Jump to content

kalikidd05

Honorary Members
  • Posts

    26
  • Joined

  • Last visited

Reputation

0 Neutral
  1. Sorry just one last question: Before when I go back from sleep mode, I was able to connect to internet instantly. Now it takes the computer at least a minute to be able to connect to the internet again. When I try to go to a site, Google Chrome is giving me "resolving host" for a really long time before it connects. Do you know how to fix this? Not a huge problem if you don't Thanks :-)
  2. Also sent you a small donation :-) Happy holidays
  3. Thank you so much for the help!! I really appreciate it :-)
  4. Results of screen317's Security Check version 0.99.77 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Windows Firewall Enabled! WMI entry may not exist for antivirus; attempting automatic update. `````````Anti-malware/Other Utilities Check:````````` Java 6 Update 25 Java version out of Date! Adobe Flash Player 11.9.900.170 Adobe Reader 9 Adobe Reader out of Date! Mozilla Firefox 14.0.1 Firefox out of Date! Google Chrome 31.0.1650.57 Google Chrome 31.0.1650.63 ````````Process Check: objlist.exe by Laurent```````` `````````````````System Health check````````````````` Total Fragmentation on Drive C: 0% ````````````````````End of Log``````````````````````
  5. # AdwCleaner v3.015 - Report created 19/12/2013 at 09:30:25 # Updated 10/12/2013 by Xplode# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)# Username : user - USER-PC# Running from : C:\Users\user\Downloads\adwcleaner.exe# Option : Clean ***** [ Services ] ***** ***** [ Files / Folders ] ***** Folder Deleted : C:\Program Files (x86)\ConduitFolder Deleted : C:\users\user\AppData\Local\ConduitFolder Deleted : C:\users\user\AppData\LocalLow\ConduitFolder Deleted : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\ConduitCommonFolder Deleted : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\SmartbarFolder Deleted : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Deleted : HKCU\Software\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomcKey Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomcKey Deleted : HKLM\SOFTWARE\Classes\Conduit.EngineKey Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2504091Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3072253Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E69D4A59-73DE-4E38-9FB3-740EC4D9060D}Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}Key Deleted : HKCU\Software\anchorfreeKey Deleted : HKCU\Software\ConduitKey Deleted : HKCU\Software\YahooPartnerToolbarKey Deleted : HKCU\Software\AppDataLow\Software\SmartBarKey Deleted : HKCU\Software\AppDataLow\Software\ToolbarKey Deleted : HKLM\Software\ConduitKey Deleted : HKLM\Software\DeviceVMKey Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99AD9D6D-A456-49EE-8360-F22EE7AA1272}Key Deleted : [x64] HKLM\SOFTWARE\DeviceVM ***** [ Browsers ] ***** -\\ Internet Explorer v11.0.9600.16428 -\\ Mozilla Firefox v14.0.1 (en-US) [ File : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\prefs.js ] Line Deleted : user_pref("CT3072253..clientLogIsEnabled", false);Line Deleted : user_pref("CT3072253./9b+7e+x305.from_oldbar.enc", "JH4nQTM0NjN5RTo9KnIseXp+ejEoMztHSVNGLVhNUD0mPy0uMTVEO0ZOT1tWXmlbQm1iZVI7VEJDRklZUFtjfXN7blUhdXhlTmdVVllbbGNudnwmKzB7aTUqLXlie2lqbW4hdyMrNzt0NHxIPSBF[...]Line Deleted : user_pref("CT3072253./9b+7e,x305.from_oldbar.enc", "JH4oQS8/Pjd5RTo9KnIseXt4fTEoMzxHSEAsV0xPPCU+LC4rL0M6RU5ZUFtXZ2pmQm1iRV5pVD1WREZDRltSXWZxbCFua1h9c2dQaVdZVlhuZXB5MycyfWo2Ky56Y3xqbGlqIngkLUY6PkVGSUxA[...]Line Deleted : user_pref("CT3072253./9b+7e-x305.from_oldbar.enc", "JH4pMnZBNjk3MzVFOX4/STsvdzF+ICUgNi04QkdKWFFaXFhdUF9ZOWRZXEkySzk6PzlQR1JcQXNoa2llZ3t5b217blUhdXhZJnZoUWpYWV5Xb2ZxezAkMiQ4J205LjFxPi8haSNwcXV4KH4qNDk8[...]Line Deleted : user_pref("CT3072253./9b+7e/x305.from_oldbar.enc", "JH4rQTU2MnhEOTwpcSt4fHt3MCcyPkxDQ1NOLVhbPCU+LDAuNEM6RVFYYmleZ1pBbGFkUTpTQUVDSFhPWmZte3xxdHJucCF0dFsne35rVG1bX11hcml0IS8nJiY7MXE6KD46QjY+QTR7QDxIeyBN[...]Line Deleted : user_pref("CT3072253./9b+7e06cg5el8:.from_oldbar.enc", "bm1pbXNwcnBwdw==");Line Deleted : user_pref("CT3072253./9b+7e06cg5el;8i:k.from_oldbar.enc", "JH4tLyJqdHNvc3l2eHZ2fSQvS0lHT0I1fV1cPQ==");Line Deleted : user_pref("CT3072253./9b+7e0x305.from_oldbar.enc", "JH4sQDpAd0M4OyhwKnd8dX0vJjE+QSlVR0hNUVpOWlkyXVJVQitEMjcwN0lAS1heaF5wbm5mdGJuaWtNeG1wXUZfTVJLUWRbZnMje3csKiovJWQwJSh0XXZkaWJne3J9KzZ0OjYyPUBANXxIPUAt[...]Line Deleted : user_pref("CT3072253./9b+7e1x305.from_oldbar.enc", "JH4tQTE9QDJ5RTo9KnIsend5fjEoM0FHPkVHRUgvWk9SPyhBMC0vM0Y9SFZiZWhca2dfbXBgSHNoa1hBWklGSEtfVmFvfCF9dHR6eCdfKyAjb1hxYF1fYXZteCc3OjYwMio9QXZCNzonbyl3dHZ3[...]Line Deleted : user_pref("CT3072253./9b+7e2x305.from_oldbar.enc", "JH4uNUIxPT05OntHPD8sdC55IH0yKTRDVlVORy5ZTlEyXk9BKkM1NzIxSD9KWWVfX2JsW3FzaXVpdXRNeG1wUX5rYEliUlBUUWdeaXgoLXx8Yy8kJ3NcdWRmZmh6cXwsO0AwQDx0eDQ9MHxIPUAt[...]Line Deleted : user_pref("CT3072253./9b+7e31;cjc<=fbj#ncf.from_oldbar.enc", "JH5hOT8jayV1dndxKiEsbkFPRE0yejRPSElSTlYvWk9SPzZBJFBMVmJHMEk0S0JNMGxib3RxZmlnbHRmdn15eXMgaGFKY1RXWFloX2pNeXokb1hxYHNqdSgnKzcnOip9ZkYnImQyQT[...]Line Deleted : user_pref("CT3072253./9b+7e31;cji?k:cnoh@&qfi.from_oldbar.enc", "JH5hOT8jayVudXF4KiEsbkFPRE0yejRVS1dGT1pbVEwyXVJVQjlEJ2RZVFxXWlRNNk98IFJJVDd0d2VZQltNSF5VYENva3UiZk9oV2phbE97fCZxWnNkY3ZteCsqLjoqPS0haUk[...]Line Deleted : user_pref("CT3072253./9b+7e3x305.from_oldbar.enc", "JH4vQT87NjM/R0Y/fUk+QS52MH4iJCE1LDdHS1lXS0pIWFhOXjdiVzpTXkkySzo9PztQR1JibGJddXhtdmp8UXxxdGFKY1JVV1JoX2p6LSYsLCR+LzIuaTUqLXlie2ptb2khdyMzQUEzN0hHRz0/[...]Line Deleted : user_pref("CT3072253./9b+7e4x305.from_oldbar.enc", "JH4wLEB2Qjc6J28pd3t0di4lMEE+T0lKUitVVTojPCsvKClBOENUUV5dVmFfVmhcQm1iZVI7VENGSUpZUFtsaXp+IXAjcHZZJXl8XSp6bFVuXWBjY3NqdSckMTgxNzI2KHM/NDd3RTInbyl3en18[...]Line Deleted : user_pref("CT3072253./9b+7e5x305.from_oldbar.enc", "JH4xNkIrd0M4OyhwKnl1encvJjFDSz1JVkpQWS5ZTjFKVUApQjIuMy9HPklbXVlaal5YcHJiZ0l0aWxZQltLR0tRYFdidHwkc3N3JiAkICpiLiMmclt0ZGBkaXlwey42PS4uNDR3Qzh6ND8qcix7[...]Line Deleted : user_pref("CT3072253./9b+7e6x305.from_oldbar.enc", "JH4yLD4yMjI4RT58SD1ALXUvfnskJDQrNklTVFJZWFpaUFJONmFWWUYvSDg1PTxNRE9ibG1rcnFqd2FNeG1wXUZfT0xUUWRbZnl7Jnh4KX4vKS0yMGczKCt3YHlpZm5qfnUhNDZAQ0Y8PXxIPUAt[...]Line Deleted : user_pref("CT3072253./9b+7e7x305.from_oldbar.enc", "JH4zPSw/Pj95RTo9KnIse3p5ejEoM0dRP0RVWUJMWjFcUVRBKkMzMjA3SD9KXmhWW1lwYG5sZmFkc0x3bG9cRV5OTUtRY1pleSR6KSN4emEtIiVxWnNjYmBleG96Ly8rODg0PEIwMjQ5QzY0SztJ[...]Line Deleted : user_pref("CT3072253./9b+7e8x305.from_oldbar.enc", "JH40PT87NTc7PzZ8R0csdC5+eCMyKTRJVlVARy5ZTlE+J0AwMjUzRTxHXFVYY2plbmJebGFrcGhzS3ZrbltEXU1PUk9iWWR5J3ZyKnkoYCwhJHBZcmJkZ2J3bnkvNCs8MXM/NHYwOyZuKHd5fHYt[...]Line Deleted : user_pref("CT3072253./9b+7e9x305.from_oldbar.enc", "JH41Myw/MnhEOTwpcSt7dXl5MCcySExPT0RQTEdUWFxQSDRfVFdELUY3MTU0S0JNY2tdX19zaWtKdWptWkNcTUdLSWFYY3kib3QlKCR5YCwhJHBZcmNdYGh3bnkwOjorKi50QDU4JW0nd3F0eywj[...]Line Deleted : user_pref("CT3072253./9b+7e:x305.from_oldbar.enc", "JH42Mzs4MnhEOTwpcSt7dnl6MCcySUhVRUQsV0xPPCU+LyotLUM6RVxnVVteP2pfYk84UUI9QD9WTVhvemh4bHFxVCB0d2RNZldSVVNrYm0lfi16ZjInKnZfeGlkZm59dCA3QjIyMkZENXxHRyx0[...]Line Deleted : user_pref("CT3072253./9b+7e;x305.from_oldbar.enc", "JH43PzM/NzhCL3tHPD8sdC5+enoiMyo1TUYsV0xPPCU+LysrMUM6RV1jVldcXFpBbGFkUTpTREBARVhPWnJzcXp4bSJWInZ5Zk9oWVVVWW1kbygkLCcqMiEwJ205LjF9ZiBwbGxuJXsnPzpIfklJ[...]Line Deleted : user_pref("CT3072253./9b+7e<x305.from_oldbar.enc", "JH44NDAwRC9GNkQ3fUk+QS52MCF9JCY1LDdQTEdXUUtPRzRfVFdELUY3NDo6S0JNZl5wW2RlcWNKdWptWkNcTUpQT2FYY3xxeSB1JiFfKyAjb1hxYl9lYnZteDIuMCUsODIydUE2OSZuKHh1e3ct[...]Line Deleted : user_pref("CT3072253./9b+7e=x305.from_oldbar.enc", "JH45MzY/QUE3OTV8SD1ALXUvIH4gIjQrNlBUWVdMVU9RWzRfVFdELUY3Njc4S0JNZ2twbmBvYWZrY2ZNeG1wXUZfUE9QUGRbZiElfHlzemEtIiVxWnNkY2RjeG96NT0yM0A/Oz8zeEQ5PClxK3t6[...]Line Deleted : user_pref("CT3072253./9b+7e>x305.from_oldbar.enc", "JH46QTY/MjI4OHtHPD8sdC5+ICF8Myo1UE9TRkgvWk9SPyhBMjM0L0Y9SGNcXWZiakNuY2ZTPFVGR0hCWlFcd3B3cyAjcSFZJXl8aVJrXF1dYXBnci4hLiQ4KDg3Lyo6LnM/NDckbCZ2d3d6KyIt[...]Line Deleted : user_pref("CT3072253./9b+7e?x305.from_oldbar.enc", "JH47LS8vM0E0QDo6fUlMLXUvICMgfjQrNlJQTFJJVVJWUlw1YFVYRS5HODs4NkxDTmpwb19lY11zb2d1eGhMZXBrVCB0d2RNZldaV1RrYm0qIisvJS5oNCkseGF6a25rZyB2Ij5EQkEzNkE8PiBL[...]Line Deleted : user_pref("CT3072253./9b+7e@x305.from_oldbar.enc", "JH48QEIrd0M4OyhwKnt2fngvJjFOUlQ9KlVKLUZRPCU+MCszLEM6RWJnVlFiWWVfX0NuY0ZfalU+V0lETERcU157IXR8eCF0WiZ6fWpTbF5ZYGJxaHMxNCkmJm05LjF9ZiBxbHN0JXsnRDY5PT9F[...]Line Deleted : user_pref("CT3072253./9b+7eax305.from_oldbar.enc", "JH49PTc4d0M4OyhwKnt6dX4vJjFPS1JLREVJS0lIVFBYWVJTX1E4Y1hbSDFKPDs2PU9GUW9rbm1jd21odmZQe3BzYEliVFNOVGdeaSgsdCsrMCZlMSYpdV53aWhjaHxzfj0wLj0yMjg2RHxIPUAt[...]Line Deleted : user_pref("CT3072253./9b+7ebe3g=;d9n9=d.from_oldbar.enc", "NywtMml1di46PHs6OUNKSUhBQ0smUUZJKWVQRlZJZXFzTTNLVw==");Line Deleted : user_pref("CT3072253./9b+7ebx305.from_oldbar.enc", "JH4+OTFBMD0zRUA2Mn5KP0IvdzF7fSM1LDdWWUlITk9RUlxOTFVTW1RgWlo+aV5hTjdQOz1BVEtWdXVlbXNneW1tfFUhdXhlTmdSVFdrYm0tIiUuIGczKGokL3lie2ZoaiB2IkEvM3lFOj0qcix2[...]Line Deleted : user_pref("CT3072253./9b+7ecx305.from_oldbar.enc", "JH4/PTAwQzEuekY7PitzLXsgfjEoM1NRVlVRV1pPWExeM15TVkMsRTQ4NklAS2tZVmxoa0ZxZmlWP1hHS0hcU15+bGlWInZ5Zk9oV1tXbGNuLzEhJjAjNio1LCw6MTlxPTI1ImokcnZxKH4qSkE/[...]Line Deleted : user_pref("CT3072253./9b+7edx305.from_oldbar.enc", "JH5ANUIqNjh5RTo9KnIsfSAvJjFSR1Q8SEosV1o7JD0vL0A3QmNYZU1ZWz1oXUBkX084UUNCVEtWd2x5YW1vUXluYEliVFJlXGcpJnl9fSB8fDEnL2czKCt3YHlraHxzfkA+NDJEOUZ6Rjs+K3Mt[...]Line Deleted : user_pref("CT3072253./9b+7etx305.from_oldbar.enc", "JH5uLy47MjNCNXtEOStzLXp7e3wyKTQjUkxUV0dKTlBWXUphUV9dV1JVZD1oXWBNNk89Pj49VEtWRUhqc21pb1J9cnViS2RSU1NRaWBrWnt7dyYueWczKCt3YHlnaGdvfnUhcm01Pjg0OnxIPUAt[...]Line Deleted : user_pref("CT3072253./9b-0?3g>d.from_oldbar.enc", "PW5obj9vbXR6c0d4eSBIekkhJXl6fSEqVVcoJVcoVy8nMSxh");Line Deleted : user_pref("CT3072253./9b-0?3g@6:5;.from_oldbar.enc", "AA==");Line Deleted : user_pref("CT3072253./9b-0?3gfa7ef.from_oldbar.enc", "Ky4sPQ==");Line Deleted : user_pref("CT3072253./9b-3=3eccja=f>.from_oldbar.enc", "JH4zPSxFL0E1J28pe359ISAvJjE+Qkk1fTc4LzpJTV1RPygzOENdZVRpW2VUbVdpXV1oY2VTPHB2bGZ1Xg==");Line Deleted : user_pref("CT3072253./9b/>01=9a6k6<im;krie@pdawm.from_oldbar.enc", "amlrcnN0dXY=");Line Deleted : user_pref("CT3072253./9b3=>@44i48?.from_oldbar.enc", "NywtMml1djNCNjNBSEcgPj1HTk1MRUdPKlVKTS1YWFheS1VONmNSVk8=");Line Deleted : user_pref("CT3072253./9b5ba==9cjag.from_oldbar.enc", "OmpAbEJubG16cEV2cnV3fXp4TFF6");Line Deleted : user_pref("CT3072253./9b6b11g4c56b>f;p;anr@p.from_oldbar.enc", "bm1pbXNwcnBwcHFyew==");Line Deleted : user_pref("CT3072253./9b9643g3/9e.from_oldbar.enc", "ag==");Line Deleted : user_pref("CT3072253./9b;45>:bi9i7ie.from_oldbar.enc", "Ky4sPQ==");Line Deleted : user_pref("CT3072253./9b<:222h64<.from_oldbar.enc", "OT81Lz4=");Line Deleted : user_pref("CT3072253./9b<:222h64<l8daj.from_oldbar.enc", "bXBwb3ZzdHl1dyp5d3J7fXUgIQ==");Line Deleted : user_pref("CT3072253./9b=+03eh8h8j?:.from_oldbar.enc", "REM=");Line Deleted : user_pref("CT3072253./9b?+e2a52d8.from_oldbar.enc", "NywtMml1di46PHs6OUNKSUhBQ0smUUZJKWVQRlZkcHJ5UVVeXlI=");Line Deleted : user_pref("CT3072253./9b?b0d:8aj62<h.from_oldbar.enc", "bQ==");Line Deleted : user_pref("CT3072253./9ba@0<0bi6a7gn:6@l?.from_oldbar.enc", "bA==");Line Deleted : user_pref("CT3072253.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);Line Deleted : user_pref("CT3072253.BrowserCompStateIsOpen_129573915102477663", true);Line Deleted : user_pref("CT3072253.BrowserCompStateIsOpen_129749445881800338", true);Line Deleted : user_pref("CT3072253.BrowserCompStateIsOpen_129805375651312503", true);Line Deleted : user_pref("CT3072253.BrowserCompStateIsOpen_130067979083742856", true);Line Deleted : user_pref("CT3072253.BrowserCompStateIsOpen_1359634299000", true);Line Deleted : user_pref("CT3072253.CTID", "CT3072253");Line Deleted : user_pref("CT3072253.CurrentServerDate", "24-11-2013");Line Deleted : user_pref("CT3072253.DSInstall", false);Line Deleted : user_pref("CT3072253.DialogsAlignMode", "LTR");Line Deleted : user_pref("CT3072253.DialogsGetterLastCheckTime", "Thu Nov 21 2013 06:19:56 GMT-0800 (Pacific Standard Time)");Line Deleted : user_pref("CT3072253.DownloadReferralCookieData", "");Line Deleted : user_pref("CT3072253.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":false}");Line Deleted : user_pref("CT3072253.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");Line Deleted : user_pref("CT3072253.EnableClickToSearchBox", false);Line Deleted : user_pref("CT3072253.EnableSearchHistory", false);Line Deleted : user_pref("CT3072253.EnableSearchSuggest", false);Line Deleted : user_pref("CT3072253.FirstServerDate", "6-5-2012");Line Deleted : user_pref("CT3072253.FirstTime", true);Line Deleted : user_pref("CT3072253.FirstTimeFF3", true);Line Deleted : user_pref("CT3072253.FixPageNotFoundErrors", true);Line Deleted : user_pref("CT3072253.GroupingServerCheckInterval", 1440);Line Deleted : user_pref("CT3072253.HPInstall", false);Line Deleted : user_pref("CT3072253.HasUserGlobalKeys", true);Line Deleted : user_pref("CT3072253.HomePageProtectorEnabled", false);Line Deleted : user_pref("CT3072253.Initialize", true);Line Deleted : user_pref("CT3072253.InitializeCommonPrefs", true);Line Deleted : user_pref("CT3072253.InstallationAndCookieDataSentCount", 3);Line Deleted : user_pref("CT3072253.InstallationId", "fft3907.tmp.exe");Line Deleted : user_pref("CT3072253.InstallationType", "XPE");Line Deleted : user_pref("CT3072253.InstalledDate", "Sun May 06 2012 12:38:54 GMT+0800 (China Standard Time)");Line Deleted : user_pref("CT3072253.IsAlertDBUpdated", true);Line Deleted : user_pref("CT3072253.IsGrouping", false);Line Deleted : user_pref("CT3072253.IsInitSetupIni", true);Line Deleted : user_pref("CT3072253.IsMulticommunity", false);Line Deleted : user_pref("CT3072253.IsOpenThankYouPage", true);Line Deleted : user_pref("CT3072253.IsOpenUninstallPage", false);Line Deleted : user_pref("CT3072253.LanguagePackLastCheckTime", "Sat Nov 23 2013 18:47:33 GMT-0800 (Pacific Standard Time)");Line Deleted : user_pref("CT3072253.LanguagePackReloadIntervalMM", 1440);Line Deleted : user_pref("CT3072253.LastLogin_3.12.0.8", "Sun May 06 2012 16:38:55 GMT+0800 (China Standard Time)");Line Deleted : user_pref("CT3072253.LastLogin_3.12.2.3", "Thu May 31 2012 19:24:29 GMT+0800 (China Standard Time)");Line Deleted : user_pref("CT3072253.LastLogin_3.13.0.6", "Wed Jul 18 2012 17:15:30 GMT+0800 (China Standard Time)");Line Deleted : user_pref("CT3072253.LastLogin_3.14.1.0", "Mon Oct 01 2012 23:24:37 GMT+0800 (China Standard Time)");Line Deleted : user_pref("CT3072253.LastLogin_3.15.1.0", "Tue Feb 26 2013 21:46:52 GMT+0800 (China Standard Time)");Line Deleted : user_pref("CT3072253.LastLogin_3.18.0.7", "Sat Nov 23 2013 18:47:32 GMT-0800 (Pacific Standard Time)");Line Deleted : user_pref("CT3072253.LatestVersion", "3.20.0.4");Line Deleted : user_pref("CT3072253.Locale", "en");Line Deleted : user_pref("CT3072253.MCDetectTooltipHeight", "83");Line Deleted : user_pref("CT3072253.MCDetectTooltipShow", false);Line Deleted : user_pref("CT3072253.MCDetectTooltipWidth", "295");Line Deleted : user_pref("CT3072253.MyStuffEnabledAtInstallation", false);Line Deleted : user_pref("CT3072253.OriginalFirstVersion", "3.12.0.8");Line Deleted : user_pref("CT3072253.PG_ENABLE", "dHJ1ZQ==");Line Deleted : user_pref("CT3072253.RadioShrinked", "shrinked");Line Deleted : user_pref("CT3072253.RadioShrinkedFromSetup", true);Line Deleted : user_pref("CT3072253.SF_JUST_INSTALLED", "%CC%C7%D2%D9%CB");Line Deleted : user_pref("CT3072253.SF_JUST_INSTALLED.enc", "RkFMU0U=");Line Deleted : user_pref("CT3072253.SHRINK_TOOLBAR", 0);Line Deleted : user_pref("CT3072253.SearchAppState.enc", "Mw==");Line Deleted : user_pref("CT3072253.SearchAppTracking.enc", "c2VudA==");Line Deleted : user_pref("CT3072253.SearchBackToDefaultEngine", false);Line Deleted : user_pref("CT3072253.SearchBoxWidth", 130);Line Deleted : user_pref("CT3072253.SearchCaption", "uTorrentControl2 Customized Web Search");Line Deleted : user_pref("CT3072253.SearchFromAddressBarIsInit", true);Line Deleted : user_pref("CT3072253.SearchInNewTabEnabled", true);Line Deleted : user_pref("CT3072253.SearchInNewTabIntervalMM", 1440);Line Deleted : user_pref("CT3072253.SearchInNewTabLastCheckTime", "Sat Nov 23 2013 18:47:18 GMT-0800 (Pacific Standard Time)");Line Deleted : user_pref("CT3072253.SearchInNewTabUserEnabled", false);Line Deleted : user_pref("CT3072253.SearchProtectorEnabled", false);Line Deleted : user_pref("CT3072253.SearchProtectorToolbarDisabled", false);Line Deleted : user_pref("CT3072253.SendProtectorDataViaLogin", true);Line Deleted : user_pref("CT3072253.ServiceMapLastCheckTime", "Thu Nov 21 2013 06:19:55 GMT-0800 (Pacific Standard Time)");Line Deleted : user_pref("CT3072253.SettingsLastCheckTime", "Thu Nov 21 2013 06:19:54 GMT-0800 (Pacific Standard Time)");Line Deleted : user_pref("CT3072253.SettingsLastUpdate", "1385024222");Line Deleted : user_pref("CT3072253.ThirdPartyComponentsInterval", 504);Line Deleted : user_pref("CT3072253.ThirdPartyComponentsLastCheck", "Thu Nov 21 2013 06:19:54 GMT-0800 (Pacific Standard Time)");Line Deleted : user_pref("CT3072253.ThirdPartyComponentsLastUpdate", "1331805997");Line Deleted : user_pref("CT3072253.ToolbarShrinkedFromSetup", true);Line Deleted : user_pref("CT3072253.