Local\Conduit\Chrome

\CT3306061\UninstallerUI.exe » NSIS »

ilesDir - archive damaged - the file could not

be extracted.
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Local\Conduit\Chrome

\CT3306061\UninstallerUI.exe » NSIS »

FilesDir - archive damaged - the file could not

be extracted.
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Local\Conduit\Chrome

\CT3306061\UninstallerUI.exe » NSIS »

Omnibox.dll - a variant of

Win32/Toolbar.Conduit.AJ potentially unwanted

application - action selection postponed until

scan completion
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Local\CRE

\lipgolpfajiadodbcbljdpmbmbdmfcil.crx »

CHROMEEXTENSION » content.zip » ZIP »

nativeMessaging/TBMessagingHost.exe - a

variant of Win32/Toolbar.Conduit.AH

potentially unwanted application - action

selection postponed until scan completion
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Local\Google\Chrome\User

Data\Default\Extensions

\lipgolpfajiadodbcbljdpmbmbdmfcil

\10.24.3.3_0\nativeMessaging

\TBMessagingHost.exe - a variant of

Win32/Toolbar.Conduit.AH potentially

unwanted application - action selection

postponed until scan completion
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Local\Mozilla\Firefox\Profiles

\1jn9px60.default\Cache\6\18\F3610d01 »

GZIP » F3610d01 » CWS » file.swf - unpack

error
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 24.zip » ZIP » C\Users

\Dad\AppData\Local\NativeMessaging

\CT3306061\1_0_0_7\TBMessagingHost.exe -

a variant of Win32/Toolbar.Conduit.AH

potentially unwanted application - action

selection postponed until scan completion
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 24.zip » ZIP » C\Users

\Dad\AppData\Local

\Updater19962\Updater19962.exe - a variant

of Win32/Toolbar.CrossRider.C potentially

unwanted application - action selection

postponed until scan completion
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 24.zip » ZIP » C\Users

\Dad\AppData\LocalLow

\Connect_DLC_5\tbConn.dll - a variant of

Win32/Toolbar.Conduit.X potentially unwanted

application - action selection postponed until

scan completion
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 30.zip » ZIP » C\Users

\Dad\Music\iTunes\iTunes Media\Mobile

Applications\CapcomGame 1.ipa » ZIP » -

archive damaged
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 43.zip » ZIP » C\Users

\Dad\Music\iTunes\Mobile Applications\Drag

Racing 1.0.5.ipa » ZIP » - archive damaged
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 48.zip » ZIP » C\Users

\Dad\Music\iTunes\Mobile Applications\Tiger

12 1.0.4.ipa » ZIP » - archive damaged
K:\BRIDGES1\Backup Set 2014-01-05

190000\Backup Files 2014-01-05

190000\Backup files 62.zip » ZIP » - archive

damaged
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-02-09

222140\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Roaming\SearchProtect\Res

\SPSetup.exe » NSIS » application.js -

Win32/Conduit.SearchProtect.A potentially

unwanted application - action selection

postponed until scan completion
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-02-09

222140\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Roaming\SearchProtect\Res

\SPSetup.exe » NSIS » nsprotector.js -

Win32/Conduit.SearchProtect.A potentially

unwanted application - action selection

postponed until scan completion
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-02-09

222140\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Roaming\SearchProtect\Res

\SPSetup.exe » NSIS » 耩 -

Win32/Conduit.SearchProtect.S potentially

unwanted application - action selection

postponed until scan completion
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-02-09

222140\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Roaming\SearchProtect\Res

\SPSetup.exe » NSIS » uninstall.exe » NSIS

» 耩 - Win32/Conduit.SearchProtect.S

potentially unwanted application - action

selection postponed until scan completion
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-02-09

222140\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Roaming\SearchProtect\Res

\SPSetup.exe » NSIS » cltmng.exe - a variant

of Win32/Conduit.SearchProtect.B potentially

unwanted application - action selection

postponed until scan completion
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-02-09

222140\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Roaming\SearchProtect\Res

\SPSetup.exe » NSIS » SPRunner.exe - a

variant of Win32/Conduit.SearchProtect.D

potentially unwanted application - action

selection postponed until scan completion
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-02-09

222140\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Roaming\SearchProtect\Res

\SPSetup.exe » NSIS » ChromeModule.dll - a

variant of Win32/Conduit.SearchProtect.C

potentially unwanted application - action

selection postponed until scan completion
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-02-09

222140\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Roaming\SearchProtect\Res

\SPSetup.exe » NSIS » FirefoxModule.dll - a

variant of Win32/Conduit.SearchProtect.C

potentially unwanted application - action

selection postponed until scan completion
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-02-09

222140\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Roaming\SearchProtect\Res

\SPSetup.exe » NSIS »

InternetExplorerModule.dll - a variant of

Win32/Conduit.SearchProtect.C potentially

unwanted application - action selection

postponed until scan completion
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-02-09

222140\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Roaming\ValueApps\CH

\TBVerifier.dll - is OK
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-02-09

222140\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Local\CRE

\lipgolpfajiadodbcbljdpmbmbdmfcil.crx »

CHROMEEXTENSION » content.zip » ZIP »

nativeMessaging/TBMessagingHost.exe - a

variant of Win32/Toolbar.Conduit.AH

potentially unwanted application - action

selection postponed until scan completion
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-02-09

222140\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Local\Google\Chrome\User

Data\Default\Extensions

\lipgolpfajiadodbcbljdpmbmbdmfcil

\10.24.3.3_0\nativeMessaging

\TBMessagingHost.exe - a variant of

Win32/Toolbar.Conduit.AH potentially

unwanted application - action selection

postponed until scan completion
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-02-09

222140\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Local\Google\Chrome\User

Data\Default\Extensions

\lipgolpfajiadodbcbljdpmbmbdmfcil

\10.26.2.507_0\APISupport\APISupport.dll - a

variant of Win32/Conduit.SearchProtect.P

potentially unwanted application - action

selection postponed until scan completion
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-02-09

222140\Backup files 23.zip » ZIP » C\Users

\Dad\AppData\Local\Google\Chrome\User

Data\Default\Extensions

\lipgolpfajiadodbcbljdpmbmbdmfcil

\10.26.2.507_0\nativeMessaging

\TBMessagingHost.exe - a variant of

Win32/Toolbar.Conduit.AH potentially

unwanted application - action selection

postponed until scan completion
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-02-09

222140\Backup files 24.zip » ZIP » C\Users

\Dad\AppData\Local\NativeMessaging

\CT3306061\1_0_0_7\TBMessagingHost.exe -

a variant of Win32/Toolbar.Conduit.AH

potentially unwanted application - action

selection postponed until scan completion
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-02-09

222140\Backup files 24.zip » ZIP » C\Users

\Dad\AppData\Local

\Updater19962\Updater19962.exe - a variant

of Win32/Toolbar.CrossRider.C potentially

unwanted application - action selection

postponed until scan completion
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-02-09

