blackmagik3

No such luck, but I won't make that your problem. I appreciate everything you've done so far.

# DelFix v1.013 - Logfile created 12/09/2017 at 16:57:58 # Updated 17/04/2016 by Xplode # Username : admin - DESKTOP-7Q467GF # Operating System : Windows 10 Pro (64 bits) ~ Activating UAC ... OK ~ Removing disinfection tools ... Deleted : C:\FRST Deleted : C:\AdwCleaner Deleted : C:\Users\admin\Downloads\mbar Deleted : C:\Users\admin\Desktop\FRST-OlderVersion Deleted : C:\Users\admin\Desktop\AdwCleaner.exe Deleted : C:\Users\admin\Desktop\Fixlog.txt Deleted : C:\Users\admin\Desktop\FRST64.exe Deleted : C:\Users\admin\Desktop\RogueKiller64.exe Deleted : C:\Users\admin\Downloads\Addition.txt Deleted : C:\Users\admin\Downloads\adwcleaner_7.0.2.1.exe Deleted : C:\Users\admin\Downloads\FRST.txt Deleted : C:\Users\admin\Downloads\rkill.com Deleted : C:\Users\admin\Downloads\rkill.exe ~ Creating registry backup ... OK ~ Cleaning system restore ... Deleted : RP #3 [Windows Update | 09/12/2017 04:34:25] Deleted : RP #4 [broken | 09/12/2017 16:43:04] New restore point created ! ~ Resetting system settings ... OK ########## - EOF - ##########

I think I tried that one earlier, but perhaps it'll work now that all of the demons have been purged. Thanks for your help today Yoan.

What I'm seeing.

The only thing I notice is that I can't connect to Edge or the Microsoft Store. Besides that, everything else seems fine.

Fix result of Farbar Recovery Scan Tool (x64) Version: 12-09-2017 Ran by admin (12-09-2017 16:40:42) Run:7 Running from C:\Users\admin\Desktop Loaded Profiles: admin (Available Profiles: admin) Boot Mode: Normal ============================================== fixlist content: ***************** CloseProcesses: CreateRestorePoint: HKLM-x32\...\Run: [] => [X] HKU\S-1-5-21-789244946-2469842990-2269019741-1001\...\Run: [AdobeBridge] => [X] CustomCLSID: HKU\S-1-5-21-789244946-2469842990-2269019741-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-FD8E73FEA996}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => No File Task: {EF984292-8C5F-44EB-993C-B7C8112ECCF7} - System32\Tasks\kQROyonIElr4 => kqroyonielr4.exe AlternateDataStreams: C:\ProgramData\Reprise:jhqduwvxlctbqqijsf`usjbm`bfjhinhqhifh [0] Folder: C:\FRST\Quarantine EmptyTemp: ***************** Processes closed successfully. Restore point was successfully created. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully HKU\S-1-5-21-789244946-2469842990-2269019741-1001\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value removed successfully HKU\S-1-5-21-789244946-2469842990-2269019741-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-FD8E73FEA996} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EF984292-8C5F-44EB-993C-B7C8112ECCF7} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EF984292-8C5F-44EB-993C-B7C8112ECCF7} => key removed successfully C:\Windows\System32\Tasks\kQROyonIElr4 => moved successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\kQROyonIElr4 => key removed successfully C:\ProgramData\Reprise => ":jhqduwvxlctbqqijsf`usjbm`bfjhinhqhifh" ADS removed successfully. ========================= Folder: C:\FRST\Quarantine ======================== 2017-09-12 13:13 - 2017-09-12 13:13 - 000000000 ____D () C:\FRST\Quarantine\C 2017-09-12 13:13 - 2017-09-12 13:13 - 000000000 ____D () C:\FRST\Quarantine\C\ProgramData 2017-09-07 04:15 - 2017-09-07 04:15 - 000000000 ____D () C:\FRST\Quarantine\C\ProgramData\goodasnew 2017-09-12 13:13 - 2017-09-12 13:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users 2017-09-12 13:13 - 2017-09-12 13:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin 2017-09-12 13:13 - 2017-09-12 13:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData 2017-09-12 13:13 - 2017-09-12 13:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local 2017-09-09 22:05 - 2017-09-12 09:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio 2016-05-31 11:48 - 2016-05-31 11:48 - 002474239 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\cef.pak 2016-05-31 11:48 - 2016-05-31 11:48 - 000299362 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\cef_100_percent.pak 2016-05-31 11:48 - 2016-05-31 11:48 - 000395372 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\cef_200_percent.pak 2016-05-31 11:47 - 2016-05-31 11:47 - 004096442 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\cef_extensions.pak 2016-05-31 11:38 - 2016-05-31 11:38 - 003466856 _____ (Microsoft Corporation) C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\d3dcompiler_47.dll 2016-05-31 09:54 - 2016-05-31 09:54 - 001213200 _____ (Microsoft Corporation) C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\dbghelp.dll 2017-09-09 22:05 - 2017-09-12 09:44 - 000028691 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\debug.log 2016-05-31 10:00 - 2016-05-31 10:00 - 010206624 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\icudtl.dat 2017-08-02 21:40 - 2017-08-02 21:40 - 053460480 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\libcef.dll 2016-05-31 11:44 - 2016-05-31 11:44 - 000075264 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\libEGL.dll 2016-05-31 11:43 - 2016-05-31 11:43 - 001976832 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\libGLESv2.dll 2017-08-20 12:38 - 2017-08-20 12:38 - 001087488 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\lsaupbd.exe 2016-05-31 11:40 - 2016-05-31 11:40 - 000439857 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\natives_blob.bin 2016-06-15 17:15 - 2016-06-15 17:15 - 017599640 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\pepflashplayer.dll 2016-05-31 11:50 - 2016-05-31 11:50 - 000514840 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\snapshot_blob.bin 2017-09-08 14:56 - 2017-09-08 14:56 - 000915968 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\utcexio.exe 2016-12-28 15:07 - 2016-12-28 15:07 - 000188416 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\widevinecdm.dll 2016-12-28 15:07 - 2016-12-28 15:07 - 000202240 _____ (The Chromium Authors) C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\widevinecdmadapter.dll 2017-09-09 22:05 - 2017-09-09 22:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\locales 2016-06-22 23:43 - 2016-06-22 23:43 - 000026643 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\locales\en-US.pak 2016-06-22 23:43 - 2016-06-22 23:43 - 000025899 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\utcexio\locales\zh-CN.pak 2017-09-09 22:05 - 2017-09-12 06:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch 2017-09-09 22:05 - 2017-09-09 22:05 - 000000262 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\userdata2 2017-09-10 17:30 - 2017-09-12 09:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601 2017-09-10 17:30 - 2017-09-12 09:02 - 000305152 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Cookies 2017-09-10 17:30 - 2017-09-12 09:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Cookies-journal 2017-09-10 17:31 - 2017-09-10 17:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\databases 2017-09-10 17:31 - 2017-09-10 17:31 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\databases\Databases.db 2017-09-10 17:31 - 2017-09-10 17:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\databases\Databases.db-journal 2017-09-10 17:33 - 2017-09-12 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\File System 2017-09-12 08:57 - 2017-09-12 08:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\File System\003 2017-09-12 08:57 - 2017-09-12 08:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\File System\003\t 2017-09-12 09:00 - 2017-09-12 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\File System\005 2017-09-12 09:00 - 2017-09-12 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\File System\005\t 2017-09-10 17:33 - 2017-09-12 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\File System\Origins 2017-09-10 17:33 - 2017-09-12 09:02 - 000000453 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\File System\Origins\000003.log 2017-09-10 17:33 - 2017-09-10 17:33 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\File System\Origins\CURRENT 2017-09-10 17:33 - 2017-09-10 17:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\File System\Origins\LOCK 2017-09-10 17:33 - 2017-09-12 09:00 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\File System\Origins\LOG 2017-09-10 17:33 - 2017-09-12 08:58 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\File System\Origins\LOG.old 2017-09-10 17:33 - 2017-09-10 17:33 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\File System\Origins\MANIFEST-000001 2017-09-10 17:33 - 2017-09-10 17:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\File System\Origins\lost 2017-09-10 17:31 - 2017-09-12 06:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB 2017-09-12 06:04 - 2017-09-12 06:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_blogs.nfl.com_0.indexeddb.leveldb 2017-09-12 06:04 - 2017-09-12 06:04 - 000000176 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_blogs.nfl.com_0.indexeddb.leveldb\000003.log 2017-09-12 06:04 - 2017-09-12 06:04 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_blogs.nfl.com_0.indexeddb.leveldb\CURRENT 2017-09-12 06:04 - 2017-09-12 06:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_blogs.nfl.com_0.indexeddb.leveldb\LOCK 2017-09-12 06:04 - 2017-09-12 06:04 - 000000156 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_blogs.nfl.com_0.indexeddb.leveldb\LOG 2017-09-12 06:04 - 2017-09-12 06:04 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_blogs.nfl.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 06:02 - 2017-09-12 06:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_cdnx.tribalfusion.com_0.indexeddb.blob 2017-09-12 06:02 - 2017-09-12 06:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_cdnx.tribalfusion.com_0.indexeddb.blob\1 2017-09-12 06:02 - 2017-09-12 06:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_cdnx.tribalfusion.com_0.indexeddb.blob\1\00 2017-09-12 06:02 - 2017-09-12 06:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_cdnx.tribalfusion.com_0.indexeddb.leveldb 2017-09-12 06:02 - 2017-09-12 06:02 - 000000505 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_cdnx.tribalfusion.com_0.indexeddb.leveldb\000003.log 2017-09-12 06:02 - 2017-09-12 06:02 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_cdnx.tribalfusion.com_0.indexeddb.leveldb\CURRENT 2017-09-12 06:02 - 2017-09-12 06:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_cdnx.tribalfusion.com_0.indexeddb.leveldb\LOCK 2017-09-12 06:02 - 2017-09-12 06:02 - 000000164 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_cdnx.tribalfusion.com_0.indexeddb.leveldb\LOG 2017-09-12 06:02 - 2017-09-12 06:02 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_cdnx.tribalfusion.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 17:31 - 2017-09-10 17:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb 2017-09-10 17:31 - 2017-09-10 17:31 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\000003.log 2017-09-10 17:31 - 2017-09-10 17:31 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\CURRENT 2017-09-10 17:31 - 2017-09-10 17:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\LOCK 2017-09-10 17:31 - 2017-09-10 17:31 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\LOG 2017-09-10 17:31 - 2017-09-10 17:31 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 17:33 - 2017-09-10 17:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_www.funnyordie.com_0.indexeddb.leveldb 2017-09-10 17:33 - 2017-09-10 17:33 - 000000186 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_www.funnyordie.com_0.indexeddb.leveldb\000003.log 2017-09-10 17:33 - 2017-09-10 17:33 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_www.funnyordie.com_0.indexeddb.leveldb\CURRENT 2017-09-10 17:33 - 2017-09-10 17:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_www.funnyordie.com_0.indexeddb.leveldb\LOCK 2017-09-10 17:33 - 2017-09-10 17:33 - 000000160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_www.funnyordie.com_0.indexeddb.leveldb\LOG 2017-09-10 17:33 - 2017-09-10 17:33 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_www.funnyordie.