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]Line Deleted : user_pref("CT3072253.UserID", "UN81973766299725348");Line Deleted : user_pref("CT3072253.ValidationData_Search", 2);Line Deleted : user_pref("CT3072253.ValidationData_Toolbar", 2);Line Deleted : user_pref("CT3072253._9b90e_.3c;7b=?ofb>>rhiqs.from_oldbar.enc", "OT81Lz4=");Line Deleted : user_pref("CT3072253._9b_7e.:2z527.from_oldbar.enc", "JH5ANUIqNjh5RTp8NkEsdC4gITEoM1RJVj5KTC5YWD0mPy4yQkc=");Line Deleted : user_pref("CT3072253._9b_7e.x305.from_oldbar.enc", "JH4qQTc3RDQzekY7PitzLXp9fCEyKTQ/VkZUUkxHSllaSFFQXlFSOWRZXEkySzk8Oz5QR1JdbGprb3htaFBqb3FxdCJWInZ5Zk9oVllYWm1kb3p7Mn1oNCkseGF6aGtqayB2Ii1AOjNGQD5HfklJ[...]Line Deleted : user_pref("CT3072253._key_edilia__uID", "%E7%EC%E9%BA%BA%EA%BB%B9%B3%EA%E9%BC%EA%B3%BA%E7%B8%EC%B3%BE%BF%B7%BE%B3%EB%B6%BE%E9%EC%B7%EB%EA%BD%E8%B7%BE");Line Deleted : user_pref("CT3072253._key_edilia__uID.enc", "YWZjNDRkNTMtZGM2ZC00YTJmLTg5MTgtZTA4Y2YxZWQ3YjE4");Line Deleted : user_pref("CT3072253.addressBarTakeOverEnabledInHidden", "true");Line Deleted : user_pref("CT3072253.alertChannelId", "1463702");Line Deleted : user_pref("CT3072253.approveUntrustedApps", true);Line Deleted : user_pref("CT3072253.autoDisableScopes", -1);Line Deleted : user_pref("CT3072253.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B474953462D584D503D263F2D2E3135443B464E4F5B565E695B426D6265523B544243464959505B637D737B6E55217578654E675[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C4748402C574C4F3C253E2C2E2B2F433A454E59505B57676A66426D62455E69543D56444643465B525D66716C216E6B587D73675[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e-x305", "247E29327641363937333545397E3F493B2F77317E202520362D3842474A58515A5C585D505F593964595C49324B393A3F395047525C4173686B6965677B796F6D7B6E552175785926766[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e.:2z527", "247E4035422A363879453A7C36412C742E20213128335449563E4A4C2E58583D263F2E324247");Line Deleted : user_pref("CT3072253.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F564654524C474A595A4851505E51523964595C49324B393C3B3E5047525D6C6A6B6F786D68506A6F7171742256227679664F6[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C4343534E2D585B3C253E2C302E34433A45515862695E675A416C6164513A5341454348584F5A666D7B7C7174726E702174745B2[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e06cg5el8:", "6E6D696D737072707077");Line Deleted : user_pref("CT3072253.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A74736F7379767876767D242F4B49474F42357D5D5C3D");Line Deleted : user_pref("CT3072253.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E41295547484D515A4E5A59325D5255422B443237303749404B585E685E706E6E6674626E696B4D786D705D465F4D524B51645B66732[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473E454745482F5A4F523F2841302D2F33463D48566265685C6B675F6D70604873686B58415A4946484B5F56616F7C217D74747[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D3229344356554E472E594E51325E4F412A4335373231483F4A59655F5F626C5B717369756975744D786D70517E6B60496252505451675[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e31;cjc<=fbj#ncf", "247E61393F236B25757677712A212C6E414F444D327A344F4849524E562F5A4F523F364124504C5662473049344B424D306C626F74716669676C7466767D7979732068614A6[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e31;cji?k:cnoh@&qfi", "247E61393F236B256E7571782A212C6E414F444D327A34554B57464F5A5B544C325D5255423944276459545C575A544D364F7C205249543774776559425B4D485E556043[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352C37474B59574B4A4858584E5E3762573A535E49324B3A3D3F3B504752626C625D75786D766A7C517C7174614A63525557526[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A522B55553A233C2B2F282941384354515E5D56615F56685C426D6265523B544346494A59505B6C697A7E21702370765925797[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D49564A50592E594E314A55402942322E332F473E495B5D595A6A5E58707262674974696C59425B4B474B51605762747C2473737[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B364953545259585A5A50524E36615659462F4838353D3C4D444F626C6D6B72716A77614D786D705D465F4F4C5451645B66797[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A31283347513F445559424C5A315C5154412A4333323037483F4A5E68565B5970606E6C666164734C776C6F5C455E4E4D4B51635A6579247[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e8x305", "247E343D3F3B35373B3F367C47472C742E7E782332293449565540472E594E513E274030323533453C475C5558636A656E625E6C616B7068734B766B6E5B445D4D4F524F6259647927767[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4F44504C4754585C5048345F5457442D46373135344B424D636B5D5F5F73696B4A756A6D5A435C4D474B4961586379226F742[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A30273249485545442C574C4F3C253E2F2A2D2D433A455C67555B5E3F6A5F624F3851423D403F564D586F7A68786C717154207477644D66575[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354D462C574C4F3C253E2F2B2B31433A455D6356575C5C5A416C6164513A5344404045584F5A7273717A786D2256227679664F6[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352C37504C4757514B4F47345F5457442D4637343A3A4B424D665E705B646571634A756A6D5A435C4D4A504F6158637C7179207[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B36505459574C554F515B345F5457442D46373637384B424D676B706E606F61666B63664D786D705D465F504F5050645B66212[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A35504F5346482F5A4F523F28413233342F463D48635C5D66626A436E6366533C55464748425A515C77707773202371215925797[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3652504C5249555256525C35605558452E47383B38364C434E6A706F5F65635D736F677578684C65706B54207477644D66575[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2A554A2D46513C253E302B332C433A45626756516259655F5F436E63465F6A553E5749444C445C535E7B21747C7821745A267[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4B524B4445494B49485450585952535F513863585B48314A3C3B363D4F46516F6B6E6D63776D687666507B707360496254534E54675[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57");Line Deleted : user_pref("CT3072253.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352C37565949484E4F51525C4E4C55535B54605A5A3E695E614E37503B3D41544B567575656D7367796D6D7C55217578654E675[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E3128335351565551575A4F584C5E335E5356432C4534383649404B6B59566C686B46716669563F58474B485C535E7E6C6956227679664F6[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C484A2C575A3B243D2F2F4037426358654D595B3D685D40645F4F38514342544B56776C79616D6F51796E6049625452655C672[...]Line Deleted : user_pref("CT3072253.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C32293423524C5457474A4E50565D4A61515F5D575255643D685D604D364F3D3E3E3D544B5645486A736D696F527D7275624B645253535[...]Line Deleted : user_pref("CT3072253.backendstorage./9b-0?3g>d", "3D6E686E3F6F6D747A7347787920487A492125797A7D212A555728255728572F27312C61");Line Deleted : user_pref("CT3072253.backendstorage./9b-0?3g@6:5;", "");Line Deleted : user_pref("CT3072253.backendstorage./9b-0?3gfa7ef", "2B2E2C3D");Line Deleted : user_pref("CT3072253.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F297B7E7D21202F26313E4249357D37382F3A494D5D513F283338435D6554695B65546D57695D5D686365533C70766C66755E");Line Deleted : user_pref("CT3072253.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6A696B7273747576");Line Deleted : user_pref("CT3072253.backendstorage./9b3=>@44i48?", "372C2D3269757633423633414847203E3D474E4D4C45474F2A554A4D2D5858585E4B554E366352564F");Line Deleted : user_pref("CT3072253.backendstorage./9b5ba==9cjag", "3A6A406C426E6C6D7A7045767275777D7A784C517A");Line Deleted : user_pref("CT3072253.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D696D73707270707071727B");Line Deleted : user_pref("CT3072253.backendstorage./9b90e@.3c;7b=?ofb>>rhiqs", "393F352F3E");Line Deleted : user_pref("CT3072253.backendstorage./9b9643g3/9e", "6A");Line Deleted : user_pref("CT3072253.backendstorage./9b;45>:bi9i7ie", "2B2E2C3D");Line Deleted : user_pref("CT3072253.backendstorage./9b<:222h64<", "393F352F3E");Line Deleted : user_pref("CT3072253.backendstorage./9b<:222h64<l8daj", "6D70706F7673747975772A7977727B7D752021");Line Deleted : user_pref("CT3072253.backendstorage./9b=+03eh8h8j?:", "4443");Line Deleted : user_pref("CT3072253.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");Line Deleted : user_pref("CT3072253.backendstorage./9b?b0d:8aj62<h", "6D");Line Deleted : user_pref("CT3072253.backendstorage./9ba@0<0bi6a7gn:6@l?", "6C");Line Deleted : user_pref("CT3072253.backendstorage._key_edilia__uid", "61666334346435332D646336642D346132662D383931382D653038636631656437623138");Line Deleted : user_pref("CT3072253.backendstorage.cbcountry_000", "484B");Line Deleted : user_pref("CT3072253.backendstorage.cbfirsttime", "53756E204D617920303620323031322031323A33383A353720474D542B3038303020284368696E61205374616E646172642054696D6529");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_appsconfig", "7B2241707073436F6E66696775726174696F6E223A5B7B226964223A226170703133222C2275726C223A22687474703A2F2F73746F726167652E636F6E647569742E636F6D2F6D6[...]Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_appsdefaultenabled", "74727565");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_appstate_app13", "6F6E");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_appstate_couponbuddy", "6F6E");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_appstate_discover", "6F6E");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_appstate_discover_apps", "6F6E");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_appstate_easytobook", "6F6E");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_appstate_easytobook_targeted", "6F6E");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_appstate_find-a-pro", "6F6E");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_appstate_pricegong", "6F6E");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_appstate_windowshopper", "6F6E");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_appstate_yieldkit", "6F6E");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_appstatereporttime", "31333835323631323338323035");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_calledsetupservice", "31");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_currentversion", "312E31312E342E32");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_existingusersrecoverydone", "31");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_first_time", "31");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_globalkeysmigratedtolocalstorage", "31");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_lastlogintime", "31333835323631323533323537");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_localization", "7B226469616C6F674F4B223A7B2254657874223A224F4B227D2C22646D626F7831223A7B2254657874223A224465616C5C725C6E6F662074686520646179227D2C22646D626F7[...]Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_mamenabled", "74727565");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_new_welcome_experience", "31");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_settings1.11.4.2", "7B22537461747573223A22737563636565646564222C2244617461223A7B2263757272656E7444617465223A223230313331313234222C22696E74657276616C223A32343[...]Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_showwelcomegadget", "66616C7365");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_stamp", "38365F30");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_user_approval_interacted", "31");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_userid", "32313336656132652D333465382D343938662D383737622D623136353466663035353064");Line Deleted : user_pref("CT3072253.backendstorage.mam_gk_welcomedialogmode", "31");Line Deleted : user_pref("CT3072253.backendstorage.pg_enable", "74727565");Line Deleted : user_pref("CT3072253.backendstorage.rematchagent-periodic-reports", "7B2270696E675F30223A5B313338353236333033373434332C31343430303030305D7D");Line Deleted : user_pref("CT3072253.backendstorage.rematchagent-user-id", "2263373262363632612D303731312D343532632D383735322D32356235666464316161333822");Line Deleted : user_pref("CT3072253.backendstorage.searchappstate", "33");Line Deleted : user_pref("CT3072253.backendstorage.searchapptracking", "73656E74");Line Deleted : user_pref("CT3072253.backendstorage.sf_just_installed", "46414C5345");Line Deleted : user_pref("CT3072253.backendstorage.sf_status", "454E41424C4544");Line Deleted : user_pref("CT3072253.backendstorage.sf_user_id", "6369645F3231313132303133363233313036393132383637");Line Deleted : user_pref("CT3072253.backendstorage.url_history0001", "687474703A2F2F74696D74616C65732E636F6D2F63617465676F726965732F626172656261636B2F332E68746D6C3A3A3A636C69636B68616E646C65723A3A3A31333835323732353[...]Line Deleted : user_pref("CT3072253.cbcountry_000.from_oldbar.enc", "SEs=");Line Deleted : user_pref("CT3072253.cbfirsttime.from_oldbar.enc", "U3VuIE1heSAwNiAyMDEyIDEyOjM4OjU3IEdNVCswODAwIChDaGluYSBTdGFuZGFyZCBUaW1lKQ==");Line Deleted : user_pref("CT3072253.components.1000080", false);Line Deleted : user_pref("CT3072253.components.129573915102477663", false);Line Deleted : user_pref("CT3072253.components.129593762370823811", false);Line Deleted : user_pref("CT3072253.components.129749445881800338", false);Line Deleted : user_pref("CT3072253.components.129805375651312503", false);Line Deleted : user_pref("CT3072253.countryCode", "US");Line Deleted : user_pref("CT3072253.embeddedsData", "[{\"appId\":\"129571859753931591\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]Line Deleted : user_pref("CT3072253.enableAlerts", "never");Line Deleted : user_pref("CT3072253.firstTimeDialogOpened", true);Line Deleted : user_pref("CT3072253.fixPageNotFoundErrorByUser", "TRUE");Line Deleted : user_pref("CT3072253.fixPageNotFoundErrorInHidden", "true");Line Deleted : user_pref("CT3072253.fullUserID", "UN81973766299725348.UP.209906");Line Deleted : user_pref("CT3072253.globalFirstTimeInfoLastCheckTime", "Thu Nov 21 2013 06:19:56 GMT-0800 (Pacific Standard Time)");Line Deleted : user_pref("CT3072253.homepageProtectorEnableByLogin", true);Line Deleted : user_pref("CT3072253.initDone", true);Line Deleted : user_pref("CT3072253.installId", "fft3907.tmp.exe");Line Deleted : user_pref("CT3072253.installType", "XPE");Line Deleted : user_pref("CT3072253.isAppTrackingManagerOn", false);Line Deleted : user_pref("CT3072253.isCheckedStartAsHidden", true);Line Deleted : user_pref("CT3072253.