222140\Backup files 31.zip » ZIP » C\Users

\Dad\Music\iTunes\iTunes Media\Mobile

Applications\CapcomGame 1.ipa » ZIP » -

archive damaged
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-02-09

222140\Backup files 44.zip » ZIP » C\Users

\Dad\Music\iTunes\Mobile Applications\Drag

Racing 1.0.5.ipa » ZIP » - archive damaged
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-02-09

222140\Backup files 49.zip » ZIP » C\Users

\Dad\Music\iTunes\Mobile Applications\Tiger

12 1.0.4.ipa » ZIP » - archive damaged
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-03-01

212047\Backup files 1.zip » ZIP » C\Users

\Dad\Desktop\picasa_setup.exe - a variant of

Win32/InstallCore.IL potentially unwanted

application - action selection postponed until

scan completion
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-03-01

212047\Backup files 2.zip » ZIP » C\Users

\Dad\AppData\Local\Mozilla\Firefox\Profiles

\57thecta.default\Cache\8\E8\BB744d01 »

CWS » file.swf - unpack error
K:\BRIDGES1\Backup Set 2014-02-09

222140\Backup Files 2014-03-02

193230\Backup files 1.zip » ZIP » C\Users

\Dad\AppData\Local\Mozilla\Firefox\Profiles

\57thecta.default\Cache\9\5C\4AB22d01 »

CWS » file.swf - unpack error
K:\BRIDGES1\Backup Set 2014-09-29

061749\Backup Files 2014-09-29

061749\Backup files 19.zip » ZIP » C\Users

\Dad\Desktop\My Documents\picasa_setup.exe

- a variant of Win32/InstallCore.IL potentially

unwanted application - action selection

postponed until scan completion
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-16

031026\Backup files 9.zip » ZIP » C\Users

\Dad\AppData\Roaming\UZNYUL » ZIP »

background.js - JS/Toolbar.Crossrider.C

potentially unwanted application - action

selection postponed until scan completion
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-16

031026\Backup files 9.zip » ZIP » C\Users

\Dad\AppData\Roaming\WTPQZFD » ZIP »

content/overlay.js - JS/Toolbar.Crossrider.C

potentially unwanted application - action

selection postponed until scan completion
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

images/bg-close-program.png - error -

password-protected file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

images/bg-download-bar-empty.png - error -

password-protected file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

images/bg-download-bar-error.png - error -

password-protected file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

images/bg-download-bar-full.png - error -

password-protected file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

images/bg-header-error.gif - error -

password-protected file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

images/button-center-highlight.png - error -

password-protected file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

images/button-center.png - error - password-

protected file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

images/button-left-highlight.png - error -

password-protected file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

images/button-left.png - error - password-

protected file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

images/button-right-highlight.png - error -

password-protected file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

images/button-right.png - error - password-

protected file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

images/icon-blank.gif - error - password-

protected file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

images/icon-complete-error.gif - error -

password-protected file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

images/icon-complete.gif - error - password-

protected file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

images/icon-error.png - error - password-

protected file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

images/logo-adobe.gif - error - password-

protected file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

interop/downloader.dll - error - password-

protected file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/cn.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/cs.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/da.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/de.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/en-us.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/es.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/fi.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/fr.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/hr.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/hu.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/it.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/ja.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/ko.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/nl.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/no.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/pl.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/pt.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/ro.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/ru.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/sk.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/sl.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/sv.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/tr.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/tw.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

locale/ua.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

util/gccheck.exe - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

util/gtbcheck.exe - error - password-

protected file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

app.config.xml - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

compact.min.js - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

environment.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

logo.ico - error - password-protected file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

mainwindow.config.xml - error - password-

protected file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

mainwindow.css - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

mainwindow.html - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 2.zip » ZIP » C\Users

\Dad\Downloads\adobe_flash.exe » ZIP »

workflow.json - error - password-protected

file
K:\BRIDGES1\Backup Set 2015-01-04

190000\Backup Files 2015-01-24

203436\Backup files 3.zip » ZIP » C\Users

\Public\Documents\Downloaded Installers

\{850A14FC-F410-47F7-94E4-

38F4D3F270D4}\setup.msi » MSI - archive

damaged - the file could not be extracted.
K:\Dad

\setup_11.0.0.1245.x01_2012_03_29_09_22.e

xe » RAR » 1939723rar.exe » RAR - error -

password-protected file
K:\Dad\BRIDGES1\Backup Set 2012-03-31

183405\Backup Files 2012-03-31

183405\Backup files 16.zip » ZIP » C\Users

\Dad\Downloads

\pal_install_a729_r1105_p128.exe »

INDIGOROSE » PaltalkToolbar-1.0.0.12.exe »

NSIS » searchresultstb.dll - a variant of

Win32/Toolbar.Visicom.A potentially unwanted

application - action selection postponed until

scan completion
K:\Dad\BRIDGES1\Backup Set 2012-03-31

183405\Backup Files 2012-03-31

183405\Backup files 16.zip » ZIP » C\Users

\Dad\Downloads

\pal_install_a729_r1105_p128.exe »

INDIGOROSE » PaltalkToolbar-1.0.0.12.exe »

NSIS » paltalkX.dll - a variant of

Win32/Toolbar.Visicom.B potentially unwanted

application - action selection postponed until

scan completion
K:\Dad\BRIDGES1\Backup Set 2012-03-31

183405\Backup Files 2012-03-31

183405\Backup files 16.zip » ZIP » C\Users

\Dad\Downloads

\pal_install_a729_r1105_p128.exe »

INDIGOROSE » PaltalkToolbar-1.0.0.12.exe »

NSIS » dtUser.exe - a variant of

Win32/Toolbar.Visicom.C potentially unwanted

application - action selection postponed until

scan completion
K:\Dad\BRIDGES1\Backup Set 2012-03-31

183405\Backup Files 2012-03-31

183405\Backup files 16.zip » ZIP » C\Users

\Dad\Downloads

\pal_install_a729_r1105_p128.exe »

INDIGOROSE » %AppFolder%\shfolder.dll - is

OK
K:\Dad\BRIDGES1\Backup Set 2012-03-31

183405\Backup Files 2012-03-31

183405\Backup files 16.zip » ZIP » C\Users

\Dad\Downloads\wpsetup.exe » CAB »

setup.exe - a variant of

Win32/Toolbar.Conduit.H potentially unwanted

application - action selection postponed until

scan completion
K:\Dad\BRIDGES1\Backup Set 2012-03-31

183405\Backup Files 2012-03-31

183405\Backup files 18.zip » ZIP » C\Users

\Dad\Music\iTunes\iTunes Media\Mobile

Applications\CapcomGame 1.ipa » ZIP » -

archive damaged
K:\Dad\BRIDGES1\Backup Set 2012-03-31

183405\Backup Files 2012-04-23

013144\Backup files 2.zip » ZIP » C\Users

\Dad\AppData\Local\Mozilla\Firefox\Profiles

\1jn9px60.default\Cache\2\6B\EBD75d01 »