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 06:05 - 2017-09-12 06:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb 2017-09-12 06:05 - 2017-09-12 06:05 - 000000198 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\000003.log 2017-09-12 06:05 - 2017-09-12 06:05 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\CURRENT 2017-09-12 06:05 - 2017-09-12 06:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\LOCK 2017-09-12 06:05 - 2017-09-12 06:05 - 000000167 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\LOG 2017-09-12 06:05 - 2017-09-12 06:05 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 17:30 - 2017-09-12 09:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage 2017-09-12 09:02 - 2017-09-12 09:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-12 09:02 - 2017-09-12 09:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-12 06:04 - 2017-09-12 06:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-12 06:04 - 2017-09-12 06:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-12 06:02 - 2017-09-12 06:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_cdn.districtm.ca_0.localstorage 2017-09-12 06:02 - 2017-09-12 06:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_cdn.districtm.ca_0.localstorage-journal 2017-09-12 06:04 - 2017-09-12 06:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-12 06:04 - 2017-09-12 06:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 17:30 - 2017-09-10 17:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_cdn-gl.imrworldwide.com_0.localstorage 2017-09-10 17:30 - 2017-09-10 17:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_cdn-gl.imrworldwide.com_0.localstorage-journal 2017-09-11 04:12 - 2017-09-11 04:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_cn.reuters.com_0.localstorage 2017-09-11 04:12 - 2017-09-11 04:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_cn.reuters.com_0.localstorage-journal 2017-09-10 17:33 - 2017-09-10 17:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_connexity.net_0.localstorage 2017-09-10 17:33 - 2017-09-10 17:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 17:32 - 2017-09-10 17:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_davedameshek.nfl.com_0.localstorage 2017-09-10 17:32 - 2017-09-10 17:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_davedameshek.nfl.com_0.localstorage-journal 2017-09-11 04:06 - 2017-09-11 04:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_hades.srvtrck.com_0.localstorage 2017-09-11 04:06 - 2017-09-11 04:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_hades.srvtrck.com_0.localstorage-journal 2017-09-12 06:07 - 2017-09-12 06:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_mashable.com_0.localstorage 2017-09-12 06:07 - 2017-09-12 06:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_mashable.com_0.localstorage-journal 2017-09-11 04:06 - 2017-09-11 04:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 04:06 - 2017-09-11 04:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 17:30 - 2017-09-10 17:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_secure-us.imrworldwide.com_0.localstorage 2017-09-10 17:30 - 2017-09-10 17:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_secure-us.imrworldwide.com_0.localstorage-journal 2017-09-12 06:06 - 2017-09-12 06:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-12 06:06 - 2017-09-12 06:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-10 17:35 - 2017-09-10 17:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_thehill.com_0.localstorage 2017-09-10 17:35 - 2017-09-10 17:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_thehill.com_0.localstorage-journal 2017-09-12 08:59 - 2017-09-12 08:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-12 08:59 - 2017-09-12 08:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-10 17:34 - 2017-09-10 17:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-10 17:34 - 2017-09-10 17:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-11 04:10 - 2017-09-11 04:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.bounty.com_0.localstorage 2017-09-11 04:10 - 2017-09-11 04:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.bounty.com_0.localstorage-journal 2017-09-10 17:30 - 2017-09-10 17:31 - 000011264 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 17:30 - 2017-09-10 17:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-12 06:07 - 2017-09-12 06:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.complex.com_0.localstorage 2017-09-12 06:07 - 2017-09-12 06:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-12 09:00 - 2017-09-12 09:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.courant.com_0.localstorage 2017-09-12 09:00 - 2017-09-12 09:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-12 06:06 - 2017-09-12 06:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.crash.net_0.localstorage 2017-09-12 06:06 - 2017-09-12 06:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-12 09:00 - 2017-09-12 09:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-12 09:00 - 2017-09-12 09:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-11 04:06 - 2017-09-11 04:07 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.effyjewelry.com_0.localstorage 2017-09-11 04:06 - 2017-09-11 04:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.effyjewelry.com_0.localstorage-journal 2017-09-11 04:09 - 2017-09-11 04:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-11 04:09 - 2017-09-11 04:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-10 17:33 - 2017-09-10 17:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-10 17:33 - 2017-09-10 17:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-11 04:10 - 2017-09-12 06:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.instyle.com_0.localstorage 2017-09-11 04:10 - 2017-09-12 06:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-10 17:32 - 2017-09-12 08:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 17:32 - 2017-09-12 08:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 17:33 - 2017-09-10 17:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.latimes.com_0.localstorage 2017-09-10 17:33 - 2017-09-10 17:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-12 08:55 - 2017-09-12 08:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.livescore.com_0.localstorage 2017-09-12 08:55 - 2017-09-12 08:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.livescore.com_0.localstorage-journal 2017-09-11 04:09 - 2017-09-12 08:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.mylifetime.com_0.localstorage 2017-09-11 04:09 - 2017-09-12 08:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.mylifetime.com_0.localstorage-journal 2017-09-10 17:33 - 2017-09-10 17:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.nbcconnecticut.com_0.localstorage 2017-09-10 17:33 - 2017-09-10 17:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.nbcconnecticut.com_0.localstorage-journal 2017-09-10 17:35 - 2017-09-12 06:04 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 17:35 - 2017-09-12 06:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 04:06 - 2017-09-11 04:07 - 000105472 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.nola.com_0.localstorage 2017-09-11 04:06 - 2017-09-11 04:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.nola.com_0.localstorage-journal 2017-09-12 06:05 - 2017-09-12 06:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-12 06:05 - 2017-09-12 06:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-12 06:02 - 2017-09-12 06:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.sparknotes.com_0.localstorage 2017-09-12 06:02 - 2017-09-12 06:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.sparknotes.com_0.localstorage-journal 2017-09-12 09:01 - 2017-09-12 09:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.torontosun.com_0.localstorage 2017-09-12 09:01 - 2017-09-12 09:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\http_www.torontosun.com_0.localstorage-journal 2017-09-10 17:30 - 2017-09-10 17:30 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\https_a8385363.cdn.optimizely.com_0.localstorage 2017-09-10 17:30 - 2017-09-10 17:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\https_a8385363.cdn.optimizely.com_0.localstorage-journal 2017-09-12 06:07 - 2017-09-12 06:07 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\https_c.betrad.com_0.localstorage 2017-09-12 06:07 - 2017-09-12 06:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 17:33 - 2017-09-10 17:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\https_connexity.net_0.localstorage 2017-09-10 17:33 - 2017-09-10 17:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-12 08:55 - 2017-09-12 08:56 - 000008192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\https_eizs1qyss5.kameleoon.eu_0.localstorage 2017-09-12 08:55 - 2017-09-12 08:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\https_eizs1qyss5.kameleoon.eu_0.localstorage-journal 2017-09-11 04:06 - 2017-09-11 04:07 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 04:06 - 2017-09-11 04:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-12 08:55 - 2017-09-12 08:56 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\https_www.lacoste.com_0.localstorage 2017-09-12 08:55 - 2017-09-12 08:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\https_www.lacoste.com_0.localstorage-journal 2017-09-10 17:31 - 2017-09-10 17:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\https_www.lemonfree.com_0.localstorage 2017-09-10 17:31 - 2017-09-10 17:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Local Storage\https_www.lemonfree.com_0.localstorage-journal 2017-09-10 17:30 - 2017-09-10 17:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data 2017-09-10 17:30 - 2017-09-12 09:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash 2017-09-10 17:30 - 2017-09-10 17:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 17:30 - 2017-09-10 17:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 17:30 - 2017-09-10 17:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\MPN6JGWM 2017-09-10 17:30 - 2017-09-10 17:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 17:30 - 2017-09-10 17:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 17:30 - 2017-09-10 17:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V 2017-09-10 17:30 - 2017-09-12 09:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\cdn.stickyadstv.com 2017-09-10 17:30 - 2017-09-10 17:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\cdncache-a.akamaihd.net 2017-09-10 17:30 - 2017-09-10 17:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\cdncache-a.akamaihd.net\items 2017-09-10 17:30 - 2017-09-10 17:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 17:30 - 2017-09-11 04:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 17:30 - 2017-09-11 04:06 - 000000429 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 17:30 - 2017-09-12 08:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\eereader.com 2017-09-10 17:32 - 2017-09-12 09:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\efreader.com 2017-09-10 17:38 - 2017-09-12 09:02 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\efreader.com\analytics.sol 2017-09-10 17:30 - 2017-09-12 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\egreader.com 2017-09-10 17:30 - 2017-09-10 17:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\macromedia.com 2017-09-10 17:30 - 2017-09-10 17:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\macromedia.com\support 2017-09-10 17:30 - 2017-09-10 17:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\macromedia.com\support\flashplayer 2017-09-10 17:30 - 2017-09-10 17:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\macromedia.com\support\flashplayer\sys 2017-09-10 17:30 - 2017-09-10 17:33 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 17:30 - 2017-09-10 17:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 17:30 - 2017-09-10 17:30 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 17:30 - 2017-09-10 17:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 17:30 - 2017-09-10 17:30 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 17:30 - 2017-09-10 17:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 17:30 - 2017-09-10 17:30 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 17:32 - 2017-09-10 17:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 17:32 - 2017-09-10 17:32 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 17:30 - 2017-09-10 17:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 17:30 - 2017-09-10 17:30 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data601\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZKVRH95V\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 05:34 - 2017-09-11 07:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602 2017-09-11 05:34 - 2017-09-11 05:42 - 000173056 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Cookies 2017-09-11 05:34 - 2017-09-11 05:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Cookies-journal 2017-09-11 05:40 - 2017-09-11 05:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\databases 2017-09-11 05:40 - 2017-09-11 05:40 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\databases\Databases.db 2017-09-11 05:40 - 2017-09-11 05:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\databases\Databases.db-journal 2017-09-11 05:34 - 2017-09-11 05:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\File System 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\File System\000 2017-09-11 05:34 - 2017-09-11 05:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\File System\000\t 2017-09-11 05:40 - 2017-09-11 05:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\File System\000\t\Paths 2017-09-11 05:40 - 2017-09-11 05:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\File System\000\t\Paths\000003.log 2017-09-11 05:40 - 2017-09-11 05:40 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\File System\000\t\Paths\CURRENT 2017-09-11 05:40 - 2017-09-11 05:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\File System\000\t\Paths\LOCK 2017-09-11 05:40 - 2017-09-11 05:40 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\File System\000\t\Paths\LOG 2017-09-11 05:40 - 2017-09-11 05:40 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\File System\000\t\Paths\MANIFEST-000001 2017-09-11 05:42 - 2017-09-11 05:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\File System\001 2017-09-11 05:42 - 2017-09-11 05:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\File System\001\t 2017-09-11 05:34 - 2017-09-11 05:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\File System\Origins 2017-09-11 05:34 - 2017-09-11 05:43 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\File System\Origins\000003.log 2017-09-11 05:34 - 2017-09-11 05:34 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\File System\Origins\CURRENT 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\File System\Origins\LOCK 2017-09-11 05:34 - 2017-09-11 05:42 - 000000393 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\File System\Origins\LOG 2017-09-11 05:34 - 2017-09-11 05:40 - 000000741 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\File System\Origins\LOG.old 2017-09-11 05:34 - 2017-09-11 05:34 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\File System\Origins\MANIFEST-000001 2017-09-11 05:40 - 2017-09-11 05:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\File System\Origins\lost 2017-09-11 05:40 - 2017-09-11 05:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\IndexedDB 2017-09-11 05:40 - 2017-09-11 05:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\IndexedDB\http_www.eatingwell.com_0.indexeddb.leveldb 2017-09-11 05:40 - 2017-09-11 05:40 - 000000186 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\IndexedDB\http_www.eatingwell.com_0.indexeddb.leveldb\000003.log 2017-09-11 05:40 - 2017-09-11 05:40 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\IndexedDB\http_www.eatingwell.com_0.indexeddb.leveldb\CURRENT 2017-09-11 05:40 - 2017-09-11 05:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\IndexedDB\http_www.eatingwell.com_0.indexeddb.leveldb\LOCK 2017-09-11 05:40 - 2017-09-11 05:40 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\IndexedDB\http_www.eatingwell.com_0.indexeddb.leveldb\LOG 2017-09-11 05:40 - 2017-09-11 05:40 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\IndexedDB\http_www.eatingwell.