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":false}");Line Deleted : user_pref("CT3072253.isFirstRadioInstallation", false);Line Deleted : user_pref("CT3072253.isFirstTimeToolbarLoading", "false");Line Deleted : user_pref("CT3072253.isPerformedSmartBarTransition", "true");Line Deleted : user_pref("CT3072253.isSearchProtectorNotifyChanges", false);Line Deleted : user_pref("CT3072253.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");Line Deleted : user_pref("CT3072253.lastVersion", "10.20.101.5");Line Deleted : user_pref("CT3072253.mam_gk_appStateReportTime", "%B7%B9%BE%BB%BB%B9%BC%B8%BF%BC%BD%B8%BE");Line Deleted : user_pref("CT3072253.mam_gk_appStateReportTime.enc", "MTM4NTUzNjI5NjcyOA==");Line Deleted : user_pref("CT3072253.mam_gk_appState_CouponBuddy", "%F5%F4");Line Deleted : user_pref("CT3072253.mam_gk_appState_CouponBuddy.enc", "b24=");Line Deleted : user_pref("CT3072253.mam_gk_appState_Discover", "%F5%F4");Line Deleted : user_pref("CT3072253.mam_gk_appState_Discover.enc", "b24=");Line Deleted : user_pref("CT3072253.mam_gk_appState_Discover_Apps", "%F5%F4");Line Deleted : user_pref("CT3072253.mam_gk_appState_Discover_Apps.enc", "b24=");Line Deleted : user_pref("CT3072253.mam_gk_appState_Easytobook", "%F5%F4");Line Deleted : user_pref("CT3072253.mam_gk_appState_Easytobook.enc", "b24=");Line Deleted : user_pref("CT3072253.mam_gk_appState_Easytobook_targeted", "%F5%F4");Line Deleted : user_pref("CT3072253.mam_gk_appState_Easytobook_targeted.enc", "b24=");Line Deleted : user_pref("CT3072253.mam_gk_appState_Find-a-Pro", "%F5%F4");Line Deleted : user_pref("CT3072253.mam_gk_appState_Find-a-Pro.enc", "b24=");Line Deleted : user_pref("CT3072253.mam_gk_appState_PriceGong", "%F5%F4");Line Deleted : user_pref("CT3072253.mam_gk_appState_PriceGong.enc", "b24=");Line Deleted : user_pref("CT3072253.mam_gk_appState_WindowShopper", "%F5%F4");Line Deleted : user_pref("CT3072253.mam_gk_appState_WindowShopper.enc", "b24=");Line Deleted : user_pref("CT3072253.mam_gk_appState_YieldKit", "%F5%F4");Line Deleted : user_pref("CT3072253.mam_gk_appState_YieldKit.enc", "b24=");Line Deleted : user_pref("CT3072253.mam_gk_appState_app13", "%F5%F4");Line Deleted : user_pref("CT3072253.mam_gk_appState_app13.enc", "b24=");Line Deleted : user_pref("CT3072253.mam_gk_appsConfig.enc", "eyJBcHBzQ29uZmlndXJhdGlvbiI6W3siaWQiOiJhcHAxMyIsInVybCI6Imh0dHA6Ly9zdG9yYWdlLmNvbmR1aXQuY29tL21hbS8zcmRwYXJ0eWFwcHMvZWRpbGlhL2VkaWxpYS5odG1sIiwic2NyaXB0VX[...]Line Deleted : user_pref("CT3072253.mam_gk_appsDefaultEnabled", "%F4%FB%F2%F2");Line Deleted : user_pref("CT3072253.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");Line Deleted : user_pref("CT3072253.mam_gk_appsdefaultenabled.from_oldbar.enc", "dHJ1ZQ==");Line Deleted : user_pref("CT3072253.mam_gk_calledSetupService", "%B7");Line Deleted : user_pref("CT3072253.mam_gk_calledSetupService.enc", "MQ==");Line Deleted : user_pref("CT3072253.mam_gk_currentVersion", "%B7%B4%B7%B7%B4%BA%B4%B8");Line Deleted : user_pref("CT3072253.mam_gk_currentVersion.enc", "MS4xMS40LjI=");Line Deleted : user_pref("CT3072253.mam_gk_currentversion.from_oldbar.enc", "MS4xMS40LjI=");Line Deleted : user_pref("CT3072253.mam_gk_existingUsersRecoveryDone", "%B7");Line Deleted : user_pref("CT3072253.mam_gk_existingUsersRecoveryDone.enc", "MQ==");Line Deleted : user_pref("CT3072253.mam_gk_first_time", "%B7");Line Deleted : user_pref("CT3072253.mam_gk_first_time.enc", "MQ==");Line Deleted : user_pref("CT3072253.mam_gk_globalKeysMigratedToLocalStorage", "%B7");Line Deleted : user_pref("CT3072253.mam_gk_globalKeysMigratedToLocalStorage.enc", "MQ==");Line Deleted : user_pref("CT3072253.mam_gk_lastLoginTime", "%B7%B9%BE%BB%BB%B9%BC%B8%BF%BC%BF%BA%BE");Line Deleted : user_pref("CT3072253.mam_gk_lastLoginTime.enc", "MTM4NTUzNjI5Njk0OA==");Line Deleted : user_pref("CT3072253.mam_gk_localization.enc", "eyJkaWFsb2dPSyI6eyJUZXh0IjoiT0sifSwiZG1ib3gxIjp7IlRleHQiOiJEZWFsXHJcbm9mIHRoZSBkYXkifSwiZG1ib3gyIjp7IlRleHQiOiJGcmVlXHJcblNoaXBtZW50In0sImRtYnVsbGV0MSI6[...]Line Deleted : user_pref("CT3072253.mam_gk_mamEnabled", "%FA%F8%FB%EB");Line Deleted : user_pref("CT3072253.mam_gk_mamEnabled.enc", "dHJ1ZQ==");Line Deleted : user_pref("CT3072253.mam_gk_new_welcome_experience", "%B7");Line Deleted : user_pref("CT3072253.mam_gk_new_welcome_experience.enc", "MQ==");Line Deleted : user_pref("CT3072253.mam_gk_pgUnloadedOnce", "%FA%F8%FB%EB");Line Deleted : user_pref("CT3072253.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");Line Deleted : user_pref("CT3072253.mam_gk_settings1.11.4.2", "ā%A8%D9%FA%E7%FA%FB%F9%A8%C0%A8%F9%FB%E9%E9%EB%EB%EA%EB%EA%A8%B2%A8%CA%E7%FA%E7%A8%C0ā%A8%E9%FB%F8%F8%EB%F4%FA%CA%E7%FA%EB%A8%C0%A8%B8%B6%B7%B[...]Line Deleted : user_pref("CT3072253.mam_gk_settings1.11.4.2.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImN1cnJlbnREYXRlIjoiMjAxMzExMjciLCJpbnRlcnZhbCI6MjQwLCJzdGFtcCI6Ijg2XzAiLCJpc1Rlc3QiOnRydWUsIlVzZXJDb3VudHJ5[...]Line Deleted : user_pref("CT3072253.mam_gk_showWelcomeGadget", "%EC%E7%F2%F9%EB");Line Deleted : user_pref("CT3072253.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");Line Deleted : user_pref("CT3072253.mam_gk_showwelcomegadget.from_oldbar.enc", "ZmFsc2U=");Line Deleted : user_pref("CT3072253.mam_gk_stamp", "%BE%BC%E5%B6");Line Deleted : user_pref("CT3072253.mam_gk_stamp.enc", "ODZfMA==");Line Deleted : user_pref("CT3072253.mam_gk_userId", "%B8%B7%B9%BC%EB%E7%B8%EB%B3%B9%BA%EB%BE%B3%BA%BF%BE%EC%B3%BE%BD%BD%E8%B3%E8%B7%BC%BB%BA%EC%EC%B6%BB%BB%B6%EA");Line Deleted : user_pref("CT3072253.mam_gk_userId.enc", "MjEzNmVhMmUtMzRlOC00OThmLTg3N2ItYjE2NTRmZjA1NTBk");Line Deleted : user_pref("CT3072253.mam_gk_user_approval_interacted", "%B7");Line Deleted : user_pref("CT3072253.mam_gk_user_approval_interacted.enc", "MQ==");Line Deleted : user_pref("CT3072253.mam_gk_welcomeDialogMode", "%B7");Line Deleted : user_pref("CT3072253.mam_gk_welcomeDialogMode.enc", "MQ==");Line Deleted : user_pref("CT3072253.mam_gk_welcomedialogmode.from_oldbar.enc", "MQ==");Line Deleted : user_pref("CT3072253.myStuffEnabled", true);Line Deleted : user_pref("CT3072253.myStuffPublihserMinWidth", 400);Line Deleted : user_pref("CT3072253.myStuffServiceIntervalMM", 1440);Line Deleted : user_pref("CT3072253.navigateToUrlOnSearch", false);Line Deleted : user_pref("CT3072253.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxps%3A%2F%2Fmail.haas.berkeley.edu%2Fowa%2F\",\"EB_MAIN_FRAME_TITLE\":\"Kyle%20Du%20-%20Outlook%20Web%20App\",\"EB_SEARCH_TERM\[...]Line Deleted : user_pref("CT3072253.oldAppsList", "129295695672325902,129571859753931591,111,129593762370823811,129805375651312503,129749445881800338,129573915102477663,1000080,1000515,1000,1001,1002,1003,1004,1005,[...]Line Deleted : user_pref("CT3072253.originalSearchAddressUrl", "");Line Deleted : user_pref("CT3072253.pg_enable.from_oldbar.enc", "dHJ1ZQ==");Line Deleted : user_pref("CT3072253.price-gong.isManagedApp", "true");Line Deleted : user_pref("CT3072253.rematchagent-periodic-reports", "ā%A8%F6%EF%F4%ED%E5%B6%A8%C0%E1%B7%B9%BE%BB%BB%B9%BC%B9%B6%B8%BF%BE%B8%B2%B7%BA%BA%B6%B6%B6%B6%B6%E3ă");Line Deleted : user_pref("CT3072253.rematchagent-periodic-reports.enc", "eyJwaW5nXzAiOlsxMzg1NTM2MzAyOTgyLDE0NDAwMDAwXX0=");Line Deleted : user_pref("CT3072253.rematchagent-user-id", "%A8%E9%BD%B8%E8%BC%BC%B8%E7%B3%B6%BD%B7%B7%B3%BA%BB%B8%E9%B3%BE%BD%BB%B8%B3%B8%BB%E8%BB%EC%EA%EA%B7%E7%E7%B9%BE%A8");Line Deleted : user_pref("CT3072253.rematchagent-user-id.enc", "ImM3MmI2NjJhLTA3MTEtNDUyYy04NzUyLTI1YjVmZGQxYWEzOCI=");Line Deleted : user_pref("CT3072253.revertSettingsEnabled", true);Line Deleted : user_pref("CT3072253.search.searchAppId", "129571859753931591");Line Deleted : user_pref("CT3072253.search.searchCount", 2);Line Deleted : user_pref("CT3072253.searchFromAddressBarEnabledByUser", "false");Line Deleted : user_pref("CT3072253.searchInNewTabEnabledByUser", "false");Line Deleted : user_pref("CT3072253.searchInNewTabEnabledInHidden", "true");Line Deleted : user_pref("CT3072253.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":false}");Line Deleted : user_pref("CT3072253.searchProtectorDialogDelayInSec", 10);Line Deleted : user_pref("CT3072253.searchProtectorEnableByLogin", true);Line Deleted : user_pref("CT3072253.searchSuggestEnabledByUser", "false");Line Deleted : user_pref("CT3072253.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"false\"}");Line Deleted : user_pref("CT3072253.selectToSearchBoxEnabledByUser", "{\"dataType\":\"string\",\"data\":\"false\"}");Line Deleted : user_pref("CT3072253.sendUsageEnabled", "false");Line Deleted : user_pref("CT3072253.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");Line Deleted : user_pref("CT3072253.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");Line Deleted : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3072253\"}");Line Deleted : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentControl2 \"}");Line Deleted : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");Line Deleted : user_pref("CT3072253.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");Line Deleted : user_pref("CT3072253.serviceLayer_services_Configuration_lastUpdate", "1385536293074");Line Deleted : user_pref("CT3072253.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1385332637068");Line Deleted : user_pref("CT3072253.serviceLayer_services_appsMetadata_lastUpdate", "1385536291809");Line Deleted : user_pref("CT3072253.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1385332636757");Line Deleted : user_pref("CT3072253.serviceLayer_services_login_10.20.101.5_lastUpdate", "1385536291765");Line Deleted : user_pref("CT3072253.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1385332636911");Line Deleted : user_pref("CT3072253.serviceLayer_services_searchAPI_lastUpdate", "1385536291984");Line Deleted : user_pref("CT3072253.serviceLayer_services_serviceMap_lastUpdate", "1385536291809");Line Deleted : user_pref("CT3072253.serviceLayer_services_toolbarContextMenu_lastUpdate", "1385536291502");Line Deleted : user_pref("CT3072253.serviceLayer_services_toolbarSettings_lastUpdate", "1385536291539");Line Deleted : user_pref("CT3072253.serviceLayer_services_translation_lastUpdate", "1385536291457");Line Deleted : user_pref("CT3072253.settingsINI", true);Line Deleted : user_pref("CT3072253.sf_status.from_oldbar.enc", "RU5BQkxFRA==");Line Deleted : user_pref("CT3072253.sf_user_id.from_oldbar.enc", "Y2lkXzIxMTEyMDEzNjIzMTA2OTEyODY3");Line Deleted : user_pref("CT3072253.showToolbarPermission", "false");Line Deleted : user_pref("CT3072253.smartbar.CTID", "CT3072253");Line Deleted : user_pref("CT3072253.smartbar.Uninstall", "0");Line Deleted : user_pref("CT3072253.smartbar.toolbarName", "uTorrentControl2 ");Line Deleted : user_pref("CT3072253.testingCtid", "");Line Deleted : user_pref("CT3072253.toolbarAppMetaDataLastCheckTime", "Sat Nov 23 2013 18:47:33 GMT-0800 (Pacific Standard Time)");Line Deleted : user_pref("CT3072253.toolbarBornServerTime", "6-5-2012");Line Deleted : user_pref("CT3072253.toolbarContextMenuLastCheckTime", "Thu Nov 21 2013 06:19:56 GMT-0800 (Pacific Standard Time)");Line Deleted : user_pref("CT3072253.toolbarCurrentServerTime", "27-11-2013");Line Deleted : user_pref("CT3072253.toolbarLoginClientTime", "Sun Nov 24 2013 14:37:17 GMT-0800 (Pacific Standard Time)");Line Deleted : user_pref("CT3072253.upgradeFromOBVersion", true);Line Deleted : user_pref("CT3072253.url_history0001.from_oldbar.enc", "aHR0cDovL3RpbXRhbGVzLmNvbS9jYXRlZ29yaWVzL2JhcmViYWNrLzMuaHRtbDo6OmNsaWNraGFuZGxlcjo6OjEzODUyNzI1NTg1NDcsLCxodHRwOi8vdGltdGFsZXMuY29tL2NhdGVnb3Jp[...]Line Deleted : user_pref("CT3072253.usageEnabled", false);Line Deleted : user_pref("CT3072253.usagesFlag", 2);Line Deleted : user_pref("CT3072253_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1385536287127,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");Line Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.18.0.7");Line Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");Line Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT3072253");Line Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT3072253");Line Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT3072253");Line Deleted : user_pref("CommunityToolbar.globalUserId", "2c6d947e-ff8f-4360-80a0-62d649b7fb6e");Line Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);Line Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);Line Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Thu Nov 21 2013 06:19:56 GMT-0800 (Pacific Standard Time)");Line Deleted : user_pref("CommunityToolbar.notifications.alertEnabled", false);Line Deleted : user_pref("CommunityToolbar.notifications.locale", "en");Line Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);Line Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Thu Nov 21 2013 06:19:56 GMT-0800 (Pacific Standard Time)");Line Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");Line Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);Line Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);Line Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);Line Deleted : user_pref("CommunityToolbar.notifications.userId", "03a0a70d-b79d-4bee-93f8-79d5930a89bc");Line Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "");Line Deleted : user_pref("smartbar.machineId", "N/0IYXO6CQKGG1TYYGMMOVQ/PMC5A1/I8VR1QOXM1EM6SEQXXUQ2FFRM1SX4UQRX4TOBPF8OZUTHLMKMDKROSA"); -\\ Google Chrome v31.0.1650.63 [ File : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\preferences ] ************************* AdwCleaner[R0].txt - [53034 octets] - [19/12/2013 09:27:29]AdwCleaner[s0].txt - [53748 octets] - [19/12/2013 09:30:25] ########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [53809 octets] ##########
  6. actually i played around with internet options a bit - and now i can download :-)