GZIP » EBD75d01 - unpack error
K:\Dad\BRIDGES1\Backup Set 2012-03-31

183405\Backup Files 2012-04-23

013144\Backup files 2.zip » ZIP » C\Users

\Dad\AppData\Local\Mozilla\Firefox\Profiles

\1jn9px60.default\Cache\3\18\EA165d01 »

GZIP » EA165d01 - unpack error
K:\Dad\BRIDGES1\Backup Set 2012-03-31

183405\Backup Files 2012-04-23

013144\Backup files 3.zip » ZIP » C\Users

\Dad\AppData\Local\Mozilla\Firefox\Profiles

\1jn9px60.default\Cache\8\4F\1F09Bd01 »

GZIP » 1F09Bd01 - unpack error
K:\Dad\BRIDGES1\Backup Set 2012-03-31

183405\Backup Files 2012-04-23

013144\Backup files 3.zip » ZIP » C\Users

\Dad\AppData\Local\Mozilla\Firefox\Profiles

\1jn9px60.default\Cache\9\1B\FF2D4d01 »

GZIP » FF2D4d01 - unpack error
K:\Dad\BRIDGES1\Backup Set 2012-03-31

183405\Backup Files 2012-04-23

013144\Backup files 3.zip » ZIP » C\Users

\Dad\AppData\Local\Mozilla\Firefox\Profiles

\1jn9px60.default\Cache\9\AA\BB30Ad01 »

GZIP » BB30Ad01 - unpack error
K:\Dad\BRIDGES1\Backup Set 2012-03-31

183405\Backup Files 2012-04-23

013144\Backup files 3.zip » ZIP » C\Users

\Dad\AppData\Local\Mozilla\Firefox\Profiles

\1jn9px60.default\Cache\A\6E\12594d01 »

GZIP » 12594d01 - unpack error
K:\Dad\BRIDGES1\Backup Set 2012-03-31

183405\Backup Files 2012-04-23

013144\Backup files 4.zip » ZIP » C\Users

\Dad\AppData\Local\Mozilla\Firefox\Profiles

\1jn9px60.default\Cache\C\09\747C7d01 »

GZIP » 747C7d01 - unpack error
K:\Dad\BRIDGES1\Backup Set 2012-03-31

183405\Backup Files 2012-04-23

013144\Backup files 4.zip » ZIP » C\Users

\Dad\AppData\Local\Mozilla\Firefox\Profiles

\1jn9px60.default\Cache\F\4F\241BFd01 »

GZIP » 241BFd01 - unpack error
K:\Dad_Backup\2012-08-15_04-13-

40\Memeo\2012-08-15_04-13-40\C_\Users

\Dad\Downloads\Firefox_Setup_14.0.1.exe »

7ZSD » - error reading archive
K:\Dad_Backup\2012-08-15_04-13-

40\Memeo\2012-08-15_04-13-40\C_\Users

\Dad\Downloads\msgr11us.exe » NSIS »

ymsgr_suite_setup.exe » NSIS »

ProgramFilesDir - archive damaged - the file

could not be extracted.
K:\Dad_Backup\2012-08-15_04-13-

40\Memeo\2012-08-15_04-13-40\C_\Users

\Dad\Downloads\msgr11us.exe » NSIS »

ymsgr_suite_setup.exe » NSIS » ilesDir -

archive damaged - the file could not be

extracted.
K:\Dad_Backup\2012-08-15_04-13-

40\Memeo\2012-08-15_04-13-40\C_\Users

\Dad\Downloads

\pal_install_a729_r39062_p128.exe » NSIS »

ilesDir - archive damaged - the file could not

be extracted.
K:\Dad_Backup\2012-08-15_04-13-

40\Memeo\2012-08-15_04-13-40\C_\Users

\Dad\Downloads

\pal_install_a729_r39062_p128.exe » NSIS »

shfolder.dll - is OK
Q:\ - error opening [4]
C:\FRST\Quarantine\C\Users\Dad\AppData

\Local\Temp\BootstrapperIminent.exe.xBAD -

a variant of Win32/Toolbar.Iminent.C

potentially unwanted application - cleaned by

deleting - quarantined [1]
C:\FRST\Quarantine\C\Users\Dad\AppData

\Local\Temp\ConsumerInputSetup.exe.xBAD -

Win32/Compete.A potentially unwanted

application - cleaned by deleting - quarantined

[1]
C:\FRST\Quarantine\C\Users\Dad\AppData

\Local\Temp\optprosetup.exe.xBAD - a variant

of Win32/OptimizerEliteMax.C potentially

unwanted application - cleaned by deleting -

quarantined [1]
C:\FRST\Quarantine\C\Users\Dad\AppData

\Local\Temp\sprz.exe.xBAD » INNO »

{app}\spdata.dat » RAR - error - password-

protected file
C:\FRST\Quarantine\C\Users\Dad\AppData

\Local\Temp\sprz.exe.xBAD » INNO »

{app}\Firefox\{{5081D2D4-1637-404c-B74F-

50526718257D}.xpi » ZIP »

chrome/content/main.js -

Win32/Toolbar.Perion.K potentially unwanted

application - cleaned by deleting - quarantined

[1]
C:\FRST\Quarantine\C\Users\Dad\AppData

\Local\Temp\sprz.exe.xBAD » INNO »

{app}\Firefox\chrome\content\main.js -

Win32/Toolbar.Perion.K potentially unwanted

application - cleaned by deleting - quarantined

[1]
C:\FRST\Quarantine\C\Users\Dad\AppData

\Local\Temp\sprz.exe.xBAD » INNO »

{app}\source.crx » CHROMEEXTENSION »

content.zip » ZIP » main.js -

Win32/Toolbar.Perion.K potentially unwanted

application - cleaned by deleting - quarantined

[1]
C:\FRST\Quarantine\C\Users\Dad\AppData

\Local\Temp\sprz.exe.xBAD » INNO »

{app}\DGChrome.exe - Win32/Toolbar.Perion.J

potentially unwanted application - cleaned by

deleting - quarantined [1]
C:\Program Files (x86)\52df7d05-df7b-4abf-

8cb0-684d1a20a3e7\5a89858f-5858-4f90-

a59a-a2378246373a.dll - a variant of

Win32/Toolbar.CrossRider.BM potentially

unwanted application - cleaned by deleting -

quarantined [1]
C:\Program Files (x86)\Adobe\52df7d05-

df7b-4abf-8cb0-684d1a20a3e7.dll - a variant

of Win32/Toolbar.CrossRider.BM potentially

unwanted application - cleaned by deleting -

quarantined [1]
C:\Users\Dad\AppData\Roaming\Mozilla

\Firefox\Profiles\h46m51x5.default-

1342635577168\extensions\staged\jid1-

U7omKQ6kQfxMaQ@jetpack\resources

\smootherweb\data\content.js -

Win32/SmootherWeb.C potentially unwanted

application - cleaned by deleting - quarantined

[1]
Number of scanned objects: 1340768
Number of threats found: 71
Number of cleaned objects: 13
Time of completion: 7:54:39 PM Total scanning

time: 9221 sec (02:33:41)

Notes:
[1] Object has been deleted as it only

contained the virus body.
[4] Object cannot be opened. It may be in use

by another application or operating system.