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 05:40 - 2017-09-11 05:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb 2017-09-11 05:40 - 2017-09-11 05:40 - 000000172 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\000003.log 2017-09-11 05:40 - 2017-09-11 05:40 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\CURRENT 2017-09-11 05:40 - 2017-09-11 05:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOCK 2017-09-11 05:40 - 2017-09-11 05:40 - 000000154 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOG 2017-09-11 05:40 - 2017-09-11 05:40 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 05:34 - 2017-09-11 05:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage 2017-09-11 05:34 - 2017-09-11 05:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-11 05:34 - 2017-09-11 05:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 05:38 - 2017-09-11 05:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-11 05:38 - 2017-09-11 05:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-11 05:36 - 2017-09-11 05:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 05:36 - 2017-09-11 05:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 05:34 - 2017-09-11 05:35 - 000019456 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_www.cnn.com_0.localstorage 2017-09-11 05:34 - 2017-09-11 05:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_www.cnn.com_0.localstorage-journal 2017-09-11 05:40 - 2017-09-11 05:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_www.fandango.com_0.localstorage 2017-09-11 05:40 - 2017-09-11 05:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_www.fandango.com_0.localstorage-journal 2017-09-11 05:38 - 2017-09-11 05:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-11 05:38 - 2017-09-11 05:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-11 05:38 - 2017-09-11 05:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 05:38 - 2017-09-11 05:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 05:38 - 2017-09-11 05:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 05:38 - 2017-09-11 05:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-11 05:36 - 2017-09-11 05:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 05:36 - 2017-09-11 05:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 05:34 - 2017-09-11 05:35 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_www.patagonia.com_0.localstorage 2017-09-11 05:34 - 2017-09-11 05:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\http_www.patagonia.com_0.localstorage-journal 2017-09-11 05:34 - 2017-09-11 05:35 - 000023552 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\https_a125375509.cdn.optimizely.com_0.localstorage 2017-09-11 05:34 - 2017-09-11 05:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\https_a125375509.cdn.optimizely.com_0.localstorage-journal 2017-09-11 05:34 - 2017-09-11 05:34 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 05:34 - 2017-09-11 05:34 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data 2017-09-11 05:34 - 2017-09-11 05:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\7JMZ4HG5 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 05:34 - 2017-09-11 05:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY 2017-09-11 05:41 - 2017-09-11 05:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\cdn.dashbid.io 2017-09-11 05:41 - 2017-09-11 05:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\cdn.dashbid.io\prod 2017-09-11 05:41 - 2017-09-11 05:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-11 05:41 - 2017-09-11 05:41 - 000000069 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-11 05:35 - 2017-09-11 05:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\cdn.stickyadstv.com 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\cdncache-a.akamaihd.net 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\cdncache-a.akamaihd.net\items 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 05:34 - 2017-09-11 05:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 05:34 - 2017-09-11 05:38 - 000000475 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 05:34 - 2017-09-11 05:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\eereader.com 2017-09-11 05:36 - 2017-09-11 05:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\efreader.com 2017-09-11 05:43 - 2017-09-11 05:43 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\efreader.com\analytics.sol 2017-09-11 05:34 - 2017-09-11 05:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\egreader.com 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\macromedia.com 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\macromedia.com\support 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\macromedia.com\support\flashplayer 2017-09-11 05:34 - 2017-09-11 05:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\macromedia.com\support\flashplayer\sys 2017-09-11 05:34 - 2017-09-11 05:41 - 000000509 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 05:41 - 2017-09-11 05:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-11 05:41 - 2017-09-11 05:41 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-11 05:35 - 2017-09-11 05:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 05:35 - 2017-09-11 05:35 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 05:34 - 2017-09-11 05:34 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 05:34 - 2017-09-11 05:34 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 05:36 - 2017-09-11 05:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 05:36 - 2017-09-11 05:36 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 05:34 - 2017-09-11 05:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 05:34 - 2017-09-11 05:34 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data602\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WFHGT3FY\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 23:07 - 2017-09-12 00:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603 2017-09-11 23:07 - 2017-09-11 23:15 - 000179200 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Cookies 2017-09-11 23:07 - 2017-09-11 23:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Cookies-journal 2017-09-11 23:08 - 2017-09-11 23:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\File System 2017-09-11 23:08 - 2017-09-11 23:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\File System\000 2017-09-11 23:08 - 2017-09-11 23:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\File System\000\t 2017-09-11 23:08 - 2017-09-11 23:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\File System\Origins 2017-09-11 23:08 - 2017-09-11 23:08 - 000000101 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\File System\Origins\000003.log 2017-09-11 23:08 - 2017-09-11 23:08 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\File System\Origins\CURRENT 2017-09-11 23:08 - 2017-09-11 23:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\File System\Origins\LOCK 2017-09-11 23:08 - 2017-09-11 23:08 - 000000128 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\File System\Origins\LOG 2017-09-11 23:08 - 2017-09-11 23:08 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\File System\Origins\MANIFEST-000001 2017-09-11 23:08 - 2017-09-11 23:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage 2017-09-11 23:08 - 2017-09-11 23:09 - 000020480 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_allrecipes.com_0.localstorage 2017-09-11 23:08 - 2017-09-11 23:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-11 23:13 - 2017-09-11 23:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 23:13 - 2017-09-11 23:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 23:08 - 2017-09-11 23:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 23:08 - 2017-09-11 23:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-11 23:10 - 2017-09-11 23:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 23:10 - 2017-09-11 23:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 23:13 - 2017-09-11 23:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_www.cnbc.com_0.localstorage 2017-09-11 23:13 - 2017-09-11 23:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_www.cnbc.com_0.localstorage-journal 2017-09-11 23:12 - 2017-09-11 23:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_www.complex.com_0.localstorage 2017-09-11 23:12 - 2017-09-11 23:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-11 23:11 - 2017-09-11 23:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-11 23:11 - 2017-09-11 23:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-11 23:11 - 2017-09-11 23:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-11 23:11 - 2017-09-11 23:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-11 23:09 - 2017-09-11 23:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 23:09 - 2017-09-11 23:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 23:10 - 2017-09-11 23:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_www.parents.com_0.localstorage 2017-09-11 23:10 - 2017-09-11 23:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-11 23:08 - 2017-09-11 23:09 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_www.stio.com_0.localstorage 2017-09-11 23:08 - 2017-09-11 23:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\http_www.stio.com_0.localstorage-journal 2017-09-11 23:08 - 2017-09-11 23:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\https_assets.bounceexchange.com_0.localstorage 2017-09-11 23:08 - 2017-09-11 23:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\https_assets.bounceexchange.com_0.localstorage-journal 2017-09-11 23:10 - 2017-09-11 23:10 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 23:10 - 2017-09-11 23:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 23:12 - 2017-09-11 23:13 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-11 23:12 - 2017-09-11 23:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-11 23:08 - 2017-09-11 23:09 - 000070656 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\https_static.olark.com_0.localstorage 2017-09-11 23:08 - 2017-09-11 23:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Local Storage\https_static.olark.com_0.localstorage-journal 2017-09-11 23:08 - 2017-09-11 23:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data 2017-09-11 23:08 - 2017-09-11 23:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash 2017-09-11 23:08 - 2017-09-11 23:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 23:08 - 2017-09-11 23:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 23:08 - 2017-09-11 23:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\QKBYPWMM 2017-09-11 23:08 - 2017-09-11 23:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 23:08 - 2017-09-11 23:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 23:08 - 2017-09-11 23:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GAAJW26W 2017-09-11 23:08 - 2017-09-11 23:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GAAJW26W\cdn.stickyadstv.com 2017-09-11 23:08 - 2017-09-11 23:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GAAJW26W\eereader.com 2017-09-11 23:09 - 2017-09-11 23:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GAAJW26W\efreader.com 2017-09-11 23:08 - 2017-09-11 23:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GAAJW26W\egreader.com 2017-09-11 23:08 - 2017-09-11 23:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GAAJW26W\macromedia.com 2017-09-11 23:08 - 2017-09-11 23:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GAAJW26W\macromedia.com\support 2017-09-11 23:08 - 2017-09-11 23:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GAAJW26W\macromedia.com\support\flashplayer 