  7. Here is the log. Still cannot download anti-virus programs All processes killed========== OTL ==========Prefs.js: "chr-greentree_ff&ilc=12&type=903578" removed from browser.search.param.yahoo-frPrefs.js: "http://search.yahoo....r=spigot-yhp-ff" removed from browser.startup.homepagePrefs.js: npp2pls@astri.org:1.0.0.6 removed from extensions.enabledAddonsPrefs.js: {687578b9-7132-4a7a-80e4-30ee31099e03}:10.20.101.5 removed from extensions.enabledAddonsPrefs.js: "http://search.yahoo....&type=903578&p=" removed from keyword.URLRegistry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14\ deleted successfully.C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll moved successfully.Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14\ deleted successfully.C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll moved successfully.Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14\ deleted successfully.C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll moved successfully.Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14\ deleted successfully.C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll moved successfully.Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14\ deleted successfully.C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll moved successfully.Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F} deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0153E448-190B-4987-BDE1-F256CADA672F}\ not found.C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\Components folder moved successfully.C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\Chrome\Skin folder moved successfully.C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\Chrome\Content folder moved successfully.C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\Chrome folder moved successfully.C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Plugins folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\modules folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\META-INF folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\lib folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\defaults\preferences folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\defaults folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\components folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\sl folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\lib\jquery.jscrollpane folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\lib\jquery.alerts\images folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\lib\jquery.alerts folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\lib folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\core folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\WEATHER\js folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\WEATHER\css folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\WEATHER folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\TWITTER\js folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\TWITTER\img folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\TWITTER folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\SEARCH\view\style\rsx folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\SEARCH\view\style folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\SEARCH\view\script folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\SEARCH\view folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\SEARCH\resources folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\SEARCH\js folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\SEARCH\Css folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\SEARCH\buildSettings folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\SEARCH folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\RADIO_PLAYER\js\resources folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\RADIO_PLAYER\js folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\RADIO_PLAYER\css\custom-theme folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\RADIO_PLAYER\css folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\RADIO_PLAYER folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\PRICE_GONG\images folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\PRICE_GONG\css\custom-theme folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\PRICE_GONG\css folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\PRICE_GONG\agreement folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\PRICE_GONG folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\Optimizer\js folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\Optimizer folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\NOTIFICATION\js folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\NOTIFICATION\images\light folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\NOTIFICATION\images\dark folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\NOTIFICATION\images folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\NOTIFICATION\css folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\NOTIFICATION folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\MULTI_RSS\js\resources folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\MULTI_RSS\js folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\MULTI_RSS\img folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\MULTI_RSS\css folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\MULTI_RSS folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\HIGHLIGHTER\js folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\HIGHLIGHTER\css folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\HIGHLIGHTER folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\EMAIL_NOTIFIER\js folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\EMAIL_NOTIFIER\css folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\EMAIL_NOTIFIER folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\APPLICATION_BUTTON\resources folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\APPLICATION_BUTTON\Js folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa\APPLICATION_BUTTON folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\wa folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\ui\menu\js folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\ui\menu\img folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\ui\menu\css folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\ui\menu folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\ui\gf\js folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\ui\gf\img folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\ui\gf\css folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\ui\gf folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\ui\gadgetFrame folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\ui\dlg\ftd\images folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\ui\dlg\ftd folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\ui\dlg folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\ui folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\sp\spsd\images folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\sp\spsd folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\sp\spbd\images folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\sp\spbd folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\sp\js folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\sp folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\options\js\resources folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\options\js folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\options\images folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\options\css folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\options folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\msd folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\api folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\ac\res folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\ac\img folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\ac\css folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\ac folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\aboutBox\js folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\aboutBox\images folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al\aboutBox folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb\al folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\tb folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\logic\uninstall\dialog\js folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\logic\uninstall\dialog\images folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\logic\uninstall\dialog\css folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\logic\uninstall\dialog folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\logic\uninstall folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content\logic folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253\content folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome\CT3072253 folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\Chrome folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03} folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\npp2pls@astri.org\plugins folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\npp2pls@astri.org folder moved successfully.C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\vmoncfsezb@vmoncfsezb.org.xpi moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\_locales\en folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\_locales folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\WhiteListing folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\TBHostSupport folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\sl folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\lib\jquery.jscrollpane folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\lib\jquery.alerts\images folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\lib\jquery.alerts folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\lib folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\core folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\WEATHER\js folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\WEATHER\css folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\WEATHER folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\TWITTER\js folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\TWITTER\img folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\TWITTER folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\SEARCH\view\style\rsx folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\SEARCH\view\style folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\SEARCH\view\script folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\SEARCH\view folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\SEARCH\resources folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\SEARCH\js folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\SEARCH\Css folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\SEARCH\buildSettings folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\SEARCH folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\RADIO_PLAYER\js\resources folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\RADIO_PLAYER\js folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\RADIO_PLAYER\css\custom-theme folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\RADIO_PLAYER\css folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\RADIO_PLAYER folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\PRICE_GONG\images folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\PRICE_GONG\css\custom-theme folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\PRICE_GONG\css folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\PRICE_GONG\agreement folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\PRICE_GONG folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\Optimizer\js folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\Optimizer folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\NOTIFICATION\js folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\NOTIFICATION\images\light folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\NOTIFICATION\images\dark folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\NOTIFICATION\images folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\NOTIFICATION\css folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\NOTIFICATION folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\MULTI_RSS\js\resources folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\MULTI_RSS\js folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\MULTI_RSS\img folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\MULTI_RSS\css folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\MULTI_RSS folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\HIGHLIGHTER\js folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\HIGHLIGHTER\css folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\HIGHLIGHTER folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\EMAIL_NOTIFIER\js folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\EMAIL_NOTIFIER\css folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\EMAIL_NOTIFIER folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\APPLICATION_BUTTON\resources folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\APPLICATION_BUTTON\Js folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa\APPLICATION_BUTTON folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\wa folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\ui\menu\js folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\ui\menu\img folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\ui\menu\css folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\ui\menu folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\ui\gf\js folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\ui\gf\img folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\ui\gf\css folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\ui\gf folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\ui\gadgetFrame folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\ui\dlg\ftd\images folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\ui\dlg\ftd folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\ui\dlg folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\ui folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\sp\spsd\images folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\sp\spsd folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\sp\spbd\images folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\sp\spbd folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\sp\js folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\sp folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\options\js\resources folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\options\js folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\options\images folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\options\css folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\options folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\msd folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\api folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\ac\res folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\ac\img folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\ac\css folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\ac folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\aboutBox\js folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\aboutBox\images folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al\aboutBox folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb\al folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\tb folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\Search\plugins folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\Search\NewTabPages\js folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\Search\NewTabPages\img folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\Search\NewTabPages\html folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\Search\NewTabPages\css folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\Search\NewTabPages\API folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\Search\NewTabPages folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\Search\html folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\Search folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\plugins folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\nativeMessaging folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\mam\scripts\contentScripts folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\mam\scripts folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\mam folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\js\toolbarAPI folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\js\tabs\back folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\js\tabs folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\js\options folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\js\lib folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\js folder moved successfully.C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0 folder moved successfully.File C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\nativeMessaging\nmHost not found.64bit-Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}\ deleted successfully.64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}\ deleted successfully.Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}\ deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3049C3E9-B461-4BC5-8870-4C09146192CA}\ deleted successfully.C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll moved successfully.Registry value HKEY_USERS\S-1-5-21-2777047530-1545888719-2141319319-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{30F9B915-B755-4826-820B-08FBA6BD249D} deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}\ not found.Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.C:\4c2b1ca437fcbd7b19a4dea245\x86 folder moved successfully.C:\4c2b1ca437fcbd7b19a4dea245\EN-US folder moved successfully.C:\4c2b1ca437fcbd7b19a4dea245 folder moved successfully.C:\Users\user\AppData\Local\LzduPack folder moved successfully.C:\dvmexp.idx moved successfully.========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default->Temp folder emptied: 0 bytes->Temporary Internet Files folder emptied: 67 bytes->Flash cache emptied: 56478 bytes User: Default User->Temp folder emptied: 0 bytes->Temporary Internet Files folder emptied: 0 bytes->Flash cache emptied: 0 bytes User: Guest->Temp folder emptied: 0 bytes->Temporary Internet Files folder emptied: 229796597 bytes->Java cache emptied: 0 bytes->FireFox cache emptied: 207955437 bytes->Flash cache emptied: 59317 bytes User: Public->Temp folder emptied: 0 bytes User: user->Temp folder emptied: 2111498 bytes->Temporary Internet Files folder emptied: 68578439 bytes->Java cache emptied: 0 bytes->FireFox cache emptied: 1130491978 bytes->Google Chrome cache emptied: 410381041 bytes->Flash cache emptied: 180892 bytes %systemdrive% .tmp files removed: 0 bytes%systemroot% .tmp files removed: 0 bytes%systemroot%\System32 .tmp files removed: 0 bytes%systemroot%\System32 (64bit) .tmp files removed: 0 bytes%systemroot%\System32\drivers .tmp files removed: 0 bytesWindows Temp folder emptied: 196650255 bytes%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 42321377 bytesRecycleBin emptied: 65512292 bytes Total Files Cleaned = 2,245.00 mb OTL by OldTimer - Version 3.2.69.0 log created on 12172013_134510 Files\Folders moved on Reboot...C:\Users\user\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully. PendingFileRenameOperations files... Registry entries deleted on Reboot...
  8. OTL Extras logfile created on: 12/16/2013 11:35:06 PM - Run 1OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\user\Desktop64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstationInternet Explorer (Version = 9.11.9600.16428)Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 11.99 Gb Total Physical Memory | 10.41 Gb Available Physical Memory | 86.82% Memory free23.98 Gb Paging File | 21.74 Gb Available in Paging File | 90.65% Paging File freePaging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)Drive C: | 927.64 Gb Total Space | 235.56 Gb Free Space | 25.39% Space Free | Partition Type: NTFSDrive D: | 935.28 Gb Total Space | 935.16 Gb Free Space | 99.99% Space Free | Partition Type: NTFSDrive F: | 3.68 Gb Total Space | 3.50 Gb Free Space | 95.04% Space Free | Partition Type: FAT32 Computer Name: USER-PC | User Name: user | Logged in as Administrator.Boot Mode: Normal | Scan Mode: All users | Include 64bit ScansCompany Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>].html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation).url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>].cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation).html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) [HKEY_USERS\S-1-5-21-2777047530-1545888719-2141319319-1000\SOFTWARE\Classes\<extension>].html [@ = ChromeHTML] -- Reg Error: Key error. File not found ========== Shell Spawning ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]batfile [open] -- "%1" %*cmdfile [open] -- "%1" %*comfile [open] -- "%1" %*exefile [open] -- "%1" %*helpfile [open] -- Reg Error: Key error.htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)piffile [open] -- "%1" %*regfile [merge] -- Reg Error: Key error.scrfile [config] -- "%1"scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %lscrfile [open] -- "%1" /Stxtfile [edit] -- Reg Error: Key error.Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)Folder [explore] -- Reg Error: Value error.Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]batfile [open] -- "%1" %*cmdfile [open] -- "%1" %*comfile [open] -- "%1" %*cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)exefile [open] -- "%1" %*helpfile [open] -- Reg Error: Key error.htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)piffile [open] -- "%1" %*regfile [merge] -- Reg Error: Key error.scrfile [config] -- "%1"scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %lscrfile [open] -- "%1" /Stxtfile [edit] -- Reg Error: Key error.Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)Folder [explore] -- Reg Error: Value error.Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. ========== Security Center Settings ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]"cval" = 1"FirewallDisableNotify" = 0"AntiVirusDisableNotify" = 0"UpdatesDisableNotify" = 0 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]"AntiVirusOverride" = 0"AntiSpywareOverride" = 0"FirewallOverride" = 0 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] ========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]"DisableSR" = 0 ========== Firewall Settings ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]"DisableNotifications" = 0"EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]"DisableNotifications" = 0"EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]"DisableNotifications" = 0"EnableFirewall" = 1 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] ========== Vista Active Open Ports Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]"{001AFF56-ED54-4CDC-B655-A751782E8EAD}" = lport=445 | protocol=6 | dir=in | app=system | "{03082B13-7667-4B0B-A5B9-416277FC272A}" = lport=137 | protocol=17 | dir=in | app=system | "{19FAAC84-D7F2-4B50-8FCF-90DD2F61F86B}" = rport=137 | protocol=17 | dir=out | app=system | "{3708224A-89EC-476A-ACE5-53D7A6B8C1C5}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{469A6A2A-202E-4BCB-A69F-6D1EAF03CEFC}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{51EC55A8-0686-4B58-8877-58D2F4F63E17}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | "{596609C9-1A0F-4C59-893D-23A9DC2CBF8F}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\outlook.exe | "{5C575A5B-68F4-4226-B265-335BD0EC7D3C}" = lport=138 | protocol=17 | dir=in | app=system | "{64DD4089-504F-427E-8603-E2363DE03D8B}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | "{733EA46C-7BA9-4D97-9C87-D60199648688}" = lport=139 | protocol=6 | dir=in | app=system | "{80BEC6AF-F44D-4F73-A239-77BB0FBA88F4}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | "{8BC2B04D-515E-4D51-A47A-EE14E5C6454F}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | "{98C4675A-7768-4857-8A3F-304F01C0AF50}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{9F818513-E7B0-4BD1-8F1C-914D162F2E69}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{A3D96E85-587E-4CAC-89B7-8126CEC825AA}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{C366BE8E-AFD0-44FE-ABC0-B372D5F59ED7}" = rport=445 | protocol=6 | dir=out | app=system | "{CF996181-7D65-47E9-811F-E2D326689F4E}" = rport=138 | protocol=17 | dir=out | app=system | "{D34EFA81-7439-4119-BA4D-F7B0E55F2F49}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{EBBA0256-8FE8-46BE-9997-57944129DC92}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{F2E5DD16-2956-43B0-9528-8C90974A99EA}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{F4FA642C-49FC-426D-A8DA-558BE74E1F46}" = rport=139 | protocol=6 | dir=out | app=system | ========== Vista Active Application Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]"{04C208E8-B12A-4590-84FB-B30D145CA7EC}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe | "{0C79EBD0-5D4E-4BBA-8647-09A36B6F4AF4}" = protocol=6 | dir=in | app=c:\users\user\appdata\roaming\utorrent\utorrent.exe | "{1E86D78A-3170-4688-A79C-AC1FBAD00F56}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.524\agent.exe | "{200BD78F-F70F-4945-BA05-195C4A16A5A6}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{226B1C15-BACE-4B7B-84AC-19F2AF5CC246}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.954\agent.exe | "{2320C95C-42A7-4004-9607-8D707A72D311}" = protocol=6 | dir=in | app=c:\program files (x86)\raptr\raptr.exe | "{2988474B-5446-4B3F-9A35-C8E75EBA41B1}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{2E1055D1-25ED-40EB-B45F-0114D0CF1626}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe | "{3A962769-75BB-49FE-9D5C-5C89DB493266}" = protocol=6 | dir=in | app=c:\program files (x86)\raptr\raptr_im.exe | "{48F3C071-7A07-47E5-A412-936A794BA28F}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{4E4FBB5B-1787-4F0D-8F5F-1481EA911AF4}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe | "{4FE813DB-7FBD-41B1-AE68-EB45DBE6AA8E}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{51A45038-6560-4DCA-B849-0AEBBEA67C2B}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{5F3A9683-7A9C-495C-945F-9855CFE48DEB}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2328\agent.exe | "{604714EB-2FAE-4928-B649-25A169F0F72D}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{65D076FE-62B0-4A40-B9C1-1819443B8F1D}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{7421B762-2316-4D1C-9375-D5EF7CFB59DD}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe | "{7608FF1E-CBCE-4AAE-B6D4-18615B945DD1}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{7B3EE44D-EFDA-4E1B-92F9-F8093B39118C}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1675\agent.exe | "{862CABC7-C8CF-4452-9780-733B5C6ECC58}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe | "{934928CF-7E04-42A3-81C3-84C634DCDB30}" = protocol=17 | dir=in | app=c:\program files (x86)\vuze\azureus.exe | "{97F803A9-9120-48E1-967F-C260EA1C0A7E}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{98C36975-5DF2-42E8-8E55-964FFC4248E4}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2328\agent.exe | "{9ADAABD1-0F5C-42C3-8678-266A85FDB121}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.954\agent.exe | "{A1A6B85D-0DB7-4767-B3B1-55433BF7D642}" = protocol=6 | dir=in | app=c:\program files (x86)\vuze\azureus.exe | "{A42C2AFE-61D2-41E9-8F81-A486F62DAF9B}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{A47684A0-F9F4-4DDD-ABF1-761E8AE0FE48}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1675\agent.exe | "{AA02B037-0313-4EEB-AB7E-056E7C037100}" = protocol=17 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe | "{AD742507-4C76-41DF-BB11-05E1F2633CB3}" = protocol=6 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe | "{AD8D66BF-7037-4979-A549-74A3D70D3E15}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sid meier's civilization v\launcher.exe | "{C169B659-9DE2-4458-AB6D-C0F032B9637E}" = protocol=6 | dir=in | app=c:\users\user\appdata\local\google\google talk plugin\googletalkplugin.exe | "{C7FDD494-1A6A-45A5-8638-101286FA1AC9}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{CF0327BF-ACB1-4EA7-BCBA-A4E3F37ECA7E}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe | "{D303BB9B-9622-48EB-8D5D-6CF1E60C57E4}" = protocol=17 | dir=in | app=c:\program files (x86)\raptr\raptr.exe | "{D40E2E02-B81D-43CE-A811-54758C8FECDD}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sid meier's civilization v\launcher.exe | "{D61031FB-8A41-470B-8846-6F3D89A8F8F0}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{DE09F959-D151-45EE-B416-F18A4ECAB8DD}" = protocol=17 | dir=in | app=c:\program files (x86)\raptr\raptr_im.exe | "{E746E6A9-5D65-4DC6-A34E-D8E958A037B6}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe | "{E7596B3A-908B-411C-A7EC-E438DA963924}" = protocol=17 | dir=in | app=c:\users\user\appdata\roaming\utorrent\utorrent.exe | "{F8458609-182F-4708-998A-EA0539386FE3}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1637\agent.exe | "{F92CAB23-DBD3-499E-BE54-3F9A1715A205}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.524\agent.exe | "{FBBBB7E3-6D1A-4BA4-87BA-47C6ED2E77CB}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1637\agent.exe | "{FC4F8789-E864-45C7-A300-4414FD9888F9}" = protocol=17 | dir=in | app=c:\users\user\appdata\local\google\google talk plugin\googletalkplugin.exe | "TCP Query User{43B5B988-23F3-427C-B1C7-2D42604D79CE}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe | "TCP Query User{5AE16AAF-6995-4A4C-B11F-E5A1B5560AFC}C:\program files (x86)\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\eadm\core.exe | "TCP Query User{B339BF6F-447D-45AA-9A23-8A3F3865637B}C:\program files (x86)\gridservice\peer.exe" = protocol=6 | dir=in | app=c:\program files (x86)\gridservice\peer.exe | "UDP Query User{6A7FB4CB-3F05-43C4-838B-2910CC0BD56E}C:\program files (x86)\gridservice\peer.exe" = protocol=17 | dir=in | app=c:\program files (x86)\gridservice\peer.exe | "UDP Query User{9E2D5CF9-3F85-4E75-908E-06033DEBA898}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe | "UDP Query User{D8A39DAC-26AE-42D9-8C46-AB576FBFD8E4}C:\program files (x86)\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\eadm\core.exe | ========== HKEY_LOCAL_MACHINE Uninstall List ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)"{391ED0B2-B886-A6D0-B1A6-C25A7FE5B452}" = ATI AVIVO64 Codecs"{4F8A27CA-6788-7965-3259-5C3B9C37FCD8}" = ATI Problem Report Wizard"{60A95961-E9F4-17C6-2A91-578C34ED9A0C}" = ATI Catalyst Install Manager"{6DF41AAD-B5F7-84BE-37F5-4C93184F5FBE}" = ccc-utility64"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour"{704C0303-D20C-45AF-BD2B-556EAF31BE09}" = iCloud"{83ED5086-5D6B-698F-5CD4-2F631DA8FD69}" = AMD Drag and Drop Transcoding"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010"{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010"{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010"{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile"NVIDIA Display Control Panel" = NVIDIA Display Control Panel"NVIDIA Drivers" = NVIDIA Drivers"WinRAR archiver" = WinRAR 4.01 (64-bit) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148"{0471C553-36C2-E7A0-7489-E99CD3F9683C}" = CCC Help Chinese Standard"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam"{07BFA98D-6DB0-6D9C-95D5-7EF347AF587B}" = HydraVision"{0BD171A4-7DAC-A12B-14E3-E33DA0B6FE6A}" = CCC Help Finnish"{1D33BBA9-75E5-7B82-9776-277DEA2C4BA2}" = Catalyst Control Center Graphics Previews Vista"{1D4BA420-070F-3F9B-4969-126689978A98}" = CCC Help Greek"{2198B991-FCB1-F74E-26C9-5F7127B9DB0F}" = ccc-core-static"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java 6 Update 25"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1"{2A83AD05-56E6-3FBD-8752-B4143162EF59}" = Google Talk