 

[Juliet]

The format of notepad made that impossible to read, word wrap must have been checked?

One thing I picked up on

Best Buy pc app <-- is this in your add/remove programs list?
If you find that please uninstall.


I could tell some things were removed others not, let's try something different.

HitmanPro

• Please download HitmanPro (x32) / HitmanPro (x64) and save the file to your Desktop.
• Right-Click HitmanPro.exe / HitmanPro_x64.exe and select
  
  Run as administrator to run the programme.
• Click Next, and agree to the End User License Agreement (EULA) if prompted.
• Place a checkmark next to No, I only want to perform a one-time scan to check this computer.
• Click Next.
• The scan will start, and will typically take no longer than 2-3 minutes.
• Upon completion, click on the drop-down menu of the found entries (if any) and select: Apply to all => Ignore <=.
• Click Next.
• Click Save Log, and select your Desktop as the location. Copy the contents of the log and paste in your next reply.

Note: If a drop-down menu is not present after the scan is complete, please do not delete the detected items. Close the HitmanPro window. Navigate to C:\ProgramData\HitmanPro\Logs, open the log, copy the contents and paste in your next reply.

 

[rcb56]

juliet i'm sorry about the log not saved right, as for the best buy you asked about, no it is not in my programs and i have not seen that or anything of their name. hope this one is right...btw, pc is running much smoother and seems the worst of the problems are gone. it is still very sketchy and jumpy when scrolling. it never did that. may be a sorry mouse. hitman still says it's creating a restore point...can i close it?

HitmanPro 3.7.9.234
www.hitmanpro.com

   Computer name . . . . : BRIDGES1
   Windows . . . . . . . : 6.1.1.7601.X64/4
   User name . . . . . . : Bridges1\Dad
   UAC . . . . . . . . . : Disabled
   License . . . . . . . : Free

   Scan date . . . . . . : 2015-02-04 06:03:57
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 3m 39s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 0
   Traces  . . . . . . . : 43

   Objects scanned . . . : 1,875,901
   Files scanned . . . . : 43,824
   Remnants scanned  . . : 386,749 files / 1,445,328 keys

Suspicious files ____________________________________________________________

   C:\Users\Dad\Desktop\FRST-OlderVersion\FRST-OlderVersion\FRST64.exe
      Size . . . . . . . : 2,130,432 bytes
      Age  . . . . . . . : 6.4 days (2015-01-28 19:56:05)
      Entropy  . . . . . : 7.5
      SHA-256  . . . . . : 4FF2D9D33D5023F1C1407722E3FA368593201F4D69976E2236CD12935BFF35E3
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.

   C:\Users\Dad\Desktop\FRST-OlderVersion\FRST64.exe
      Size . . . . . . . : 2,131,456 bytes
      Age  . . . . . . . : 0.8 days (2015-02-03 10:51:10)
      Entropy  . . . . . : 7.5
      SHA-256  . . . . . : 75A43C7DCD832E78EE09AFE27A6C3C8EF33470D1323A781EEC04E13E4F3197A0
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.
      Forensic Cluster
          0.0s C:\Users\Dad\Desktop\FRST-OlderVersion\FRST64.exe
          0.0s C:\Users\Dad\Desktop\FRST-OlderVersion\FRST64.exe
          1.0s C:\Users\Dad\Desktop\FRST-OlderVersion\FRST-OlderVersion\
         21.3s C:\Users\Dad\Desktop\FRST-OlderVersion\FRST.txt
         21.3s C:\Users\Dad\Desktop\FRST-OlderVersion\FRST.txt
         21.3s C:\Users\Dad\Desktop\FRST-OlderVersion\FRST.txt
         21.3s C:\Users\Dad\Desktop\FRST-OlderVersion\FRST.txt

   C:\Users\Dad\Desktop\FRST64.exe
      Size . . . . . . . : 2,131,456 bytes
      Age  . . . . . . . : 1.8 days (2015-02-02 11:36:45)
      Entropy  . . . . . : 7.5
      SHA-256  . . . . . : 75A43C7DCD832E78EE09AFE27A6C3C8EF33470D1323A781EEC04E13E4F3197A0
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.
      References
         HKU\S-1-5-21-2107755742-302254199-1763176924-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\C:\Users\Dad\Desktop\FRST64.exe
      Forensic Cluster
          0.0s C:\Users\Dad\Desktop\FRST64.exe
          0.9s C:\Users\Dad\Desktop\FRST-OlderVersion\

   C:\Users\Dad\Desktop\MiniToolBox.exe
      Size . . . . . . . : 401,920 bytes
      Age  . . . . . . . : 1.4 days (2015-02-02 20:03:09)
      Entropy  . . . . . : 7.9
      SHA-256  . . . . . : 520E765E9043243127BE3D7B7210D32E2D1994866DC7A0F57EC05FA480D6D062
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.
      Forensic Cluster
         -5.8s C:\Users\Dad\Desktop\MiniToolBox.exe
         -5.8s C:\Users\Dad\Desktop\MiniToolBox.exe
         -5.8s C:\Users\Dad\Desktop\MiniToolBox.exe
         -5.8s C:\Users\Dad\Desktop\MiniToolBox.exe
         -5.8s C:\Users\Dad\Desktop\MiniToolBox.exe
         -5.8s C:\Users\Dad\Desktop\MiniToolBox.exe
         -5.8s C:\Users\Dad\Desktop\MiniToolBox.exe
         -5.8s C:\Users\Dad\Desktop\MiniToolBox.exe
         -5.8s C:\Users\Dad\Desktop\MiniToolBox.exe
         -5.8s C:\Users\Dad\Desktop\MiniToolBox.exe
         -5.8s C:\Users\Dad\Desktop\MiniToolBox.exe


Potential Unwanted Programs _________________________________________________

   C:\rei\ (ReimageRepair)
   C:\rei\cfl.rei (ReimageRepair)
   HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}\ (DomalQ)
   HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}\ (DomalQ)
   HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\ (FLV Player)
   HKU\S-1-5-18\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\ (FLV Player)
   HKU\S-1-5-19\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\ (FLV Player)
   HKU\S-1-5-21-2107755742-302254199-1763176924-1001\Software\Classes\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}\ (PCOptimizerPro)
   HKU\S-1-5-21-2107755742-302254199-1763176924-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\StormWatchApp.exe (StormWatch)
   HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}\ (PCOptimizerPro)
   HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\Wow6432Node\CLSID\{BEBBC426-4F16-4567-8FE1-BE198C982027}\ (Speedial)
   HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\Wow6432Node\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}\ (PCOptimizerPro)