2017-09-11 23:08 - 2017-09-11 23:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GAAJW26W\macromedia.com\support\flashplayer\sys 2017-09-11 23:08 - 2017-09-11 23:09 - 000000464 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GAAJW26W\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 23:08 - 2017-09-11 23:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GAAJW26W\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 23:08 - 2017-09-11 23:08 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GAAJW26W\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 23:08 - 2017-09-11 23:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GAAJW26W\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 23:08 - 2017-09-11 23:08 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GAAJW26W\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 23:09 - 2017-09-11 23:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GAAJW26W\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 23:09 - 2017-09-11 23:09 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GAAJW26W\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 23:08 - 2017-09-11 23:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GAAJW26W\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 23:08 - 2017-09-11 23:08 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data603\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GAAJW26W\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 20:51 - 2017-09-11 22:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604 2017-09-10 20:51 - 2017-09-11 21:50 - 000292864 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Cookies 2017-09-10 20:51 - 2017-09-11 21:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Cookies-journal 2017-09-10 20:52 - 2017-09-10 20:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\databases 2017-09-10 20:52 - 2017-09-10 20:52 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\databases\Databases.db 2017-09-10 20:52 - 2017-09-10 20:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\databases\Databases.db-journal 2017-09-10 20:59 - 2017-09-11 17:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System 2017-09-10 20:59 - 2017-09-10 20:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\000 2017-09-10 20:59 - 2017-09-11 12:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\000\t 2017-09-11 12:06 - 2017-09-11 12:06 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\000\t\.usage 2017-09-11 12:06 - 2017-09-11 12:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\000\t\Paths 2017-09-11 12:06 - 2017-09-11 12:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\000\t\Paths\000003.log 2017-09-11 12:06 - 2017-09-11 12:06 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\000\t\Paths\CURRENT 2017-09-11 12:06 - 2017-09-11 12:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\000\t\Paths\LOCK 2017-09-11 12:06 - 2017-09-11 12:06 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\000\t\Paths\LOG 2017-09-11 12:06 - 2017-09-11 12:06 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\000\t\Paths\MANIFEST-000001 2017-09-11 12:07 - 2017-09-11 12:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\001 2017-09-11 12:07 - 2017-09-11 12:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\001\t 2017-09-11 17:58 - 2017-09-11 17:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\002 2017-09-11 17:58 - 2017-09-11 17:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\002\t 2017-09-11 17:58 - 2017-09-11 17:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\003 2017-09-11 17:58 - 2017-09-11 17:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\003\t 2017-09-10 20:59 - 2017-09-11 21:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\Origins 2017-09-10 20:59 - 2017-09-11 17:59 - 000000313 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\Origins\000003.log 2017-09-10 20:59 - 2017-09-10 20:59 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\Origins\CURRENT 2017-09-10 20:59 - 2017-09-10 20:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\Origins\LOCK 2017-09-10 20:59 - 2017-09-11 21:50 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\Origins\LOG 2017-09-10 20:59 - 2017-09-11 18:03 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\Origins\LOG.old 2017-09-10 20:59 - 2017-09-10 20:59 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\File System\Origins\MANIFEST-000001 2017-09-10 20:52 - 2017-09-11 12:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\IndexedDB 2017-09-10 20:52 - 2017-09-10 20:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\IndexedDB\http_www.jango.com_0.indexeddb.leveldb 2017-09-10 20:52 - 2017-09-10 20:52 - 000000176 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\IndexedDB\http_www.jango.com_0.indexeddb.leveldb\000003.log 2017-09-10 20:52 - 2017-09-10 20:52 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\IndexedDB\http_www.jango.com_0.indexeddb.leveldb\CURRENT 2017-09-10 20:52 - 2017-09-10 20:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\IndexedDB\http_www.jango.com_0.indexeddb.leveldb\LOCK 2017-09-10 20:52 - 2017-09-10 20:52 - 000000156 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\IndexedDB\http_www.jango.com_0.indexeddb.leveldb\LOG 2017-09-10 20:52 - 2017-09-10 20:52 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\IndexedDB\http_www.jango.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 12:06 - 2017-09-11 12:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb 2017-09-11 12:06 - 2017-09-11 12:06 - 000000172 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\000003.log 2017-09-11 12:06 - 2017-09-11 12:06 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\CURRENT 2017-09-11 12:06 - 2017-09-11 12:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOCK 2017-09-11 12:06 - 2017-09-11 12:06 - 000000155 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOG 2017-09-11 12:06 - 2017-09-11 12:06 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 20:51 - 2017-09-11 21:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage 2017-09-10 20:57 - 2017-09-11 12:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 20:57 - 2017-09-11 12:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 17:56 - 2017-09-11 17:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_legalsolutions.thomsonreuters.com_0.localstorage 2017-09-11 17:56 - 2017-09-11 17:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_legalsolutions.thomsonreuters.com_0.localstorage-journal 2017-09-10 20:53 - 2017-09-10 20:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_nflfilms.nfl.com_0.localstorage 2017-09-10 20:53 - 2017-09-10 20:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_nflfilms.nfl.com_0.localstorage-journal 2017-09-11 17:58 - 2017-09-11 17:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-11 17:58 - 2017-09-11 17:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 20:52 - 2017-09-11 17:56 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 20:52 - 2017-09-11 17:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 21:50 - 2017-09-11 21:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_quotes.improvementcenter.com_0.localstorage 2017-09-11 21:50 - 2017-09-11 21:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_quotes.improvementcenter.com_0.localstorage-journal 2017-09-10 20:56 - 2017-09-10 20:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-10 20:56 - 2017-09-10 20:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-10 20:54 - 2017-09-11 17:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 20:54 - 2017-09-11 17:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 18:00 - 2017-09-11 18:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.complex.com_0.localstorage 2017-09-11 18:00 - 2017-09-11 18:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-10 20:55 - 2017-09-10 20:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.crash.net_0.localstorage 2017-09-10 20:55 - 2017-09-10 20:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-10 20:57 - 2017-09-10 20:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-10 20:57 - 2017-09-10 20:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-11 12:09 - 2017-09-11 12:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.food.com_0.localstorage 2017-09-11 12:09 - 2017-09-11 12:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-10 20:52 - 2017-09-10 20:53 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.golfetail.com_0.localstorage 2017-09-10 20:52 - 2017-09-10 20:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.golfetail.com_0.localstorage-journal 2017-09-11 12:07 - 2017-09-11 12:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-11 12:07 - 2017-09-11 12:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-11 17:59 - 2017-09-11 17:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.instyle.com_0.localstorage 2017-09-11 17:59 - 2017-09-11 17:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-10 20:55 - 2017-09-10 20:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.islandpacket.com_0.localstorage 2017-09-10 20:55 - 2017-09-10 20:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.islandpacket.com_0.localstorage-journal 2017-09-10 20:52 - 2017-09-10 20:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.jango.com_0.localstorage 2017-09-10 20:52 - 2017-09-10 20:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.jango.com_0.localstorage-journal 2017-09-11 12:06 - 2017-09-11 12:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-11 12:06 - 2017-09-11 12:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-10 20:54 - 2017-09-10 20:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-10 20:54 - 2017-09-10 20:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-11 17:58 - 2017-09-11 17:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.nbcconnecticut.com_0.localstorage 2017-09-11 17:58 - 2017-09-11 17:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.nbcconnecticut.com_0.localstorage-journal 2017-09-10 20:54 - 2017-09-11 12:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 20:54 - 2017-09-11 12:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 21:50 - 2017-09-11 21:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.powerbookmedic.com_0.localstorage 2017-09-11 21:50 - 2017-09-11 21:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.powerbookmedic.com_0.localstorage-journal 2017-09-10 20:57 - 2017-09-10 20:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.reuters.com_0.localstorage 2017-09-10 20:57 - 2017-09-10 20:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-11 17:55 - 2017-09-11 17:57 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.wnd.com_0.localstorage 2017-09-11 17:55 - 2017-09-11 17:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www.wnd.com_0.localstorage-journal 2017-09-11 18:01 - 2017-09-11 18:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www4.fmovies.io_0.localstorage 2017-09-11 18:01 - 2017-09-11 18:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\http_www4.fmovies.io_0.localstorage-journal 2017-09-11 17:59 - 2017-09-11 17:59 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 17:59 - 2017-09-11 17:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 12:04 - 2017-09-11 12:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_cdn.krxd.net_0.localstorage 2017-09-11 12:04 - 2017-09-11 12:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_cdn.krxd.net_0.localstorage-journal 2017-09-11 17:55 - 2017-09-11 17:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_configusa.veinteractive.com_0.localstorage 2017-09-11 17:55 - 2017-09-11 17:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_configusa.veinteractive.com_0.localstorage-journal 2017-09-10 20:52 - 2017-09-11 21:50 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 20:52 - 2017-09-11 21:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 17:55 - 2017-09-11 17:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_disqus.com_0.localstorage 2017-09-11 17:55 - 2017-09-11 17:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_disqus.com_0.localstorage-journal 2017-09-11 12:05 - 2017-09-11 12:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-11 12:05 - 2017-09-11 12:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-11 12:03 - 2017-09-11 12:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_player.ooyala.com_0.localstorage 2017-09-11 12:03 - 2017-09-11 12:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_player.ooyala.com_0.localstorage-journal 2017-09-11 12:04 - 2017-09-11 12:04 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 12:04 - 2017-09-11 12:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 12:03 - 2017-09-11 12:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_sb.monetate.net_0.localstorage 2017-09-11 12:03 - 2017-09-11 12:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_sb.monetate.net_0.localstorage-journal 2017-09-10 20:52 - 2017-09-11 21:50 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 20:52 - 2017-09-11 21:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 20:52 - 2017-09-10 20:53 - 000047104 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_static.olark.com_0.localstorage 2017-09-10 20:52 - 2017-09-10 20:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_static.olark.com_0.localstorage-journal 2017-09-11 12:03 - 2017-09-11 12:05 - 000011264 