Plugin"{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = JMicron JMB36X Driver"{3ED6B766-BDF2-F30F-F18E-16BA10ABA22A}" = CCC Help French"{3F0BBF8C-9BAF-5F16-A2BF-B513D528F1B9}" = Catalyst Control Center Graphics Previews Common"{45057FCE-5784-48BE-8176-D9D00AF56C3C}" = The Sims™ 3 Late Night"{45C56AA7-ED1B-4800-A97F-EDDF3F3520B1}" = Apple Application Support"{4A82CB57-2398-44DB-8C20-E654BBD1A9A3}" = Reservationless-Plus VoIP"{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}" = Google Earth"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.3"{516D7330-6BA3-6E53-9C7A-F50666C758E0}" = CCC Help Swedish"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM"{65CB4C08-C47B-4A7E-A6A4-50C06ADA5FC6}" = Adobe AIR"{66391B4E-194D-C20E-F1E5-D7222F1A8104}" = CCC Help Turkish"{6D1496ED-3150-FCD5-CA3B-4C08B89D00D0}" = Catalyst Control Center Localization All"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime"{77CD6B28-D387-9905-EF5B-78BF8AF722C6}" = CCC Help Chinese Traditional"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update"{8674DA43-CE5D-48EB-94E8-E0DC5B59AF88}_is1" = Satellite Direct v9.25.1.1"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8136 8168 8169 Ethernet Driver"{8A54BB79-658E-84A4-FBB7-93FD1EB20174}" = CCC Help Danish"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010"{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010"{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010"{910F4A29-1134-49E0-AD8B-56E4A3152BD1}" = The Sims™ 3 Ambitions"{91140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010"{99AD9D6D-A456-49EE-8360-F22EE7AA1272}" = Express Gate"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161"{A0855EE1-F653-3A5A-C7AF-D6CC3BF7A506}" = Catalyst Control Center InstallProxy"{A0D2B948-BB85-589F-D283-2145A54BB11B}" = CCC Help English"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper"{A9C4FF3C-C5E5-07F7-AD5D-C26C2B41CFF3}" = CCC Help Dutch"{ABA5FB59-633D-23B0-5841-D11A7B97C624}" = CCC Help Hungarian"{AC76BA86-7AD7-1033-7B44-A95000000001}" = Adobe Reader 9.5.5"{AC76BA86-7AD7-2447-0000-900000000003}" = Chinese Simplified Fonts Support For Adobe Reader 9"{AC76BA86-7AD7-2448-0000-900000000003}" = Chinese Traditional Fonts Support For Adobe Reader 9"{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}" = QuickTime"{B0F9D227-9243-E2E6-21CE-7FB9528202C5}" = CCC Help Norwegian"{B1D6F9CC-55FC-CD82-1D5C-BF725BF9311E}" = CCC Help Portuguese"{B282CB34-95CC-06B2-DFBC-07617F722837}" = CCC Help Spanish"{BA26FFA5-6D47-47DB-BE56-34C357B5F8CC}" = The Sims™ 3 World Adventures"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3"{DDA34038-89BD-4804-B0B8-DC48D5DFB463}" = Catalyst Control Center - Branding"{DEA314C4-0929-4250-BC92-98E4C105F28D}" = NVIDIA PhysX"{E342FAD9-ACA4-BE69-D78C-F26CDF6DC9DC}" = CCC Help Italian"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime"{ED9E5BCC-371A-5BE1-6DC6-CF7D8DC9A2B7}" = CCC Help Czech"{EEA080A7-4331-4593-A071-D0862A8178B9}" = ASUS nVidia Driver"{EF829AE4-69BB-F791-F3DF-C6CBF8942881}" = CCC Help Korean"{EFF33410-5603-B27E-778A-7AB406C7A785}" = CCC Help Japanese"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver"{F241F4AB-9D50-52E4-6CA5-D1EA5A0713BC}" = CCC Help Russian"{F3F8BEC4-1D0E-9E50-0AF6-54A16094C92E}" = CCC Help German"{FA39D1A0-3B11-AF64-5EF0-1DBC97F47075}" = CCC Help Thai"{FD20D0EA-5F36-5870-26EC-5CA842E8C713}" = CCC Help Polish"ActiveTouchMeetingClient" = Cisco WebEx Meetings"Adobe AIR" = Adobe AIR"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin"Adobe Shockwave Player" = Adobe Shockwave Player 11.6"Diablo III" = Diablo III"EADM" = EA Download Manager"ESET Online Scanner" = ESET Online Scanner v3"Google Chrome" = Google Chrome"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300"Mozilla Firefox 14.0.1 (x86 en-US)" = Mozilla Firefox 14.0.1 (x86 en-US)"MozillaMaintenanceService" = Mozilla Maintenance Service"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver"Office14.PROPLUSR" = Microsoft Office Professional Plus 2010"RealPlayer 15.0" = RealPlayer"Steam App 8930" = Sid Meier's Civilization V"VLC media player" = VLC media player 1.1.4 ========== HKEY_USERS Uninstall List ========== [HKEY_USERS\S-1-5-21-2777047530-1545888719-2141319319-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] ========== Last 20 Event Log Errors ========== [ Application Events ]Error - 11/11/2013 3:32:10 AM | Computer Name = USER-PC | Source = Bonjour Service | ID = 100Description = Task Scheduling Error: m->NextScheduledEvent 10998 Error - 11/11/2013 3:32:10 AM | Computer Name = USER-PC | Source = Bonjour Service | ID = 100Description = Task Scheduling Error: m->NextScheduledSPRetry 10998 Error - 11/11/2013 3:32:11 AM | Computer Name = USER-PC | Source = Bonjour Service | ID = 100Description = Task Scheduling Error: Continuously busy for more than a second Error - 11/11/2013 3:32:11 AM | Computer Name = USER-PC | Source = Bonjour Service | ID = 100Description = Task Scheduling Error: m->NextScheduledEvent 12043 Error - 11/11/2013 3:32:11 AM | Computer Name = USER-PC | Source = Bonjour Service | ID = 100Description = Task Scheduling Error: m->NextScheduledSPRetry 12043 Error - 11/11/2013 3:32:12 AM | Computer Name = USER-PC | Source = Bonjour Service | ID = 100Description = Task Scheduling Error: Continuously busy for more than a second Error - 11/11/2013 3:32:12 AM | Computer Name = USER-PC | Source = Bonjour Service | ID = 100Description = Task Scheduling Error: m->NextScheduledEvent 13042 Error - 11/11/2013 3:32:12 AM | Computer Name = USER-PC | Source = Bonjour Service | ID = 100Description = Task Scheduling Error: m->NextScheduledSPRetry 13042 Error - 11/11/2013 11:39:15 AM | Computer Name = USER-PC | Source = Bonjour Service | ID = 100Description = Task Scheduling Error: Continuously busy for more than a second Error - 11/11/2013 11:39:15 AM | Computer Name = USER-PC | Source = Bonjour Service | ID = 100Description = Task Scheduling Error: m->NextScheduledEvent 29237380 Error - 11/11/2013 11:39:15 AM | Computer Name = USER-PC | Source = Bonjour Service | ID = 100Description = Task Scheduling Error: m->NextScheduledSPRetry 29237380 [ Media Center Events ]Error - 2/19/2013 8:42:06 PM | Computer Name = user-PC | Source = MCUpdate | ID = 0Description = 8:42:06 AM - Error connecting to the internet. 8:42:06 AM - Unable to contact server.. Error - 2/19/2013 8:42:33 PM | Computer Name = user-PC | Source = MCUpdate | ID = 0Description = 8:42:32 AM - Error connecting to the internet. 8:42:32 AM - Unable to contact server.. Error - 2/20/2013 8:46:59 AM | Computer Name = user-PC | Source = MCUpdate | ID = 0Description = 8:46:59 PM - Error connecting to the internet. 8:46:59 PM - Unable to contact server.. Error - 2/20/2013 8:47:24 AM | Computer Name = user-PC | Source = MCUpdate | ID = 0Description = 8:47:23 PM - Error connecting to the internet. 8:47:23 PM - Unable to contact server.. Error - 3/10/2013 8:56:56 AM | Computer Name = user-PC | Source = MCUpdate | ID = 0Description = 8:56:56 PM - Error connecting to the internet. 8:56:56 PM - Unable to contact server.. Error - 3/10/2013 8:57:03 AM | Computer Name = user-PC | Source = MCUpdate | ID = 0Description = 8:57:01 PM - Error connecting to the internet. 8:57:01 PM - Unable to contact server.. Error - 3/10/2013 9:57:07 AM | Computer Name = user-PC | Source = MCUpdate | ID = 0Description = 9:57:07 PM - Error connecting to the internet. 9:57:07 PM - Unable to contact server.. Error - 3/10/2013 11:18:29 AM | Computer Name = user-PC | Source = MCUpdate | ID = 0Description = 11:18:29 PM - Error connecting to the internet. 11:18:29 PM - Unable to contact server.. Error - 3/10/2013 12:18:34 PM | Computer Name = user-PC | Source = MCUpdate | ID = 0Description = 12:18:34 AM - Error connecting to the internet. 12:18:34 AM - Unable to contact server.. Error - 11/3/2013 7:57:04 PM | Computer Name = user-PC | Source = MCUpdate | ID = 0Description = 7:55:52 AM - Error connecting to the internet. 7:55:52 AM - Unable to contact server.. [ System Events ]Error - 12/5/2013 1:10:26 PM | Computer Name = user-PC | Source = Service Control Manager | ID = 7030Description = The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly. Error - 12/6/2013 12:55:20 PM | Computer Name = user-PC | Source = DCOM | ID = 10010Description = Error - 12/7/2013 1:14:49 PM | Computer Name = user-PC | Source = DCOM | ID = 10010Description = Error - 12/7/2013 8:09:38 PM | Computer Name = user-PC | Source = EventLog | ID = 6008Description = The previous system shutdown at 4:07:55 PM on ?12/?7/?2013 was unexpected. Error - 12/8/2013 2:24:17 PM | Computer Name = user-PC | Source = Service Control Manager | ID = 7030Description = The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly. Error - 12/8/2013 2:25:31 PM | Computer Name = user-PC | Source = Application Popup | ID = 1060Description = \??\C:\ComboFix\catchme.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver. Error - 12/8/2013 2:25:31 PM | Computer Name = user-PC | Source = Application Popup | ID = 1060Description = \??\C:\ComboFix\catchme.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver. Error - 12/8/2013 2:25:54 PM | Computer Name = user-PC | Source = Service Control Manager | ID = 7030Description = The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly. Error - 12/8/2013 2:29:36 PM | Computer Name = user-PC | Source = DCOM | ID = 10010Description = Error - 12/9/2013 11:16:42 AM | Computer Name = user-PC | Source = Server | ID = 2505Description = The server could not bind to the transport \Device\NetBT_Tcpip_{44D27A31-563B-4AC0-B42F-690EAD408024} because another computer on the network has the same name. The server could not start. < End of report >
  9. Here are the logs: OTL logfile created on: 12/16/2013 11:35:06 PM - Run 1OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\user\Desktop64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstationInternet Explorer (Version = 9.11.9600.16428)Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 11.99 Gb Total Physical Memory | 10.41 Gb Available Physical Memory | 86.82% Memory free23.98 Gb Paging File | 21.74 Gb Available in Paging File | 90.65% Paging File freePaging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)Drive C: | 927.64 Gb Total Space | 235.56 Gb Free Space | 25.39% Space Free | Partition Type: NTFSDrive D: | 935.28 Gb Total Space | 935.16 Gb Free Space | 99.99% Space Free | Partition Type: NTFSDrive F: | 3.68 Gb Total Space | 3.50 Gb Free Space | 95.04% Space Free | Partition Type: FAT32 Computer Name: USER-PC | User Name: user | Logged in as Administrator.Boot Mode: Normal | Scan Mode: All users | Include 64bit ScansCompany Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exePRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exePRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exePRC - [2012/10/22 06:04:08 | 000,296,096 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exePRC - [2012/10/05 12:57:14 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\user\Desktop\OTL.exePRC - [2010/06/13 23:05:14 | 000,248,936 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe ========== Modules (No Company Name) ========== ========== Services (SafeList) ========== SRV:64bit: - [2013/11/26 01:18:09 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)SRV:64bit: - [2013/05/26 21:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)SRV:64bit: - [2010/09/28 17:51:08 | 000,203,264 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)SRV - [2013/12/10 14:00:09 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)SRV - [2013/02/28 02:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)SRV - [2012/10/04 15:41:53 | 000,529,744 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)SRV - [2012/07/29 15:43:42 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)SRV - [2010/06/13 23:05:14 | 000,248,936 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)SRV - [2010/03/17 21:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)SRV - [2009/06/10 13:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) ========== Driver Services (SafeList) ========== DRV:64bit: - [2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)DRV:64bit: - [2013/02/21 17:53:00 | 000,042,184 | ---- | M] (Anchorfree Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\taphss6.sys -- (taphss6)DRV:64bit: - [2012/02/29 22:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)DRV:64bit: - [2011/03/10 22:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)DRV:64bit: - [2011/03/10 22:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)DRV:64bit: - [2010/11/24 14:59:16 | 000,694,888 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RTL8192su.sys -- (RTL8192su)DRV:64bit: - [2010/11/20 05:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)DRV:64bit: - [2010/11/20 03:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)DRV:64bit: - [2010/09/28 18:26:12 | 007,883,264 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)DRV:64bit: - [2010/09/28 17:14:48 | 000,285,696 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)DRV:64bit: - [2010/08/16 02:42:00 | 000,116,240 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)DRV:64bit: - [2010/06/21 14:07:36 | 000,131,688 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)DRV:64bit: - [2009/07/15 19:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)DRV:64bit: - [2009/07/13 17:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)DRV:64bit: - [2009/07/13 17:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)DRV:64bit: - [2009/07/13 17:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)DRV:64bit: - [2009/06/29 19:58:30 | 000,104,408 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\jraid.sys -- (JRAID)DRV:64bit: - [2009/06/10 12:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)DRV:64bit: - [2009/06/10 12:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)DRV:64bit: - [2009/06/10 12:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)DRV:64bit: - [2009/06/10 12:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)DRV:64bit: - [2009/05/22 06:52:30 | 000,215,040 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)DRV:64bit: - [2007/05/14 15:06:18 | 000,027,520 | ---- | M] (Research In Motion Limited) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RimUsb_AMD64.sys -- (RimUsb)DRV - [2009/07/13 17:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRCIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htmIE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2777047530-1545888719-2141319319-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/IE - HKU\S-1-5-21-2777047530-1545888719-2141319319-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-USIE - HKU\S-1-5-21-2777047530-1545888719-2141319319-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 86 6D 96 E1 F0 D8 CE 01 [binary data]IE - HKU\S-1-5-21-2777047530-1545888719-2141319319-1000\..\SearchScopes,DefaultScope = {1F60E01E-0517-4DDA-9C86-64E1C127C4E2}IE - HKU\S-1-5-21-2777047530-1545888719-2141319319-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SRIE - HKU\S-1-5-21-2777047530-1545888719-2141319319-1000\..