Cookies _____________________________________________________________________

   C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Cookies\C4KKKQIU.txt
   C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Cookies\FP299VIW.txt
   C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Cookies\WZF52ILE.txt
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:ad.360yield.com
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:ad.mlnadvertising.com
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:ads.creative-serving.com
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:ads.mediade.sk
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:ads.p161.net
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:ads.pubmatic.com
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:ads.stickyadstv.com
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:adtech.de
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:adtechus.com
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:ar.atwola.com
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:at.atwola.com
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:atwola.com
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:googleadservices.com
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:media6degrees.com
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:revsci.net
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:ru4.com
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:serving-sys.com
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:smartadserver.com
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:specificclick.net
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:tacoda.at.atwola.com
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:track.adform.net
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:tribalfusion.com
   C:\Users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\cookies.sqlite:www.googleadservices.com

 

[Juliet]

Well, found a few things

C:\OEM\BBYAP\Best Buy pc app Setup.exe
This came preinstalled without your knowledge or your permission.

I don't know if I set a script to remove it if it can.

stay away from reg fix / booster type programmes. Reimage Repair
Full explanation as to why here: http://library.techguy.org/wiki/Registry_Cleaners


Uninstall Reimage Repair

~~~~~~~~~~~~~

Open notepad. Please copy the contents of the quote box below. To do this highlight the contents of the box and right click on it and select copy.
Paste this into the open notepad. save it to the Desktop as fixlist.txt
NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
It needs to be saved Next to the "Farbar Recovery Scan Tool" (If asked to overwrite existing one please allow)

start
CloseProcesses:
C:\Program Files (x86)\Common Files\LogiShrd\Installer\{D40EB009-0499-459c-A8AF-C9C110766215}\uninstall.exe
C:\Program Files (x86)\Adobe\52df7d05-df7b-4abf-8cb0-684d1a20a3e7.dll
C:\Program Files (x86)\52df7d05-df7b-4abf-8cb0-684d1a20a3e7\5a89858f-5858-4f90-a59a-a2378246373a.dll
REG: Reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}"
REG: Reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}"
REG: Reg delete "HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}"
REG: Reg delete "HKU\S-1-5-18\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}"
REG: Reg delete "HKU\S-1-5-19\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}"
REG: Reg delete "HKU\S-1-5-21-2107755742-302254199-1763176924-1001\Software\Classes\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}"
REG: Reg delete "HKU\S-1-5-21-2107755742-302254199-1763176924-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\StormWatchApp.exe"
REG: Reg delete "HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}"
REG: Reg delete "HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\Wow6432Node\CLSID\{BEBBC426-4F16-4567-8FE1-BE198C982027}"
REG: Reg delete "HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\Wow6432Node\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}"
EmptyTemp:
End

Open FRST/FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

If there are any personal files, pics, etc. on your computer you cannot live without, back them up now just as a precaution.
Emergency Backup Procedure - Tech Support Forum

Please print out or make a copy in notepad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.

How to use ComboFix

Download ComboFix from here:
Link 1
Link 2
Link 3

Place ComboFix.exe on your Desktop <--Important

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with ComboFix.
  * Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
  
  
  
  You can get help on disabling your protection programs here
• Double click on ComboFix.exe & follow the prompts.
• You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)
• Your desktop may go blank. This is normal. It will return when ComboFix is done. Combofix may need to reboot your computer more than once to do its job this is normal.
• When finished, it shall produce a log for you. Post that log in your next reply
  
  Note:
  Do not mouseclick combofix's window whilst it's running. That may cause it to stall.
  
  Note 2: If you receive an error "Illegal operation attempted on a registry key that has been marked for deletion." Please restart the computer
  
  ---------------------------------------------------------------------------------------------
• Ensure your AntiVirus and AntiSpyware applications are re-enabled.
  
  Note: ComboFix may reset a number of Internet Explorer's settings, including making it the default browser.
  Note: Combofix prevents autorun of ALL CDs, floppies and USB devices to assist with malware removal & increase security.
  ---------------------------------------------------------------------------------------------
• If there are Internet issues after running ComboFix:
  Internet Explorer:
  Tools Menu -> Internet Options -> Connections Tab ->Lan Settings > uncheck "use a proxy server" and check to "Automatically detect settings". Also clear any proxy address and port. ok, apply (only if applicable), ok.
  Firefox:
  Tools Menu -> Options... -> Advanced Tab -> Network Tab -> "Settings" under Connection. "No Proxy" should be selected, unless you have one set up yourself.
  Chrome:
  Select -> Tools menu -> then "Options", then go to "Change Proxy Settings", then "LAN Settings" , then take out the check mark for "Use a proxy server for your LAN" if set, unless you set this up yourself.
  Safari
  Launch Safari
  Go to general settings menu
  Then in Preferences/ Advanced
  Then on line click Proxies change settings ...
  Click Internet Options, then click the Connections tab, click Network Settings.
  Disable option (uncheck) for the use of proxy server ...
  

~~~~~~~~~~~~~~~~~~`

 

[rcb56]

