Hi, here is the Teatimer logfile:
5/16/2015 7:13:38 AM Denied (based on user decision) value "FlashPlayerUpdate" (new data: "C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_Plugin.exe -update plugin") added in System Startup user entry!
05/17/2015 10:02:43 AM Denied (based on user decision) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") added in Desktop settings!
05/17/2015 10:02:54 AM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") added in Desktop settings!
05/17/2015 10:02:59 AM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") added in Desktop settings!
05/17/2015 11:01:23 PM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") added in Desktop settings!
05/18/2015 10:38:46 PM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") added in Desktop settings!
05/19/2015 9:08:36 AM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") added in Desktop settings!
05/19/2015 9:31:21 AM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") added in Desktop settings!
05/19/2015 9:32:28 AM Denied (based on user decision) value "Sidebar" (new data: "C:\Program Files\Windows Sidebar\sidebar.exe /autoRun") added in System Startup user entry!
05/19/2015 9:33:52 AM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") added in Desktop settings!
05/19/2015 9:40:12 AM Allowed (based on user decision) value "scrnsave.exe" (new data: "C:\Windows\system32\ssText3d.scr") added in Desktop settings!
05/19/2015 9:40:32 AM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") changed in Desktop settings!
05/19/2015 9:41:12 AM Allowed (based on user decision) value "scrnsave.exe" (new data: "C:\Windows\system32\scrnsave.scr") changed in Desktop settings!
05/19/2015 9:41:18 AM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") changed in Desktop settings!
05/19/2015 9:49:14 AM Allowed (based on user decision) value "scrnsave.exe" (new data: "") deleted in Desktop settings!
05/20/2015 6:49:57 AM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") added in Desktop settings!
05/21/2015 12:38:14 PM Allowed (based on user decision) value "scrnsave.exe" (new data: "C:\Windows\system32\Ribbons.scr") added in Desktop settings!
05/21/2015 9:14:34 PM Allowed (based on user whitelist) value "scrnsave.exe" (new data: "") deleted in Desktop settings!
05/21/2015 11:16:33 PM Allowed (based on user decision) value "scrnsave.exe" (new data: "C:\Windows\system32\Ribbons.scr") added in Desktop settings!
05/22/2015 6:47:33 AM Allowed (based on user whitelist) value "scrnsave.exe" (new data: "") deleted in Desktop settings!
05/22/2015 8:42:06 PM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") added in Desktop settings!
5/23/2015 7:07:19 AM Denied (based on user blacklist) value "FlashPlayerUpdate" (new data: "C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_Plugin.exe -update plugin") added in System Startup user entry!
5/23/2015 7:07:21 AM Denied (based on user blacklist) value "FlashPlayerUpdate" (new data: "C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_Plugin.exe -update plugin") added in System Startup user entry!
5/25/2015 6:20:01 PM Allowed (based on user decision) value "20150107" (new data: "C:\Program Files\AVAST Software\Avast\setup\emupdate\1e158860-ddb6-4c91-9dcb-5a032e286ccb.exe /check") added in System Startup global entry!
5/26/2015 6:38:39 AM Allowed (based on user decision) value "20150107" (new data: "") deleted in System Startup global entry!
5/27/2015 1:19:30 PM Allowed (based on user whitelist) value "scrnsave.exe" (new data: "") added in Desktop settings!
5/27/2015 1:20:13 PM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\System32\Bubbles.scr") changed in Desktop settings!
05/27/2015 1:25:25 PM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") changed in Desktop settings!
05/27/2015 1:28:25 PM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\System32\Bubbles.scr") changed in Desktop settings!
05/27/2015 1:28:49 PM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\System32\Bubbles.scr") changed in Desktop settings!
05/27/2015 1:52:11 PM Allowed (based on user whitelist) value "scrnsave.exe" (new data: "") deleted in Desktop settings!
5/16/2015 7:13:38 AM Denied (based on user decision) value "FlashPlayerUpdate" (new data: "C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_Plugin.exe -update plugin") added in System Startup user entry!
05/17/2015 10:02:43 AM Denied (based on user decision) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") added in Desktop settings!
05/17/2015 10:02:54 AM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") added in Desktop settings!
05/17/2015 10:02:59 AM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") added in Desktop settings!
05/17/2015 11:01:23 PM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") added in Desktop settings!
05/18/2015 10:38:46 PM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") added in Desktop settings!
05/19/2015 9:08:36 AM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") added in Desktop settings!
05/19/2015 9:31:21 AM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") added in Desktop settings!
05/19/2015 9:32:28 AM Denied (based on user decision) value "Sidebar" (new data: "C:\Program Files\Windows Sidebar\sidebar.exe /autoRun") added in System Startup user entry!
05/19/2015 9:33:52 AM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") added in Desktop settings!
05/19/2015 9:40:12 AM Allowed (based on user decision) value "scrnsave.exe" (new data: "C:\Windows\system32\ssText3d.scr") added in Desktop settings!
05/19/2015 9:40:32 AM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") changed in Desktop settings!
05/19/2015 9:41:12 AM Allowed (based on user decision) value "scrnsave.exe" (new data: "C:\Windows\system32\scrnsave.scr") changed in Desktop settings!
05/19/2015 9:41:18 AM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") changed in Desktop settings!
05/19/2015 9:49:14 AM Allowed (based on user decision) value "scrnsave.exe" (new data: "") deleted in Desktop settings!
05/20/2015 6:49:57 AM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") added in Desktop settings!
05/21/2015 12:38:14 PM Allowed (based on user decision) value "scrnsave.exe" (new data: "C:\Windows\system32\Ribbons.scr") added in Desktop settings!
05/21/2015 9:14:34 PM Allowed (based on user whitelist) value "scrnsave.exe" (new data: "") deleted in Desktop settings!
05/21/2015 11:16:33 PM Allowed (based on user decision) value "scrnsave.exe" (new data: "C:\Windows\system32\Ribbons.scr") added in Desktop settings!
05/22/2015 6:47:33 AM Allowed (based on user whitelist) value "scrnsave.exe" (new data: "") deleted in Desktop settings!
05/22/2015 8:42:06 PM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") added in Desktop settings!
5/23/2015 7:07:19 AM Denied (based on user blacklist) value "FlashPlayerUpdate" (new data: "C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_Plugin.exe -update plugin") added in System Startup user entry!
5/23/2015 7:07:21 AM Denied (based on user blacklist) value "FlashPlayerUpdate" (new data: "C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_Plugin.exe -update plugin") added in System Startup user entry!
5/25/2015 6:20:01 PM Allowed (based on user decision) value "20150107" (new data: "C:\Program Files\AVAST Software\Avast\setup\emupdate\1e158860-ddb6-4c91-9dcb-5a032e286ccb.exe /check") added in System Startup global entry!
5/26/2015 6:38:39 AM Allowed (based on user decision) value "20150107" (new data: "") deleted in System Startup global entry!
5/27/2015 1:19:30 PM Allowed (based on user whitelist) value "scrnsave.exe" (new data: "") added in Desktop settings!
5/27/2015 1:20:13 PM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\System32\Bubbles.scr") changed in Desktop settings!
05/27/2015 1:25:25 PM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\system32\Bubbles.scr") changed in Desktop settings!
05/27/2015 1:28:25 PM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\System32\Bubbles.scr") changed in Desktop settings!
05/27/2015 1:28:49 PM Denied (based on user blacklist) value "scrnsave.exe" (new data: "C:\Windows\System32\Bubbles.scr") changed in Desktop settings!
05/27/2015 1:52:11 PM Allowed (based on user whitelist) value "scrnsave.exe" (new data: "") deleted in Desktop settings!