\SearchScopes\{1F60E01E-0517-4DDA-9C86-64E1C127C4E2}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=903578&p={searchTerms}IE - HKU\S-1-5-21-2777047530-1545888719-2141319319-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "Yahoo"FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&ilc=12&type=903578"FF - prefs.js..browser.search.selectedEngine: "Yahoo"FF - prefs.js..browser.startup.homepage: "http://search.yahoo.com/?type=903578&fr=spigot-yhp-ff"FF - prefs.js..extensions.enabledAddons: npp2pls@astri.org:1.0.0.6FF - prefs.js..extensions.enabledAddons: {687578b9-7132-4a7a-80e4-30ee31099e03}:10.20.101.5FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=903578&p="FF - user.js - File not found FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll File not foundFF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not foundFF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not foundFF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\user\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\user\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\user\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\user\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\user\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012/10/22 06:04:33 | 000,000,000 | ---D | M]FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013/01/30 04:39:14 | 000,000,000 | ---D | M]FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\pluginsFF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013/01/30 04:39:14 | 000,000,000 | ---D | M]FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/07/08 17:32:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\user\AppData\Roaming\Mozilla\Extensions[2013/11/27 12:59:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions[2013/11/24 14:37:04 | 000,000,000 | ---D | M] (uTorrentControl2) -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}[2012/07/29 15:43:49 | 000,000,000 | ---D | M] ("npp2pls") -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\npp2pls@astri.org[2013/05/30 12:59:09 | 000,005,341 | ---- | M] () (No name found) -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\extensions\vmoncfsezb@vmoncfsezb.org.xpi[2013/11/04 22:17:17 | 000,000,915 | ---- | M] () -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jgsf5sw1.default\searchplugins\yahoo.xml[2013/11/27 14:01:56 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions[2012/07/29 15:43:43 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll[2012/04/24 23:02:34 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml[2012/04/24 23:02:34 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml ========== Chrome ========== CHR - default_search_provider: Google (Enabled)CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},CHR - Extension: Google Docs = C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\CHR - Extension: Google Drive = C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\CHR - Extension: YouTube = C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\CHR - Extension: Google Search = C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\CHR - Extension: Google Wallet = C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\CHR - Extension: uTorrentControl2 = C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\CHR - Extension: uTorrentControl2 = C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.22.5.510_0\nativeMessaging\nmHostCHR - Extension: Gmail = C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\ O1 HOSTS File: ([2013/12/08 10:25:52 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hostsO1 - Hosts: 127.0.0.1 localhostO2:64bit: - BHO: (Hotspot Shield Class) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE_64.dll File not foundO2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)O3 - HKU\S-1-5-21-2777047530-1545888719-2141319319-1000\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)O4:64bit: - HKLM..\Run: [skytel] C:\Program Files\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.)O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)O4 - HKLM..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe ()O4 - HKLM..\Run: [startCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)O4 - HKU\S-1-5-21-2777047530-1545888719-2141319319-1000..\Run: [steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions presentO6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKU\S-1-5-21-2777047530-1545888719-2141319319-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKU\S-1-5-21-2777047530-1545888719-2141319319-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)O13 - gopher Prefix: missingO15 - HKU\S-1-5-21-2777047530-1545888719-2141319319-1000\..Trusted Domains: pps.tv ([]http in Trusted sites)O15 - HKU\S-1-5-21-2777047530-1545888719-2141319319-1000\..Trusted Domains: ppstream.com ([]http in Trusted sites)O15 - HKU\S-1-5-21-2777047530-1545888719-2141319319-1000\..Trusted Domains: webscache.com ([]http in Trusted sites)O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)O16 - DPF: {B1647320-9EC8-4B0F-BF53-93D4A43FA614} https://mydesk-ga01.morganstanley.com/prx/000/http/rc.ms.com:8180/md/1.2/common/htdocs/SPX/2.0.3.17/TerminalSvcsTCS.cab (TerminalSvcsTCSX Control)O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://akamaicdn.webex.com/client/WBXclient-T28L10NSP10EP1-16277/webex/ieatgpc1.cab (GpcContainer Class)O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 75.75.75.75 75.75.76.76O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{44D27A31-563B-4AC0-B42F-690EAD408024}: DhcpNameServer = 75.75.75.75 75.75.76.76O18:64bit: - Protocol\Handler\ms-help - No CLSID value foundO18:64bit: - Protocol\Handler\skype4com - No CLSID value foundO18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.O32 - HKLM CDRom: AutoRun - 1O34 - HKLM BootExecute: (autocheck autochk *)O35:64bit: - HKLM\..comfile [open] -- "%1" %*O35:64bit: - HKLM\..exefile [open] -- "%1" %*O35 - HKLM\..comfile [open] -- "%1" %*O35 - HKLM\..exefile [open] -- "%1" %*O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*O37 - HKLM\...com [@ = ComFile] -- "%1" %*O37 - HKLM\...exe [@ = exefile] -- "%1" %*O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2013/12/16 23:34:06 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\user\Desktop\OTL.exe[2013/12/16 01:07:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes' Anti-Malware (portable)[2013/12/16 01:07:50 | 000,117,464 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys[2013/12/16 01:07:13 | 000,089,304 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys[2013/12/16 01:07:12 | 000,000,000 | ---D | C] -- C:\Users\user\Desktop\mbar[2013/12/16 01:06:53 | 012,582,688 | ---- | C] (Malwarebytes Corp.) -- C:\Users\user\Desktop\mbar-1-7.07.0.1008.exe[2013/12/13 03:00:53 | 000,000,000 | -HSD | C] -- C:\Config.Msi[2013/12/12 00:26:56 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL[2013/12/12 00:26:56 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL[2013/12/12 00:26:56 | 011,410,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll[2013/12/12 00:26:55 | 014,631,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll[2013/12/12 00:25:17 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll[2013/12/12 00:25:16 | 000,574,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll[2013/12/12 00:25:16 | 000,440,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll[2013/12/12 00:25:16 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe[2013/12/12 00:25:16 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe[2013/12/12 00:25:16 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe[2013/12/12 00:25:16 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll[2013/12/12 00:25:16 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll[2013/12/12 00:25:16 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll[2013/12/12 00:25:15 | 000,817,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll[2013/12/12 00:25:15 | 000,708,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll[2013/12/12 00:25:15 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll[2013/12/12 00:25:15 | 000,553,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll[2013/12/12 00:25:14 | 001,995,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl[2013/12/12 00:25:14 | 001,928,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl[2013/12/12 00:25:12 | 005,769,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll[2013/12/11 18:31:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth[2013/12/11 17:05:34 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Local\CrashDumps[2013/12/11 08:02:59 | 000,335,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msieftp.dll[2013/12/11 08:02:59 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msieftp.dll[2013/12/11 08:02:58 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll[2013/12/11 08:02:58 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll[2013/12/11 08:02:57 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll[2013/12/11 08:02:50 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\portcls.sys[2013/12/11 08:02:50 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\drmk.sys[2013/12/11 08:02:48 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrrun.dll[2013/12/11 08:02:48 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrrun.dll[2013/12/11 08:02:48 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscript.exe[2013/12/11 08:02:48 | 000,150,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshom.ocx[2013/12/11 08:02:48 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cscript.exe[2013/12/11 08:02:48 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshom.ocx[2013/12/10 16:22:02 | 000,000,000 | ---D | C] -- C:\Users\user\Desktop\RK_Quarantine[2013/12/10 13:00:11 | 000,692,616 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe[2013/12/08 10:30:23 | 000,708,597 | ---- | C] (Farbar) -- C:\Users\user\Desktop\FSS.exe[2013/12/08 10:27:11 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN[2013/12/08 10:27:07 | 000,000,000 | ---D | C] -- C:\Windows\temp[2013/12/06 09:23:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET[2013/12/06 09:23:23 | 002,347,384 | ---- | C] (ESET) -- C:\Users\user\Desktop\esetsmartinstaller_enu.exe[2013/12/03 07:51:42 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe[2013/12/03 07:51:42 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe[2013/12/03 07:51:42 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe[2013/12/03 07:49:13 | 000,000,000 | ---D | C] -- C:\Qoobox[2013/12/03 07:48:58 | 000,000,000 | ---D | C] -- C:\Windows\erdnt[2013/12/03 07:48:35 | 005,152,313 | R--- | C] (Swearware) -- C:\Users\user\Desktop\ComboFix.exe[2013/12/03 03:09:05 | 000,028,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEUDINIT.EXE[2013/12/03 03:04:27 | 000,940,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe[2013/12/03 03:04:27 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll[2013/12/03 03:04:22 | 000,645,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jsIntl.dll[2013/12/03 03:04:22 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll[2013/12/03 03:04:22 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe[2013/12/03 03:04:20 | 001,051,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll[2013/12/03 03:04:20 | 000,616,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat[2013/12/03 03:04:20 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec[2013/12/03 03:04:20 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll[2013/12/03 03:04:20 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll[2013/12/03 03:04:20 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe[2013/12/03 03:04:20 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe[2013/12/03 03:04:20 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll[2013/12/03 03:04:20 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll[2013/12/03 03:04:20 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll[2013/12/03 03:04:20 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx[2013/12/03 03:04:20 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll[2013/12/03 03:04:20 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll[2013/12/03 03:04:20 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll[2013/12/03 03:04:20 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll[2013/12/03 03:04:19 | 000,610,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll[2013/12/03 03:04:19 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll[2013/12/03 03:04:19 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll[2013/12/03 03:04:19 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe[2013/12/03 03:04:19 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll[2013/12/03 03:04:19 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll[2013/12/03 03:04:19 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll[2013/12/03 03:04:19 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll[2013/12/03 03:04:19 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe[2013/12/03 03:04:18 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll[2013/12/03 03:04:18 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe[2013/12/03 03:04:18 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll[2013/12/03 03:04:16 | 000,942,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jsIntl.dll[2013/12/03 03:04:15 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe[2013/12/03 03:04:14 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll[2013/12/03 03:04:14 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll[2013/12/03 03:04:14 | 000,131,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll[2013/12/03 03:04:14 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll[2013/12/03 03:04:14 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe[2013/12/03 03:04:14 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx[2013/12/03 03:04:14 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll[2013/12/03 03:04:14 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll[2013/12/03 03:04:14 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe[2013/12/03 03:04:13 | 000,453,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll[2013/12/03 03:04:13 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec[2013/12/03 03:04:13 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll[2013/12/03 03:04:12 | 001,228,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll[2013/12/03 03:04:12 | 000,616,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat[2013/12/03 03:04:12 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll[2013/12/03 03:04:12 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll[2013/12/03 03:04:11 | 000,626,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll[2013/12/03 03:04:11 | 000,548,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll[2013/12/03 03:04:11 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe[2013/12/03 03:04:11 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe[2013/12/03 03:04:11 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll[2013/12/03 03:04:11 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll[2013/12/03 03:04:11 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll[2013/12/03 03:04:10 | 000,774,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll[2013/12/03 03:04:10 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll[2013/12/03 03:04:10 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll[2013/12/03 03:04:10 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll[2013/12/03 03:04:10 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe[2013/12/03 03:04:09 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll[2013/12/03 03:04:09 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll[2013/12/02 08:26:40 | 000,000,000 | ---D | C] -- C:\Users\user\Desktop\tdsskiller[2013/12/01 14:31:07 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Roaming\Malwarebytes[2013/12/01 14:30:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware[2013/12/01 