ComboFix 15-02-02.01 - Dad 02/04/2015 9:56.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.6048.4045 [GMT -6:00]
Running from: c:\users\Dad\Desktop\ComboFix.exe
AV: ESET Smart Security 8.0 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
AV: Spybot - Search and Destroy *Disabled/Outdated* {20A26C15-1AF0-7CA3-9380-FAB824A7EE0D}
FW: ESET Personal firewall *Disabled* {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
SP: ESET Smart Security 8.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Spybot - Search and Destroy *Disabled/Outdated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\2a3b3a3028372a59_c
c:\users\Dad\AppData\Local\dsisetup464480652.exe
c:\users\Dad\AppData\Roaming\Microsoft\1eaadjc.dll
c:\users\Dad\AppData\Roaming\Microsoft\bass.dll
c:\users\Dad\AppData\Roaming\Microsoft\kfgresk.dll
c:\users\Dad\AppData\Roaming\Microsoft\mjcriu.dll
c:\users\Dad\AppData\Roaming\Microsoft\peaadje.dll
c:\users\Dad\AppData\Roaming\Microsoft\qwadjb.dll
c:\users\Dad\AppData\Roaming\Microsoft\rsaadjd.dll
.
.
((((((((((((((((((((((((( Files Created from 2015-01-04 to 2015-02-04 )))))))))))))))))))))))))))))))
.
.
2015-02-04 16:01 . 2015-02-04 16:01 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-02-04 12:03 . 2015-02-04 12:16 -------- d-----w- c:\programdata\HitmanPro
2015-02-03 22:17 . 2015-02-03 22:17 -------- d-----w- c:\program files\ESET
2015-02-03 22:08 . 2015-02-03 22:08 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service
2015-02-03 18:52 . 2014-12-15 10:13 11870360 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2BB5E2F1-828B-4410-B6E5-40BBF42B9911}\mpengine.dll
2015-02-03 01:28 . 2015-02-03 01:28 -------- d-----w- c:\program files (x86)\ESET
2015-01-31 02:48 . 2015-01-31 02:48 -------- d-----w- c:\users\Dad\AppData\Local\VS Revo Group
2015-01-31 02:48 . 2015-01-31 02:48 -------- d-----w- c:\programdata\VS Revo Group
2015-01-31 02:48 . 2009-12-30 16:21 31800 ----a-w- c:\windows\system32\drivers\revoflt.sys
2015-01-31 02:48 . 2015-01-31 02:48 -------- d-----w- c:\program files\VS Revo Group
2015-01-29 01:51 . 2015-01-29 01:51 -------- d-----w- c:\programdata\Winferno
2015-01-29 01:19 . 2015-01-29 01:19 -------- d-----w- c:\program files (x86)\Karaoke Builder Player
2015-01-29 00:15 . 2015-02-04 01:54 -------- d-----w- c:\program files (x86)\52df7d05-df7b-4abf-8cb0-684d1a20a3e7
2015-01-29 00:15 . 2015-02-03 23:42 -------- d-----w- c:\programdata\fpebkpiipncfojhgaddgnofadahpmcjm
2015-01-28 23:54 . 2015-01-28 23:54 -------- d-----w- c:\users\Dad\AppData\Roaming\Publish Providers
2015-01-28 23:35 . 2015-01-28 23:54 -------- d-----w- c:\users\Dad\AppData\Roaming\Sony
2015-01-28 15:21 . 2015-01-28 15:26 -------- d-----w- c:\program files\Common Files\VST3
2015-01-28 15:21 . 2015-01-28 15:21 -------- d-----w- c:\program files\Common Files\Steinberg
2015-01-26 08:53 . 2015-01-26 08:53 -------- d-----w- c:\program files (x86)\Common Files\Java
2015-01-25 05:58 . 2008-07-12 14:18 3851784 ----a-w- c:\windows\SysWow64\D3DX9_39.dll
2015-01-16 00:43 . 2014-12-19 03:06 210432 ----a-w- c:\windows\system32\profsvc.dll
2015-01-16 00:43 . 2014-12-06 04:17 303616 ----a-w- c:\windows\system32\nlasvc.dll
2015-01-16 00:43 . 2014-12-06 03:50 52224 ----a-w- c:\windows\SysWow64\nlaapi.dll
2015-01-16 00:43 . 2014-12-06 03:50 156672 ----a-w- c:\windows\SysWow64\ncsi.dll
2015-01-16 00:43 . 2014-12-19 01:46 141312 ----a-w- c:\windows\system32\drivers\mrxdav.sys
2015-01-16 00:43 . 2014-12-11 17:47 87040 ----a-w- c:\windows\system32\TSWbPrxy.exe
2015-01-16 00:42 . 2014-12-12 05:35 5553592 ----a-w- c:\windows\system32\ntoskrnl.exe
2015-01-16 00:42 . 2014-12-12 05:11 3971512 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2015-01-16 00:42 . 2014-12-12 05:31 503808 ----a-w- c:\windows\system32\srcore.dll
2015-01-16 00:42 . 2014-12-12 05:31 50176 ----a-w- c:\windows\system32\srclient.dll
2015-01-16 00:42 . 2014-12-12 05:31 296960 ----a-w- c:\windows\system32\rstrui.exe
2015-01-16 00:42 . 2014-12-12 05:11 3916728 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2015-01-16 00:42 . 2014-12-12 05:07 43008 ----a-w- c:\windows\SysWow64\srclient.dll
2015-01-16 00:40 . 2015-01-16 00:40 -------- d-----w- c:\users\Dad\AppData\Local\ESET
2015-01-07 22:10 . 2015-01-07 22:22 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable)
2015-01-05 18:21 . 2014-12-13 05:09 144384 ----a-w- c:\windows\system32\ieUnatt.exe
2015-01-05 18:21 . 2014-12-13 03:33 115712 ----a-w- c:\windows\SysWow64\ieUnatt.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-02-04 06:46 . 2014-08-23 02:33 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-02-04 06:46 . 2014-08-23 02:33 701616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-02-03 22:02 . 2014-10-16 16:35 129752 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-01-26 08:52 . 2014-10-16 21:38 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2015-01-16 09:00 . 2012-03-31 02:51 113365784 ----a-w- c:\windows\system32\MRT.exe
2015-01-08 15:55 . 2010-11-21 03:27 298120 ------w- c:\windows\system32\MpSigStub.exe
2015-01-07 23:35 . 2014-10-16 16:35 96472 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-01-04 21:12 . 2012-03-29 18:09 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
2014-11-27 01:43 . 2015-01-04 21:24 389296 ----a-w- c:\windows\system32\iedkcs32.dll
2014-11-22 03:13 . 2015-01-04 21:24 25059840 ----a-w- c:\windows\system32\mshtml.dll
2014-11-22 03:06 . 2015-01-04 21:24 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2014-11-22 03:06 . 2015-01-04 21:24 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
2014-11-22 02:50 . 2015-01-04 21:24 66560 ----a-w- c:\windows\system32\iesetup.dll
2014-11-22 02:50 . 2015-01-04 21:24 580096 ----a-w- c:\windows\system32\vbscript.dll
2014-11-22 02:49 . 2015-01-04 21:24 48640 ----a-w- c:\windows\system32\ieetwproxystub.dll
2014-11-22 02:49 . 2015-01-04 21:24 2885120 ----a-w- c:\windows\system32\iertutil.dll
2014-11-22 02:48 . 2015-01-04 21:24 88064 ----a-w- c:\windows\system32\MshtmlDac.dll
2014-11-22 02:41 . 2015-01-04 21:24 54784 ----a-w- c:\windows\system32\jsproxy.dll
2014-11-22 02:40 . 2015-01-04 21:24 34304 ----a-w- c:\windows\system32\iernonce.dll
2014-11-22 02:37 . 2015-01-04 21:24 633856 ----a-w- c:\windows\system32\ieui.dll
2014-11-22 02:35 . 2015-01-04 21:24 114688 ----a-w- c:\windows\system32\ieetwcollector.exe
2014-11-22 02:34 . 2015-01-04 21:24 814080 ----a-w- c:\windows\system32\jscript9diag.dll
2014-11-22 02:34 . 2015-01-04 21:24 6039552 ----a-w- c:\windows\system32\jscript9.dll
2014-11-22 02:26 . 2015-01-04 21:24 968704 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2014-11-22 02:22 . 2015-01-04 21:24 490496 ----a-w- c:\windows\system32\dxtmsft.dll
2014-11-22 02:20 . 2015-01-04 21:24 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb
2014-11-22 02:14 . 2015-01-04 21:24 77824 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2014-11-22 02:09 . 2015-01-04 21:24 199680 ----a-w- c:\windows\system32\msrating.dll
2014-11-22 02:08 . 2015-01-04 21:24 92160 ----a-w- c:\windows\system32\mshtmled.dll
2014-11-22 02:07 . 2015-01-04 21:24 501248 ----a-w- c:\windows\SysWow64\vbscript.dll
2014-11-22 02:07 . 2015-01-04 21:24 62464 ----a-w- c:\windows\SysWow64\iesetup.dll
2014-11-22 02:06 . 2015-01-04 21:24 47616 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll
2014-11-22 02:05 . 2015-01-04 21:24 64000 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2014-11-22 02:05 . 2015-01-04 21:24 316928 ----a-w- c:\windows\system32\dxtrans.dll
2014-11-22 01:54 . 2015-01-04 21:24 620032 ----a-w- c:\windows\SysWow64\jscript9diag.dll
2014-11-22 01:49 . 2015-01-04 21:24 718848 ----a-w- c:\windows\system32\ie4uinit.exe
2014-11-22 01:49 . 2015-01-04 21:24 800768 ----a-w- c:\windows\system32\msfeeds.dll
2014-11-22 01:47 . 2015-01-04 21:24 1359360 ----a-w- c:\windows\system32\mshtmlmedia.dll
2014-11-22 01:46 . 2015-01-04 21:24 2125312 ----a-w- c:\windows\system32\inetcpl.cpl
2014-11-22 01:43 . 2015-01-04 21:24 14412800 ----a-w- c:\windows\system32\ieframe.dll
2014-11-22 01:40 . 2015-01-04 21:24 60416 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2014-11-22 01:29 . 2015-01-04 21:24 4299264 ----a-w- c:\windows\SysWow64\jscript9.dll
2014-11-22 01:28 . 2015-01-04 21:24 2358272 ----a-w- c:\windows\system32\wininet.dll
2014-11-22 01:22 . 2015-01-04 21:24 2052096 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2014-11-22 01:21 . 2015-01-04 21:24 1155072 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2014-11-22 01:15 . 2015-01-04 21:24 1548288 ----a-w- c:\windows\system32\urlmon.dll
2014-11-22 01:03 . 2015-01-04 21:24 800768 ----a-w- c:\windows\system32\ieapfltr.dll
2014-11-22 01:00 . 2015-01-04 21:24 1888256 ----a-w- c:\windows\SysWow64\wininet.dll
2014-11-11 03:09 . 2015-01-04 21:23 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-11-11 03:08 . 2014-12-04 18:27 241152 ----a-w- c:\windows\system32\pku2u.dll
2014-11-11 03:08 . 2014-12-04 18:27 728064 ----a-w- c:\windows\system32\kerberos.dll
2014-11-11 02:44 . 2015-01-04 21:23 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2014-11-11 02:44 . 2014-12-04 18:27 186880 ----a-w- c:\windows\SysWow64\pku2u.dll
2014-11-11 02:44 . 2014-12-04 18:27 550912 ----a-w- c:\windows\SysWow64\kerberos.dll
2014-11-11 01:46 . 2014-12-31 23:30 119296 ----a-w- c:\windows\system32\drivers\tdx.sys
2014-11-08 03:16 . 2015-01-04 21:19 2048 ----a-w- c:\windows\system32\tzres.dll
2014-11-08 02:45 . 2015-01-04 21:19 2048 ----a-w- c:\windows\SysWow64\tzres.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:09 131480 ----a-w- c:\users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:09 131480 ----a-w- c:\users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:09 131480 ----a-w- c:\users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:09 131480 ----a-w- c:\users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:09 131480 ----a-w- c:\users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:09 131480 ----a-w- c:\users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:09 131480 ----a-w- c:\users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:09 131480 ----a-w- c:\users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"RequireSignedAppInit_DLLs"=0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
R2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [x]
R2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [x]
R3 cleanhlp;cleanhlp;c:\users\Dad\Desktop\bin\cleanhlp64.sys;c:\users\Dad\Desktop\bin\cleanhlp64.sys [x]
R3 CompFilter64;UVCCompositeFilter;c:\windows\system32\DRIVERS\lvbflt64.sys;c:\windows\SYSNATIVE\DRIVERS\lvbflt64.sys [x]
R3 GREGService;GREGService;c:\program files (x86)\Gateway\Registration\GREGsvc.exe;c:\program files (x86)\Gateway\Registration\GREGsvc.exe [x]
R3 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;c:\windows\system32\DRIVERS\LEqdUsb.Sys;c:\windows\SYSNATIVE\DRIVERS\LEqdUsb.Sys [x]
R3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;c:\windows\system32\DRIVERS\LHidEqd.Sys;c:\windows\SYSNATIVE\DRIVERS\LHidEqd.Sys [x]
R3 Live Updater Service;Live Updater Service;c:\program files\Gateway\Gateway Updater\UpdaterService.exe;c:\program files\Gateway\Gateway Updater\UpdaterService.exe [x]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys;c:\windows\SYSNATIVE\DRIVERS\revoflt.sys [x]
R3 RTL8192su;%RTL8192su.DeviceDesc.DispName%;c:\windows\system32\DRIVERS\RTL8192su.sys;c:\windows\SYSNATIVE\DRIVERS\RTL8192su.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 sxuptp;SXUPTP Driver;c:\windows\system32\DRIVERS\sxuptp.sys;c:\windows\SYSNATIVE\DRIVERS\sxuptp.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 UMVPFSrv;UMVPFSrv;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [x]
R3 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 usbrndis6;USB RNDIS6 Adapter;c:\windows\system32\DRIVERS\usb80236.sys;c:\windows\SYSNATIVE\DRIVERS\usb80236.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 ss_conn_service;SAMSUNG Mobile Connectivity Service;c:\program files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe;c:\program files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [x]
S3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe [x]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
S3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys;c:\windows\SYSNATIVE\Drivers\EtronHub3.sys [x]
S3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys;c:\windows\SYSNATIVE\Drivers\EtronXHCI.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
S3 LVUVC64;Logitech HD Webcam C310(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2015-02-04 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-08-23 06:46]
.
2015-02-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-01-05 02:52]
.
2015-02-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-01-05 02:52]
.
2015-02-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2107755742-302254199-1763176924-1001Core.job
- c:\users\Dad\AppData\Local\Google\Update\GoogleUpdate.exe [2015-02-03 14:28]
.
2015-02-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2107755742-302254199-1763176924-1001UA.job
- c:\users\Dad\AppData\Local\Google\Update\GoogleUpdate.exe [2015-02-03 14:28]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:10 164760 ----a-w- c:\users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:10 164760 ----a-w- c:\users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:10 164760 ----a-w- c:\users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:10 164760 ----a-w- c:\users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:10 164760 ----a-w- c:\users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:10 164760 ----a-w- c:\users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:10 164760 ----a-w- c:\users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2014-08-17 04:10 164760 ----a-w- c:\users\Dad\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2014-10-01 5595336]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mDefault_Page_URL = hxxp://www.google.com
uInternet Settings,ProxyOverride = <local>
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
TCP: DhcpNameServer = 208.180.42.68 208.180.42.100
FF - ProfilePath - c:\users\Dad\AppData\Roaming\Mozilla\Firefox\Profiles\fen9gfz2.default-1409800020396\
FF - prefs.js: browser.startup.homepage - www.msn.com
FF - prefs.js: network.proxy.type - 4
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
Toolbar-10 - (no file)
Notify-SDWinLogon - SDWinLogon.dll
SafeBoot-CleanHlp
SafeBoot-CleanHlp.sys
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
Toolbar-10 - (no file)
AddRemove-MyFreeCodec - c:\program files (x86)\MyFree Codec\1.0b beta\uninstall.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
"{18DF081C-E8AD-4283-A596-FA578C2EBDC3}"=hex:51,66,7a,6c,4c,1d,38,12,72,0b,cc,
1c,9f,a6,ed,07,da,80,b9,17,89,70,f9,d7
"{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}"=hex:51,66,7a,6c,4c,1d,38,12,da,39,34,
5d,e1,a9,97,05,de,be,2c,e9,c9,ff,c2,38
"{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}"=hex:51,66,7a,6c,4c,1d,38,12,d5,94,07,
72,c2,98,42,03,c9,fd,97,9a,f4,87,69,57
"{8A86D350-37AB-410A-8531-7D1363F317B3}"=hex:51,66,7a,6c,4c,1d,38,12,3e,d0,95,
8e,99,79,64,04,fa,27,3e,53,66,ad,53,a7
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23,
94,30,02,d1,0f,f1,da,12,24,73,56,27,d2
"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db,
df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd
"{E33CF602-D945-461A-83F0-819F76A199F8}"=hex:51,66,7a,6c,4c,1d,38,12,6c,f5,2f,
e7,77,97,74,03,fc,e6,c2,df,73,ff,dd,ec
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
@Denied: (2) (LocalSystem)
"Timestamp"=hex:45,62,71,3c,57,26,cd,01
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_296_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_296_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_296_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_296_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_296.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.16"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_296.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_296.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_296.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet003\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2015-02-04 10:04:30
ComboFix-quarantined-files.txt 2015-02-04 16:04
.
Pre-Run: 866,500,796,416 bytes free
Post-Run: 868,102,971,392 bytes free
.
- - End Of File - - 9A3DF6A25FEA5106BBC5F0857BAF3D66