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_www.fitnessmagazine.com_0.localstorage 2017-09-11 12:03 - 2017-09-11 12:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_www.fitnessmagazine.com_0.localstorage-journal 2017-09-11 21:50 - 2017-09-11 21:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_www.ultimate-guitar.com_0.localstorage 2017-09-11 21:50 - 2017-09-11 21:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Local Storage\https_www.ultimate-guitar.com_0.localstorage-journal 2017-09-10 20:52 - 2017-09-10 20:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data 2017-09-10 20:52 - 2017-09-11 21:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash 2017-09-10 20:52 - 2017-09-10 20:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 20:52 - 2017-09-10 20:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 20:52 - 2017-09-10 20:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\ERMCNAJJ 2017-09-10 20:52 - 2017-09-10 20:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 20:52 - 2017-09-10 20:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 20:52 - 2017-09-11 12:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA 2017-09-11 12:08 - 2017-09-11 12:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\aka.spotxcdn.com 2017-09-10 20:52 - 2017-09-11 21:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\cdn.stickyadstv.com 2017-09-10 20:52 - 2017-09-10 20:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\cdncache-a.akamaihd.net 2017-09-10 20:52 - 2017-09-10 20:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\cdncache-a.akamaihd.net\items 2017-09-10 20:52 - 2017-09-10 20:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 20:52 - 2017-09-11 21:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 20:52 - 2017-09-11 21:50 - 000000565 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 20:52 - 2017-09-11 21:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\eereader.com 2017-09-10 20:53 - 2017-09-11 18:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\efreader.com 2017-09-10 21:00 - 2017-09-11 18:04 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\efreader.com\analytics.sol 2017-09-10 20:52 - 2017-09-11 21:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\egreader.com 2017-09-11 12:08 - 2017-09-11 12:08 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\egreader.com\analytics.sol 2017-09-11 12:08 - 2017-09-11 12:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\inread.anyclip.com 2017-09-11 12:08 - 2017-09-11 12:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\inread.anyclip.com\ac# 2017-09-11 12:08 - 2017-09-11 12:08 - 000000511 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-10 20:52 - 2017-09-10 20:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\macromedia.com 2017-09-10 20:52 - 2017-09-10 20:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\macromedia.com\support 2017-09-10 20:52 - 2017-09-10 20:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\macromedia.com\support\flashplayer 2017-09-10 20:52 - 2017-09-11 12:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\macromedia.com\support\flashplayer\sys 2017-09-10 20:52 - 2017-09-11 12:08 - 000000533 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 12:08 - 2017-09-11 12:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\macromedia.com\support\flashplayer\sys\#aka.spotxcdn.com 2017-09-11 12:08 - 2017-09-11 12:08 - 000000086 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\macromedia.com\support\flashplayer\sys\#aka.spotxcdn.com\settings.sol 2017-09-10 20:52 - 2017-09-10 20:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 20:52 - 2017-09-10 20:52 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 20:52 - 2017-09-10 20:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 20:52 - 2017-09-10 20:52 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 20:52 - 2017-09-10 20:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 20:52 - 2017-09-10 20:52 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 20:53 - 2017-09-10 20:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 20:53 - 2017-09-10 20:53 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 20:52 - 2017-09-10 20:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 20:52 - 2017-09-10 20:52 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 12:08 - 2017-09-11 12:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 12:08 - 2017-09-11 12:08 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data604\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8DP7TSA\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-10 17:20 - 2017-09-12 09:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605 2017-09-10 17:20 - 2017-09-12 08:33 - 000374784 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Cookies 2017-09-10 17:20 - 2017-09-12 08:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Cookies-journal 2017-09-10 19:11 - 2017-09-10 19:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\databases 2017-09-10 19:11 - 2017-09-10 19:11 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\databases\Databases.db 2017-09-10 19:11 - 2017-09-10 19:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\databases\Databases.db-journal 2017-09-10 17:20 - 2017-09-12 08:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\File System 2017-09-12 08:31 - 2017-09-12 08:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\File System\006 2017-09-12 08:31 - 2017-09-12 08:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\File System\006\t 2017-09-10 17:20 - 2017-09-12 08:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\File System\Origins 2017-09-10 17:20 - 2017-09-12 08:33 - 000000539 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\File System\Origins\000003.log 2017-09-10 17:20 - 2017-09-10 17:20 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\File System\Origins\CURRENT 2017-09-10 17:20 - 2017-09-10 17:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\File System\Origins\LOCK 2017-09-10 17:20 - 2017-09-12 08:31 - 000000388 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\File System\Origins\LOG 2017-09-10 17:20 - 2017-09-12 08:30 - 000000739 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\File System\Origins\LOG.old 2017-09-10 17:20 - 2017-09-10 17:20 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\File System\Origins\MANIFEST-000001 2017-09-10 17:23 - 2017-09-10 17:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\File System\Origins\lost 2017-09-10 19:11 - 2017-09-12 08:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB 2017-09-12 08:29 - 2017-09-12 08:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\http_www.heart.co.uk_0.indexeddb.leveldb 2017-09-12 08:29 - 2017-09-12 08:29 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\http_www.heart.co.uk_0.indexeddb.leveldb\000003.log 2017-09-12 08:29 - 2017-09-12 08:29 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\http_www.heart.co.uk_0.indexeddb.leveldb\CURRENT 2017-09-12 08:29 - 2017-09-12 08:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\http_www.heart.co.uk_0.indexeddb.leveldb\LOCK 2017-09-12 08:29 - 2017-09-12 08:29 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\http_www.heart.co.uk_0.indexeddb.leveldb\LOG 2017-09-12 08:29 - 2017-09-12 08:29 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\http_www.heart.co.uk_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 19:11 - 2017-09-10 19:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\http_www.nbcnewyork.com_0.indexeddb.leveldb 2017-09-10 19:11 - 2017-09-10 19:11 - 000000186 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\http_www.nbcnewyork.com_0.indexeddb.leveldb\000003.log 2017-09-10 19:11 - 2017-09-10 19:11 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\http_www.nbcnewyork.com_0.indexeddb.leveldb\CURRENT 2017-09-10 19:11 - 2017-09-10 19:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\http_www.nbcnewyork.com_0.indexeddb.leveldb\LOCK 2017-09-10 19:11 - 2017-09-10 19:11 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\http_www.nbcnewyork.com_0.indexeddb.leveldb\LOG 2017-09-10 19:11 - 2017-09-10 19:11 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\http_www.nbcnewyork.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 21:29 - 2017-09-10 21:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb 2017-09-10 21:29 - 2017-09-10 21:29 - 000000172 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\000003.log 2017-09-10 21:29 - 2017-09-10 21:29 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\CURRENT 2017-09-10 21:29 - 2017-09-10 21:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOCK 2017-09-10 21:29 - 2017-09-10 21:29 - 000000154 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOG 2017-09-10 21:29 - 2017-09-10 21:29 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 08:24 - 2017-09-12 08:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb 2017-09-12 08:24 - 2017-09-12 08:24 - 000000206 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\000003.log 2017-09-12 08:24 - 2017-09-12 08:24 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\CURRENT 2017-09-12 08:24 - 2017-09-12 08:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\LOCK 2017-09-12 08:24 - 2017-09-12 08:24 - 000000167 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\LOG 2017-09-12 08:24 - 2017-09-12 08:24 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 17:20 - 2017-09-12 08:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage 2017-09-10 19:11 - 2017-09-10 19:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_1000spins.com_0.localstorage 2017-09-10 19:11 - 2017-09-10 19:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_1000spins.com_0.localstorage-journal 2017-09-10 17:20 - 2017-09-10 17:21 - 000014336 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_allrecipes.com_0.localstorage 2017-09-10 17:20 - 2017-09-10 17:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-12 08:26 - 2017-09-12 08:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-12 08:26 - 2017-09-12 08:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 17:20 - 2017-09-10 19:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 17:20 - 2017-09-10 19:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-12 08:26 - 2017-09-12 08:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_connexity.net_0.localstorage 2017-09-12 08:26 - 2017-09-12 08:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 17:26 - 2017-09-10 17:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_diethood.com_0.localstorage 2017-09-10 17:26 - 2017-09-10 17:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_diethood.com_0.localstorage-journal 2017-09-10 19:11 - 2017-09-10 19:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_nbc-o-o.massrel.io_0.localstorage 2017-09-10 19:11 - 2017-09-10 19:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_nbc-o-o.massrel.io_0.localstorage-journal 2017-09-10 17:20 - 2017-09-10 17:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 17:20 - 2017-09-10 17:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 17:20 - 2017-09-10 19:11 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 17:20 - 2017-09-10 19:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-12 08:29 - 2017-09-12 08:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_sync.graph.bluecava.com_0.localstorage 2017-09-12 08:29 - 2017-09-12 08:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_sync.graph.bluecava.com_0.localstorage-journal 2017-09-10 17:25 - 2017-09-10 17:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-10 17:25 - 2017-09-10 17:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-11 14:47 - 2017-09-11 14:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_webassign.net_0.localstorage 2017-09-11 14:47 - 2017-09-11 14:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_webassign.net_0.localstorage-journal 2017-09-10 21:22 - 2017-09-10 21:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_wwmt.com_0.localstorage 2017-09-10 21:22 - 2017-09-10 21:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_wwmt.com_0.localstorage-journal 2017-09-12 08:28 - 2017-09-12 08:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-12 08:28 - 2017-09-12 08:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-10 21:26 - 2017-09-10 21:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-10 21:26 - 2017-09-10 21:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-11 14:45 - 2017-09-11 14:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.blabbermouth.net_0.localstorage 2017-09-11 14:45 - 2017-09-11 14:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.blabbermouth.net_0.localstorage-journal 2017-09-11 14:43 - 2017-09-11 14:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 14:43 - 2017-09-11 14:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-12 08:28 - 2017-09-12 08:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.finecooking.com_0.localstorage 2017-09-12 08:28 - 2017-09-12 08:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.finecooking.com_0.localstorage-journal 2017-09-10 21:27 - 2017-09-10 21:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.food.com_0.localstorage 2017-09-10 21:27 - 2017-09-10 21:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-11 14:45 - 2017-09-11 14:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.foxnews.com_0.localstorage 2017-09-11 14:45 - 2017-09-11 14:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.foxnews.com_0.localstorage-journal 2017-09-10 17:23 - 2017-09-10 17:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-10 17:23 - 2017-09-10 17:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-12 08:28 - 2017-09-12 08:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-12 08:28 - 2017-09-12 08:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-12 08:30 - 2017-09-12 08:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.instyle.com_0.localstorage 2017-09-12 08:30 - 2017-09-12 08:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 14:44 - 2017-09-11 14:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 14:44 - 2017-09-11 14:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 17:23 - 2017-09-10 17:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.latimes.com_0.localstorage 2017-09-10 17:23 - 2017-09-10 17:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-11 14:45 - 2017-09-11 14:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.macworld.com_0.localstorage 2017-09-11 14:45 - 2017-09-11 14:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-10 21:24 - 2017-09-10 21:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.mylifetime.com_0.localstorage 2017-09-10 21:24 - 2017-09-10 21:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.mylifetime.com_0.localstorage-journal 2017-09-12 08:27 - 2017-09-12 08:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-12 08:27 - 2017-09-12 08:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-10 17:23 - 2017-09-10 17:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.nbcconnecticut.com_0.localstorage 2017-09-10 17:23 - 2017-09-10 17:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.nbcconnecticut.com_0.localstorage-journal 2017-09-10 19:11 - 2017-09-10 19:11 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.nbcnewyork.com_0.localstorage 2017-09-10 19:11 - 2017-09-10 19:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.nbcnewyork.com_0.localstorage-journal 2017-09-10 17:22 - 2017-09-11 14:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 17:22 - 2017-09-11 14:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 17:20 - 2017-09-10 17:20 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.originplatform.com_0.localstorage 2017-09-10 17:20 - 2017-09-10 17:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.originplatform.com_0.localstorage-journal 2017-09-10 19:11 - 2017-09-10 19:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.tedbaker.com_0.localstorage 2017-09-10 19:11 - 2017-09-10 19:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.tedbaker.com_0.localstorage-journal 2017-09-10 17:20 - 2017-09-10 17:21 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.totalbeauty.com_0.localstorage 2017-09-10 17:20 - 2017-09-10 17:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.totalbeauty.com_0.localstorage-journal 2017-09-10 21:27 - 2017-09-10 21:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.vogue.com_0.localstorage 2017-09-10 21:27 - 2017-09-10 21:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.vogue.com_0.localstorage-journal 2017-09-10 17:20 - 2017-09-10 17:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.youthskin.co_0.localstorage 2017-09-10 17:20 - 2017-09-10 17:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www.youthskin.co_0.localstorage-journal 2017-09-12 08:29 - 2017-09-12 08:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www4.fmovies.io_0.localstorage 2017-09-12 08:29 - 2017-09-12 08:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\http_www4.fmovies.io_0.localstorage-journal 2017-09-10 17:20 - 2017-09-10 17:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_assets.bounceexchange.com_0.localstorage 2017-09-10 17:20 - 2017-09-10 17:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_assets.bounceexchange.com_0.localstorage-journal 2017-09-12 08:25 - 2017-09-12 08:25 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_c.betrad.com_0.localstorage 2017-09-12 08:25 - 2017-09-12 08:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-12 08:24 - 2017-09-12 08:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_cdn.krxd.net_0.localstorage 2017-09-12 08:24 - 2017-09-12 08:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_cdn.krxd.net_0.localstorage-journal 2017-09-12 08:26 - 2017-09-12 08:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_connexity.net_0.localstorage 2017-09-12 08:26 - 2017-09-12 08:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 17:20 - 2017-09-11 14:41 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 17:20 - 2017-09-11 14:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 17:23 - 2017-09-11 14:45 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-10 17:23 - 2017-09-11 14:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-10 17:24 - 2017-09-10 17:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_player.mediabong.net_0.localstorage 2017-09-10 17:24 - 2017-09-10 17:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_player.mediabong.net_0.localstorage-journal 2017-09-11 14:41 - 2017-09-11 14:42 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 14:41 - 2017-09-11 14:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-12 08:24 - 2017-09-12 08:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_sb.monetate.net_0.localstorage 2017-09-12 08:24 - 2017-09-12 08:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_sb.monetate.net_0.localstorage-journal 2017-09-10 17:20 - 2017-09-11 14:41 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 17:20 - 2017-09-11 14:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 14:41 - 2017-09-11 14:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_verizon.inq.com_0.localstorage 2017-09-11 14:41 - 2017-09-11 14:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_verizon.inq.com_0.localstorage-journal 2017-09-12 08:24 - 2017-09-12 08:26 - 000013312 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_www.fitnessmagazine.com_0.localstorage 2017-09-12 08:24 - 2017-09-12 08:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_www.fitnessmagazine.com_0.localstorage-journal 2017-09-11 14:41 - 2017-09-11 14:42 - 002073600 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_www.pacogames.com_0.localstorage 2017-09-11 14:41 - 2017-09-11 14:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_www.pacogames.com_0.localstorage-journal 2017-09-11 14:41 - 2017-09-11 14:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_www.verizon.com_0.localstorage 2017-09-11 14:41 - 2017-09-11 14:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_www.verizon.com_0.localstorage-journal 2017-09-12 08:24 - 2017-09-12 08:26 - 000066560 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_www.voguewigs.com_0.localstorage 2017-09-12 08:24 - 2017-09-12 08:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Local Storage\https_www.voguewigs.com_0.localstorage-journal 2017-09-10 17:20 - 2017-09-10 17:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data 2017-09-10 17:20 - 2017-09-12 08:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash 2017-09-10 17:20 - 2017-09-10 17:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 17:20 - 2017-09-10 17:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 17:20 - 2017-09-10 17:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\HLQY47LG 2017-09-10 17:20 - 2017-09-10 17:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 17:20 - 2017-09-10 17:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 17:20 - 2017-09-11 14:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT 2017-09-10 17:20 - 2017-09-12 08:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\cdn.stickyadstv.com 2017-09-10 17:20 - 2017-09-10 17:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\cdncache-a.akamaihd.net 2017-09-10 17:20 - 2017-09-10 17:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\cdncache-a.akamaihd.net\items 2017-09-10 17:20 - 2017-09-10 17:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 17:20 - 2017-09-11 14:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 17:20 - 2017-09-11 14:47 - 000000554 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 17:20 - 2017-09-12 08:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\eereader.com 2017-09-10 17:21 - 2017-09-12 08:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\efreader.com 2017-09-10 17:27 - 2017-09-12 08:33 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\efreader.com\analytics.sol 2017-09-10 17:20 - 2017-09-12 08:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\egreader.com 2017-09-10 17:23 - 2017-09-10 17:23 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\egreader.com\analytics.sol 2017-09-11 14:42 - 2017-09-11 14:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\inread.anyclip.com 2017-09-11 14:42 - 2017-09-11 14:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\inread.anyclip.com\ac# 2017-09-11 14:43 - 2017-09-11 14:43 - 000000503 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-10 17:20 - 2017-09-10 17:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\macromedia.com 2017-09-10 17:20 - 2017-09-10 17:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\macromedia.com\support 2017-09-10 17:20 - 2017-09-10 17:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\macromedia.com\support\flashplayer 2017-09-10 17:20 - 2017-09-11 14:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\macromedia.com\support\flashplayer\sys 2017-09-10 17:20 - 2017-09-11 14:42 - 000000513 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 17:20 - 2017-09-10 17:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 17:20 - 2017-09-10 17:20 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 17:20 - 2017-09-10 17:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 17:20 - 2017-09-10 17:20 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 17:20 - 2017-09-10 17:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 17:20 - 2017-09-10 17:20 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 17:21 - 2017-09-10 17:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 17:21 - 2017-09-10 17:21 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 17:20 - 2017-09-10 17:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 17:20 - 2017-09-10 17:20 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 14:42 - 2017-09-11 14:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 14:42 - 2017-09-11 14:42 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data605\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BGSNEXBT\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-11 18:36 - 2017-09-12 04:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606 2017-09-11 18:36 - 2017-09-12 04:29 - 000229376 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Cookies 2017-09-11 18:36 - 2017-09-12 04:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Cookies-journal 2017-09-11 18:40 - 2017-09-12 04:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\File System 2017-09-11 18:40 - 2017-09-11 18:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\File System\000 2017-09-11 18:40 - 2017-09-11 18:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\File System\000\t 2017-09-12 04:24 - 2017-09-12 04:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\File System\001 2017-09-12 04:24 - 2017-09-12 04:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\File System\001\t 2017-09-12 04:26 - 2017-09-12 04:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\File System\002 2017-09-12 04:26 - 2017-09-12 04:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\File System\002\t 2017-09-11 18:40 - 2017-09-12 04:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\File System\Origins 2017-09-11 18:40 - 2017-09-12 04:28 - 000000254 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\File System\Origins\000003.log 2017-09-11 18:40 - 2017-09-11 18:40 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\File System\Origins\CURRENT 2017-09-11 18:40 - 2017-09-11 18:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\File System\Origins\LOCK 2017-09-11 18:40 - 2017-09-12 04:26 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\File System\Origins\LOG 2017-09-11 18:40 - 2017-09-12 04:24 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\File System\Origins\LOG.old 2017-09-11 18:40 - 2017-09-11 18:40 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\File System\Origins\MANIFEST-000001 2017-09-11 18:36 - 2017-09-12 04:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage 2017-09-11 18:36 - 2017-09-11 18:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 18:40 - 2017-09-11 18:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-11 18:40 - 2017-09-11 18:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-11 18:38 - 2017-09-12 04:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 18:38 - 2017-09-12 04:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-12 04:25 - 2017-09-12 04:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.complex.com_0.localstorage 2017-09-12 04:25 - 2017-09-12 04:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-12 04:24 - 2017-09-12 04:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.crash.net_0.localstorage 2017-09-12 04:24 - 2017-09-12 04:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-11 18:42 - 2017-09-11 18:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.food.com_0.localstorage 