14:30:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes[2013/12/01 14:30:57 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys[2013/12/01 14:30:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware[2013/12/01 14:30:46 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Local\Programs[2013/11/28 11:07:15 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys[2013/11/28 11:07:15 | 000,007,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys[2013/11/28 09:56:21 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Roaming\SUPERAntiSpyware.com[2013/11/27 16:34:19 | 000,000,000 | ---D | C] -- C:\4c2b1ca437fcbd7b19a4dea245[2013/11/27 12:59:12 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Local\LzduPack[2013/11/26 23:13:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome[2013/11/18 22:04:41 | 000,000,000 | --SD | C] -- C:\Users\user\Documents\My Data Sources[2 C:\Users\user\Desktop\*.tmp files -> C:\Users\user\Desktop\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2013/12/16 23:29:00 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job[2013/12/16 23:14:00 | 000,000,904 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2777047530-1545888719-2141319319-1000UA.job[2013/12/16 23:00:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job[2013/12/16 22:29:00 | 000,000,890 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job[2013/12/16 21:23:40 | 000,435,195 | ---- | M] () -- C:\Users\user\Desktop\Real Estate Development Final Exam.pdf[2013/12/16 08:43:57 | 000,000,852 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2777047530-1545888719-2141319319-1000Core.job[2013/12/16 08:43:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat[2013/12/16 01:07:50 | 000,117,464 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys[2013/12/16 01:07:13 | 000,089,304 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys[2013/12/16 01:06:37 | 000,726,444 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI[2013/12/16 01:06:37 | 000,624,162 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat[2013/12/16 01:06:37 | 000,106,538 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat[2013/12/15 23:50:12 | 000,075,225 | ---- | M] () -- C:\Users\user\Desktop\Cover Letter_PIMCO.pdf[2013/12/15 21:04:19 | 000,015,024 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0[2013/12/15 21:04:19 | 000,015,024 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0[2013/12/14 21:26:27 | 004,639,762 | ---- | M] () -- C:\Users\user\Desktop\msFEH.pdf[2013/12/13 23:15:48 | 000,809,378 | ---- | M] () -- C:\Users\user\Desktop\up-sizing-guide-2013_en.pdf[2013/12/13 03:17:26 | 1066,754,046 | -HS- | M] () -- C:\hiberfil.sys[2013/12/12 09:46:00 | 000,416,688 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT[2013/12/11 18:31:16 | 000,002,172 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk[2013/12/11 16:53:56 | 000,000,000 | ---- | M] () -- C:\Users\user\Desktop\mbam-setup-1.75.0.1300.exe.zx1y6ul.partial[2013/12/10 14:00:09 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe[2013/12/10 14:00:09 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl[2013/12/08 10:25:52 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts[2013/12/07 19:53:27 | 000,504,853 | ---- | M] () -- C:\Users\user\Desktop\KORS GS Initiation.pdf[2013/12/07 17:09:10 | 012,582,688 | ---- | M] (Malwarebytes Corp.) -- C:\Users\user\Desktop\mbar-1-7.07.0.1008.exe[2013/12/05 12:25:20 | 000,002,143 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk[2013/12/05 09:04:23 | 005,152,313 | R--- | M] (Swearware) -- C:\Users\user\Desktop\ComboFix.exe[2013/12/05 07:01:14 | 000,708,597 | ---- | M] (Farbar) -- C:\Users\user\Desktop\FSS.exe[2013/12/04 11:00:10 | 004,166,144 | ---- | M] () -- C:\Users\user\Desktop\RogueKillerX64.exe[2013/12/03 07:51:39 | 000,001,945 | ---- | M] () -- C:\Windows\epplauncher.mif[2013/12/03 03:04:27 | 000,940,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe[2013/12/03 03:04:27 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll[2013/12/03 03:04:22 | 000,645,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jsIntl.dll[2013/12/03 03:04:22 | 000,235,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll[2013/12/03 03:04:22 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe[2013/12/03 03:04:20 | 001,051,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll[2013/12/03 03:04:20 | 000,616,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat[2013/12/03 03:04:20 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec[2013/12/03 03:04:20 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll[2013/12/03 03:04:20 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll[2013/12/03 03:04:20 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe[2013/12/03 03:04:20 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe[2013/12/03 03:04:20 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll[2013/12/03 03:04:20 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll[2013/12/03 03:04:20 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll[2013/12/03 03:04:20 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx[2013/12/03 03:04:20 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll[2013/12/03 03:04:20 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll[2013/12/03 03:04:20 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll[2013/12/03 03:04:20 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll[2013/12/03 03:04:20 | 000,016,284 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf[2013/12/03 03:04:19 | 000,610,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll[2013/12/03 03:04:19 | 000,127,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll[2013/12/03 03:04:19 | 000,116,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll[2013/12/03 03:04:19 | 000,112,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe[2013/12/03 03:04:19 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll[2013/12/03 03:04:19 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll[2013/12/03 03:04:19 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll[2013/12/03 03:04:19 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll[2013/12/03 03:04:19 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe[2013/12/03 03:04:18 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll[2013/12/03 03:04:18 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe[2013/12/03 03:04:18 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll[2013/12/03 03:04:16 | 000,942,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jsIntl.dll[2013/12/03 03:04:15 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe[2013/12/03 03:04:14 | 000,247,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll[2013/12/03 03:04:14 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll[2013/12/03 03:04:14 | 000,131,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll[2013/12/03 03:04:14 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll[2013/12/03 03:04:14 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe[2013/12/03 03:04:14 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx[2013/12/03 03:04:14 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll[2013/12/03 03:04:14 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll[2013/12/03 03:04:14 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe[2013/12/03 03:04:13 | 000,453,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll[2013/12/03 03:04:13 | 000,413,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec[2013/12/03 03:04:13 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll[2013/12/03 03:04:12 | 001,228,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll[2013/12/03 03:04:12 | 000,616,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat[2013/12/03 03:04:12 | 000,235,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll[2013/12/03 03:04:12 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll[2013/12/03 03:04:12 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll[2013/12/03 03:04:12 | 000,016,284 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf[2013/12/03 03:04:11 | 000,626,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll[2013/12/03 03:04:11 | 000,548,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll[2013/12/03 03:04:11 | 000,167,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe[2013/12/03 03:04:11 | 000,143,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe[2013/12/03 03:04:11 | 000,101,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll[2013/12/03 03:04:11 | 000,084,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll[2013/12/03 03:04:10 | 000,774,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll[2013/12/03 03:04:10 | 000,147,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll[2013/12/03 03:04:10 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll[2013/12/03 03:04:10 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll[2013/12/03 03:04:10 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll[2013/12/03 03:04:10 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe[2013/12/03 03:04:09 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll[2013/12/02 08:25:41 | 004,101,441 | ---- | M] () -- C:\Users\user\Desktop\tdsskiller.zip[2013/12/01 14:30:59 | 000,001,073 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk[2013/11/29 10:23:17 | 000,209,460 | ---- | M] () -- C:\Users\user\Desktop\download (3).pdf[2013/11/29 10:22:41 | 000,193,933 | ---- | M] () -- C:\Users\user\Desktop\download (2).pdf[2013/11/29 10:22:12 | 000,216,328 | ---- | M] () -- C:\Users\user\Desktop\download (1).pdf[2013/11/29 10:22:07 | 000,258,667 | ---- | M] () -- C:\Users\user\Desktop\download.pdf[2013/11/28 09:16:45 | 000,000,342 | ---- | M] () -- C:\dvmexp.idx[2013/11/27 08:01:31 | 000,002,243 | ---- | M] () -- C:\Users\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk[2013/11/26 02:18:23 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll[2013/11/26 01:48:07 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll[2013/11/26 01:46:25 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll[2013/11/26 01:27:54 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll[2013/11/26 01:21:24 | 000,574,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll[2013/11/26 01:18:39 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe[2013/11/26 01:18:09 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe[2013/11/26 01:16:57 | 000,708,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll[2013/11/26 00:57:44 | 000,218,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe[2013/11/26 00:35:02 | 005,769,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll[2013/11/26 00:32:08 | 000,440,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll[2013/11/26 00:28:16 | 000,553,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll[2013/11/26 00:02:16 | 001,995,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl[2013/11/25 23:32:06 | 001,928,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl[2013/11/25 22:34:55 | 000,703,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll[2013/11/25 22:34:27 | 000,817,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll[2013/11/25 21:29:25 | 001,385,414 | ---- | M] () -- C:\Users\user\Desktop\Spirits.pdf[2013/11/25 21:16:51 | 001,394,181 | ---- | M] () -- C:\Users\user\Desktop\Constellation_Grupo_Modelo-Why_Craft_Beer_is_Next.pdf[2013/11/25 21:16:45 | 001,093,478 | ---- | M] () -- C:\Users\user\Desktop\Wine.pdf[2013/11/23 10:26:20 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll[2013/11/23 09:47:34 | 000,465,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll[2 C:\Users\user\Desktop\*.tmp files -> C:\Users\user\Desktop\*.tmp -> ] ========== Files Created - No Company Name ========== [2013/12/16 21:23:40 | 000,435,195 | ---- | C] () -- C:\Users\user\Desktop\Real Estate Development Final Exam.pdf[2013/12/16 09:15:40 | 000,796,854 | ---- | C] () -- C:\Users\user\Desktop\Far East Horizon Ltd_Initiating Coverage_UBS_24 May 2011.pdf[2013/12/15 23:50:11 | 000,075,225 | ---- | C] () -- C:\Users\user\Desktop\Cover Letter_PIMCO.pdf[2013/12/14 21:26:27 | 004,639,762 | ---- | C] () -- C:\Users\user\Desktop\msFEH.pdf[2013/12/13 23:15:48 | 000,809,378 | ---- | C] () -- C:\Users\user\Desktop\up-sizing-guide-2013_en.pdf[2013/12/11 18:31:16 | 000,002,172 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk[2013/12/11 16:53:56 | 000,000,000 | ---- | C] () -- C:\Users\user\Desktop\mbam-setup-1.75.0.1300.exe.zx1y6ul.partial[2013/12/10 16:20:32 | 004,166,144 | ---- | C] () -- C:\Users\user\Desktop\RogueKillerX64.exe[2013/12/07 19:53:26 | 000,504,853 | ---- | C] () -- C:\Users\user\Desktop\KORS GS Initiation.pdf[2013/12/03 07:51:42 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe[2013/12/03 07:51:42 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe[2013/12/03 07:51:42 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe[2013/12/03 07:51:42 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe[2013/12/03 07:51:42 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe[2013/12/03 03:04:20 | 000,016,284 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf[2013/12/03 03:04:12 | 000,016,284 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf[2013/12/02 08:25:10 | 004,101,441 | ---- | C] () -- C:\Users\user\Desktop\tdsskiller.zip[2013/12/01 14:30:59 | 000,001,073 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk[2013/11/29 10:23:17 | 000,209,460 | ---- | C] () -- C:\Users\user\Desktop\download (3).pdf[2013/11/29 10:22:41 | 000,193,933 | ---- | C] () -- C:\Users\user\Desktop\download (2).pdf[2013/11/29 10:22:12 | 000,216,328 | ---- | C] () -- C:\Users\user\Desktop\download (1).pdf[2013/11/29 10:21:59 | 000,258,667 | ---- | C] () -- C:\Users\user\Desktop\download.pdf[2013/11/27 16:07:48 | 000,001,945 | ---- | C] () -- C:\Windows\epplauncher.mif[2013/11/26 23:13:24 | 000,002,243 | ---- | C] () -- C:\Users\user\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk[2013/11/26 23:13:24 | 000,002,143 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk[2013/11/25 21:29:24 | 001,385,414 | ---- | C] () -- C:\Users\user\Desktop\Spirits.pdf[2013/11/25 21:16:51 | 001,394,181 | ---- | C] () -- C:\Users\user\Desktop\Constellation_Grupo_Modelo-Why_Craft_Beer_is_Next.pdf[2013/11/25 21:16:38 | 001,093,478 | ---- | C] () -- C:\Users\user\Desktop\Wine.pdf[2011/02/18 00:06:02 | 000,000,600 | ---- | C] () -- C:\Users\user\PUTTY.RND ========== ZeroAccess Check ========== [2009/07/13 20:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64"" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 18:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)"ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]"" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 17:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)"ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 17:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)"ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 04:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)"ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 17:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)"ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] < End of report >
  10. Sorry for the late reply. I scanned with mbar and it says no malware found. thanks
  11. Should I fix the errors found by Roguekiller first with Roguekiller? I only scanned and did not fix anything. Thanks!!
  12. I used google chrome and internet explorer, both could not download
  13. I also quit RogueKiller without fixing any of the files identified...
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.