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 01-02-2015
Ran by Dad at 2015-02-04 09:01:26 Run:9
Running from C:\Users\Dad\Desktop
Loaded Profiles: Dad (Available profiles: Dad)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
CloseProcesses:
C:\Program Files (x86)\Common Files\LogiShrd\Installer\{D40EB009-0499-459c-A8AF-C9C110766215}\uninstall.exe
C:\Program Files (x86)\Adobe\52df7d05-df7b-4abf-8cb0-684d1a20a3e7.dll
C:\Program Files (x86)\52df7d05-df7b-4abf-8cb0-684d1a20a3e7\5a89858f-5858-4f90-a59a-a2378246373a.dll
REG: Reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}"
REG: Reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}"
REG: Reg delete "HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}"
REG: Reg delete "HKU\S-1-5-18\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}"
REG: Reg delete "HKU\S-1-5-19\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}"
REG: Reg delete "HKU\S-1-5-21-2107755742-302254199-1763176924-1001\Software\Classes\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}"
REG: Reg delete "HKU\S-1-5-21-2107755742-302254199-1763176924-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\StormWatchApp.exe"
REG: Reg delete "HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}"
REG: Reg delete "HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\Wow6432Node\CLSID\{BEBBC426-4F16-4567-8FE1-BE198C982027}"
REG: Reg delete "HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\Wow6432Node\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}"
EmptyTemp:
End
*****************

Processes closed successfully.
C:\Program Files (x86)\Common Files\LogiShrd\Installer\{D40EB009-0499-459c-A8AF-C9C110766215}\uninstall.exe => Moved successfully.
"C:\Program Files (x86)\Adobe\52df7d05-df7b-4abf-8cb0-684d1a20a3e7.dll" => File/Directory not found.
"C:\Program Files (x86)\52df7d05-df7b-4abf-8cb0-684d1a20a3e7\5a89858f-5858-4f90-a59a-a2378246373a.dll" => File/Directory not found.

========= Reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}" =========

Permanently delete the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298} (Yes/No)? The operation completed successfully.



========= End of Reg: =========


========= Reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}" =========

Permanently delete the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A} (Yes/No)? The operation completed successfully.



========= End of Reg: =========


========= Reg delete "HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}" =========

Permanently delete the registry key HKEY_USERS\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F} (Yes/No)? The operation completed successfully.



========= End of Reg: =========


========= Reg delete "HKU\S-1-5-18\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}" =========

Permanently delete the registry key HKEY_USERS\S-1-5-18\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F} (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg delete "HKU\S-1-5-19\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}" =========

Permanently delete the registry key HKEY_USERS\S-1-5-19\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F} (Yes/No)? The operation completed successfully.



========= End of Reg: =========


========= Reg delete "HKU\S-1-5-21-2107755742-302254199-1763176924-1001\Software\Classes\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}" =========

Permanently delete the registry key HKEY_USERS\S-1-5-21-2107755742-302254199-1763176924-1001\Software\Classes\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326} (Yes/No)? The operation completed successfully.



========= End of Reg: =========


========= Reg delete "HKU\S-1-5-21-2107755742-302254199-1763176924-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\StormWatchApp.exe" =========

Permanently delete the registry key HKEY_USERS\S-1-5-21-2107755742-302254199-1763176924-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\StormWatchApp.exe (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg delete "HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}" =========

Permanently delete the registry key HKEY_USERS\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326} (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg delete "HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\Wow6432Node\CLSID\{BEBBC426-4F16-4567-8FE1-BE198C982027}" =========

Permanently delete the registry key HKEY_USERS\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\Wow6432Node\CLSID\{BEBBC426-4F16-4567-8FE1-BE198C982027} (Yes/No)? The operation completed successfully.



========= End of Reg: =========


========= Reg delete "HKU\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\Wow6432Node\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}" =========

Permanently delete the registry key HKEY_USERS\S-1-5-21-2107755742-302254199-1763176924-1001_Classes\Wow6432Node\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326} (Yes/No)? The operation completed successfully.



========= End of Reg: =========

EmptyTemp: => Removed 457.5 MB temporary data.


The system needed a reboot.

==== End of Fixlog 09:01:35 ====

 

[Juliet]

Tell me whats happening now?