2017-09-11 18:42 - 2017-09-11 18:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-11 18:40 - 2017-09-11 18:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-11 18:40 - 2017-09-11 18:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-11 18:39 - 2017-09-11 18:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-11 18:39 - 2017-09-11 18:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-11 18:41 - 2017-09-11 18:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.history.com_0.localstorage 2017-09-11 18:41 - 2017-09-11 18:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.history.com_0.localstorage-journal 2017-09-12 04:24 - 2017-09-12 04:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-12 04:24 - 2017-09-12 04:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-12 04:21 - 2017-09-12 04:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.livescore.com_0.localstorage 2017-09-12 04:21 - 2017-09-12 04:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.livescore.com_0.localstorage-journal 2017-09-12 04:27 - 2017-09-12 04:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.macworld.com_0.localstorage 2017-09-12 04:27 - 2017-09-12 04:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-11 18:39 - 2017-09-11 18:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 18:39 - 2017-09-11 18:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-12 04:26 - 2017-09-12 04:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-12 04:26 - 2017-09-12 04:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-11 18:38 - 2017-09-11 18:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 18:38 - 2017-09-11 18:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-12 04:24 - 2017-09-12 04:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.parents.com_0.localstorage 2017-09-12 04:24 - 2017-09-12 04:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-11 18:36 - 2017-09-11 18:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.quiksilver.com_0.localstorage 2017-09-11 18:36 - 2017-09-11 18:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\http_www.quiksilver.com_0.localstorage-journal 2017-09-11 18:36 - 2017-09-11 18:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\https_assets.bounceexchange.com_0.localstorage 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\https_assets.bounceexchange.com_0.localstorage-journal 2017-09-12 04:25 - 2017-09-12 04:25 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\https_c.betrad.com_0.localstorage 2017-09-12 04:25 - 2017-09-12 04:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 18:36 - 2017-09-11 18:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\https_cdn-gl.imrworldwide.com_0.localstorage 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\https_cdn-gl.imrworldwide.com_0.localstorage-journal 2017-09-11 18:36 - 2017-09-11 18:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\https_secure-au.imrworldwide.com_0.localstorage 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\https_secure-au.imrworldwide.com_0.localstorage-journal 2017-09-11 18:36 - 2017-09-11 18:37 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 18:36 - 2017-09-11 18:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 18:36 - 2017-09-11 18:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\https_www.babycentre.co.uk_0.localstorage 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Local Storage\https_www.babycentre.co.uk_0.localstorage-journal 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data 2017-09-11 18:36 - 2017-09-12 04:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\55SQYV22 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 18:36 - 2017-09-11 18:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q 2017-09-11 18:36 - 2017-09-12 04:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\cdn.stickyadstv.com 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\cdncache-a.akamaihd.net 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\cdncache-a.akamaihd.net\items 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 18:36 - 2017-09-11 18:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 18:36 - 2017-09-11 18:42 - 000000475 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 18:36 - 2017-09-12 04:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\eereader.com 2017-09-12 04:26 - 2017-09-12 04:26 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\eereader.com\analytics.sol 2017-09-11 18:38 - 2017-09-12 04:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\efreader.com 2017-09-12 04:28 - 2017-09-12 04:28 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\efreader.com\analytics.sol 2017-09-11 18:36 - 2017-09-12 04:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\egreader.com 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\macromedia.com 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\macromedia.com\support 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\macromedia.com\support\flashplayer 2017-09-11 18:36 - 2017-09-11 18:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\macromedia.com\support\flashplayer\sys 2017-09-11 18:36 - 2017-09-11 18:39 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 18:36 - 2017-09-11 18:36 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 18:36 - 2017-09-11 18:36 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 18:36 - 2017-09-11 18:36 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 18:38 - 2017-09-11 18:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 18:38 - 2017-09-11 18:38 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 18:36 - 2017-09-11 18:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 18:36 - 2017-09-11 18:36 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data606\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TSH23W7Q\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-09 22:36 - 2017-09-10 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607 2017-09-09 22:36 - 2017-09-09 22:44 - 000193536 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Cookies 2017-09-09 22:36 - 2017-09-09 22:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Cookies-journal 2017-09-09 22:39 - 2017-09-09 22:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\File System 2017-09-09 22:44 - 2017-09-09 22:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\File System\001 2017-09-09 22:44 - 2017-09-09 22:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\File System\001\t 2017-09-09 22:39 - 2017-09-09 22:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\File System\Origins 2017-09-09 22:39 - 2017-09-09 22:46 - 000000170 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\File System\Origins\000003.log 2017-09-09 22:39 - 2017-09-09 22:39 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\File System\Origins\CURRENT 2017-09-09 22:39 - 2017-09-09 22:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\File System\Origins\LOCK 2017-09-09 22:39 - 2017-09-09 22:44 - 000001061 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\File System\Origins\LOG 2017-09-09 22:39 - 2017-09-09 22:41 - 000001494 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\File System\Origins\LOG.old 2017-09-09 22:39 - 2017-09-09 22:39 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\File System\Origins\MANIFEST-000001 2017-09-09 22:40 - 2017-09-09 22:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\File System\Origins\lost 2017-09-09 22:36 - 2017-09-09 22:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage 2017-09-09 22:43 - 2017-09-09 22:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage\http_allrecipes.com_0.localstorage 2017-09-09 22:43 - 2017-09-09 22:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-09 22:41 - 2017-09-09 22:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-09 22:41 - 2017-09-09 22:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-09 22:36 - 2017-09-09 22:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage\http_www.bitlanders.com_0.localstorage 2017-09-09 22:36 - 2017-09-09 22:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage\http_www.bitlanders.com_0.localstorage-journal 2017-09-09 22:40 - 2017-09-09 22:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage\http_www.crash.net_0.localstorage 2017-09-09 22:40 - 2017-09-09 22:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-09 22:39 - 2017-09-09 22:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-09 22:39 - 2017-09-09 22:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-09 22:38 - 2017-09-09 22:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-09 22:38 - 2017-09-09 22:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-09 22:41 - 2017-09-09 22:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage\http_www.macworld.com_0.localstorage 2017-09-09 22:41 - 2017-09-09 22:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-09 22:39 - 2017-09-09 22:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage\http_www.mylifetime.com_0.localstorage 2017-09-09 22:39 - 2017-09-09 22:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage\http_www.mylifetime.com_0.localstorage-journal 2017-09-09 22:38 - 2017-09-09 22:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage\http_www.nfl.com_0.localstorage 2017-09-09 22:38 - 2017-09-09 22:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-09 22:39 - 2017-09-09 22:41 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-09 22:39 - 2017-09-09 22:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-09 22:36 - 2017-09-09 22:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data 2017-09-09 22:36 - 2017-09-09 22:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash 2017-09-09 22:36 - 2017-09-09 22:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-09 22:36 - 2017-09-09 22:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-09 22:36 - 2017-09-09 22:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\T6BPRAMH 2017-09-09 22:36 - 2017-09-09 22:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot 2017-09-09 22:36 - 2017-09-09 22:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-09 22:36 - 2017-09-09 22:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9 2017-09-09 22:36 - 2017-09-09 22:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\cdn.stickyadstv.com 2017-09-09 22:36 - 2017-09-09 22:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\eereader.com 2017-09-09 22:38 - 2017-09-09 22:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\efreader.com 2017-09-09 22:46 - 2017-09-09 22:46 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\efreader.com\analytics.sol 2017-09-09 22:36 - 2017-09-09 22:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\egreader.com 2017-09-09 22:41 - 2017-09-09 22:41 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\egreader.com\analytics.sol 2017-09-09 22:36 - 2017-09-09 22:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\macromedia.com 2017-09-09 22:36 - 2017-09-09 22:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\macromedia.com\support 2017-09-09 22:36 - 2017-09-09 22:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\macromedia.com\support\flashplayer 2017-09-09 22:36 - 2017-09-09 22:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\macromedia.com\support\flashplayer\sys 2017-09-09 22:36 - 2017-09-09 22:38 - 000000464 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-09 22:36 - 2017-09-09 22:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-09 22:36 - 2017-09-09 22:36 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-09 22:36 - 2017-09-09 22:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-09 22:36 - 2017-09-09 22:36 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-09 22:38 - 2017-09-09 22:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-09 22:38 - 2017-09-09 22:38 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-09 22:36 - 2017-09-09 22:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-09 22:36 - 2017-09-09 22:36 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-09 22:36 - 2017-09-09 22:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\macromedia.com\support\flashplayer\sys\#static.bitlanders.com 2017-09-09 22:36 - 2017-09-09 22:36 - 000000091 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\macromedia.com\support\flashplayer\sys\#static.bitlanders.com\settings.sol 2017-09-09 22:36 - 2017-09-09 22:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data607\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KLRTSV9\static.bitlanders.com 2017-09-10 16:09 - 2017-09-12 00:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608 2017-09-10 16:09 - 2017-09-11 23:26 - 000368640 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Cookies 2017-09-10 16:09 - 2017-09-11 23:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Cookies-journal 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\databases 2017-09-10 16:09 - 2017-09-10 16:09 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\databases\Databases.db 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\databases\Databases.db-journal 2017-09-10 16:09 - 2017-09-11 23:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\File System 2017-09-11 23:25 - 2017-09-11 23:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\File System\002 2017-09-11 23:25 - 2017-09-11 23:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\File System\002\t 2017-09-11 23:23 - 2017-09-11 23:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\File System\005 2017-09-11 23:23 - 2017-09-11 23:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\File System\005\t 2017-09-11 23:24 - 2017-09-11 23:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\File System\005\t\Paths 2017-09-11 23:24 - 2017-09-11 23:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\File System\005\t\Paths\000003.log 2017-09-11 23:24 - 2017-09-11 23:24 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\File System\005\t\Paths\CURRENT 2017-09-11 23:24 - 2017-09-11 23:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\File System\005\t\Paths\LOCK 2017-09-11 23:24 - 2017-09-11 23:24 - 000000131 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\File System\005\t\Paths\LOG 2017-09-11 23:24 - 2017-09-11 23:24 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\File System\005\t\Paths\MANIFEST-000001 2017-09-10 16:09 - 2017-09-11 23:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\File System\Origins 2017-09-10 16:09 - 2017-09-11 23:23 - 000000458 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\File System\Origins\000003.log 2017-09-10 16:09 - 2017-09-10 16:09 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\File System\Origins\CURRENT 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\File System\Origins\LOCK 2017-09-10 16:09 - 2017-09-11 23:25 - 000000393 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\File System\Origins\LOG 2017-09-10 16:09 - 2017-09-11 23:25 - 000000744 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\File System\Origins\LOG.old 2017-09-10 16:09 - 2017-09-10 16:09 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\File System\Origins\MANIFEST-000001 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\File System\Origins\lost 2017-09-10 16:09 - 2017-09-11 23:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB 2017-09-11 23:24 - 2017-09-11 23:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_blogs.nfl.com_0.indexeddb.leveldb 2017-09-11 23:24 - 2017-09-11 23:24 - 000000176 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_blogs.nfl.com_0.indexeddb.leveldb\000003.log 2017-09-11 23:24 - 2017-09-11 23:24 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_blogs.nfl.com_0.indexeddb.leveldb\CURRENT 2017-09-11 23:24 - 2017-09-11 23:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_blogs.nfl.com_0.indexeddb.leveldb\LOCK 2017-09-11 23:24 - 2017-09-11 23:24 - 000000156 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_blogs.nfl.com_0.indexeddb.leveldb\LOG 2017-09-11 23:24 - 2017-09-11 23:24 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_blogs.nfl.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 19:27 - 2017-09-11 19:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_es.oakley.com_0.indexeddb.leveldb 2017-09-11 19:27 - 2017-09-11 19:27 - 000000378 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_es.oakley.com_0.indexeddb.leveldb\000003.log 2017-09-11 19:27 - 2017-09-11 19:27 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_es.oakley.com_0.indexeddb.leveldb\CURRENT 2017-09-11 19:27 - 2017-09-11 19:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_es.oakley.com_0.indexeddb.leveldb\LOCK 2017-09-11 19:27 - 2017-09-11 19:27 - 000000157 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_es.oakley.com_0.indexeddb.leveldb\LOG 2017-09-11 19:27 - 2017-09-11 19:27 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_es.oakley.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 22:53 - 2017-09-10 22:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_www.detroitnews.com_0.indexeddb.leveldb 2017-09-10 22:53 - 2017-09-10 22:53 - 000000188 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_www.detroitnews.com_0.indexeddb.leveldb\000003.log 2017-09-10 22:53 - 2017-09-10 22:53 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_www.detroitnews.com_0.indexeddb.leveldb\CURRENT 2017-09-10 22:53 - 2017-09-10 22:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_www.detroitnews.com_0.indexeddb.leveldb\LOCK 2017-09-10 22:53 - 2017-09-10 22:53 - 000000162 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_www.detroitnews.com_0.indexeddb.leveldb\LOG 2017-09-10 22:53 - 2017-09-10 22:53 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_www.detroitnews.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 23:23 - 2017-09-11 23:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_www.insideedition.com_0.indexeddb.leveldb 2017-09-11 23:23 - 2017-09-11 23:23 - 000000192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_www.insideedition.com_0.indexeddb.leveldb\000003.log 2017-09-11 23:23 - 2017-09-11 23:23 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_www.insideedition.com_0.indexeddb.leveldb\CURRENT 2017-09-11 23:23 - 2017-09-11 23:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_www.insideedition.com_0.indexeddb.leveldb\LOCK 2017-09-11 23:23 - 2017-09-11 23:23 - 000000164 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_www.insideedition.com_0.indexeddb.leveldb\LOG 2017-09-11 23:23 - 2017-09-11 23:23 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_www.insideedition.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 19:27 - 2017-09-11 19:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_www.oakley.com_0.indexeddb.leveldb 2017-09-11 19:27 - 2017-09-11 19:27 - 000000380 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_www.oakley.com_0.indexeddb.leveldb\000003.log 2017-09-11 19:27 - 2017-09-11 19:27 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_www.oakley.com_0.indexeddb.leveldb\CURRENT 2017-09-11 19:27 - 2017-09-11 19:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_www.oakley.com_0.indexeddb.leveldb\LOCK 2017-09-11 19:27 - 2017-09-11 19:27 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_www.oakley.com_0.indexeddb.leveldb\LOG 2017-09-11 19:27 - 2017-09-11 19:27 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\http_www.oakley.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\https_www.budget.com_0.indexeddb.leveldb 2017-09-10 16:09 - 2017-09-10 16:09 - 000000345 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\https_www.budget.com_0.indexeddb.leveldb\000003.log 2017-09-10 16:09 - 2017-09-10 16:09 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\https_www.budget.com_0.indexeddb.leveldb\CURRENT 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\https_www.budget.com_0.indexeddb.leveldb\LOCK 2017-09-10 16:09 - 2017-09-10 16:09 - 000000157 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\https_www.budget.com_0.indexeddb.leveldb\LOG 2017-09-10 16:09 - 2017-09-10 16:09 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\IndexedDB\https_www.budget.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 16:09 - 2017-09-11 23:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage 2017-09-10 16:09 - 2017-09-10 16:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_1000spins.com_0.localstorage 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_1000spins.com_0.localstorage-journal 2017-09-10 22:53 - 2017-09-10 22:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_ad.doubleclick.net_0.localstorage 2017-09-10 22:53 - 2017-09-10 22:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_ad.doubleclick.net_0.localstorage-journal 2017-09-10 19:37 - 2017-09-11 23:25 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_allrecipes.com_0.localstorage 2017-09-10 19:37 - 2017-09-11 23:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-10 19:33 - 2017-09-10 19:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 19:33 - 2017-09-10 19:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 23:18 - 2017-09-11 23:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 23:18 - 2017-09-11 23:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 22:53 - 2017-09-10 22:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_connexity.net_0.localstorage 2017-09-10 22:53 - 2017-09-10 22:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 19:27 - 2017-09-11 19:28 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_es.oakley.com_0.localstorage 2017-09-11 19:27 - 2017-09-11 19:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_es.oakley.com_0.localstorage-journal 2017-09-11 19:27 - 2017-09-11 19:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_gateway.answerscloud.com_0.localstorage 2017-09-11 19:27 - 2017-09-11 19:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_gateway.answerscloud.com_0.localstorage-journal 2017-09-10 22:54 - 2017-09-10 22:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_gateway.foresee.com_0.localstorage 2017-09-10 22:54 - 2017-09-10 22:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_gateway.foresee.com_0.localstorage-journal 2017-09-11 19:27 - 2017-09-11 19:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_hades.srvtrck.com_0.localstorage 2017-09-11 19:27 - 2017-09-11 19:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_hades.srvtrck.com_0.localstorage-journal 2017-09-11 19:28 - 2017-09-11 19:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_nflfilms.nfl.com_0.localstorage 2017-09-11 19:28 - 2017-09-11 19:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_nflfilms.nfl.com_0.localstorage-journal 2017-09-10 16:09 - 2017-09-10 16:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 16:09 - 2017-09-10 22:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 16:09 - 2017-09-10 22:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 23:23 - 2017-09-11 23:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_thetop.tv_0.localstorage 2017-09-11 23:23 - 2017-09-11 23:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_thetop.tv_0.localstorage-journal 2017-09-11 23:22 - 2017-09-11 23:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-11 23:22 - 2017-09-11 23:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-10 22:55 - 2017-09-10 22:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.businessinsider.com_0.localstorage 2017-09-10 22:55 - 2017-09-10 22:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.businessinsider.com_0.localstorage-journal 2017-09-10 19:33 - 2017-09-11 23:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 19:33 - 2017-09-11 23:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 19:36 - 2017-09-10 22:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.complex.com_0.localstorage 2017-09-10 19:36 - 2017-09-10 22:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-10 22:56 - 2017-09-11 23:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.courant.com_0.localstorage 2017-09-10 22:56 - 2017-09-11 23:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-11 23:18 - 2017-09-11 23:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.cpopowermatic.com_0.localstorage 2017-09-11 23:18 - 2017-09-11 23:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.cpopowermatic.com_0.localstorage-journal 2017-09-10 22:53 - 2017-09-10 22:54 - 000009216 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.detroitnews.com_0.localstorage 2017-09-10 22:53 - 2017-09-10 22:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.detroitnews.com_0.localstorage-journal 2017-09-10 19:35 - 2017-09-10 19:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-10 19:35 - 2017-09-10 19:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-10 22:54 - 2017-09-10 22:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.fastgames.com_0.localstorage 2017-09-10 22:54 - 2017-09-10 22:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.fastgames.com_0.localstorage-journal 2017-09-10 16:09 - 2017-09-10 16:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.goodhousekeeping.com_0.localstorage 2017-09-10 16:09 - 2017-09-10 16:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.goodhousekeeping.com_0.localstorage-journal 2017-09-10 19:35 - 2017-09-10 19:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-10 19:35 - 2017-09-10 19:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-11 23:21 - 2017-09-11 23:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.insideedition.com_0.localstorage 2017-09-11 23:21 - 2017-09-11 23:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.insideedition.com_0.localstorage-journal 2017-09-10 19:33 - 2017-09-10 22:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 19:33 - 2017-09-10 22:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 22:56 - 2017-09-10 22:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.islandpacket.com_0.localstorage 2017-09-10 22:56 - 2017-09-10 22:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.islandpacket.com_0.localstorage-journal 2017-09-11 23:20 - 2017-09-11 23:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-11 23:20 - 2017-09-11 23:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-10 19:31 - 2017-09-10 19:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.livescore.com_0.localstorage 2017-09-10 19:31 - 2017-09-10 19:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.livescore.com_0.localstorage-journal 2017-09-11 19:32 - 2017-09-11 19:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.macworld.com_0.localstorage 2017-09-11 19:32 - 2017-09-11 19:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-10 19:34 - 2017-09-10 19:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.mylifetime.com_0.localstorage 2017-09-10 19:34 - 2017-09-10 19:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.mylifetime.com_0.localstorage-journal 2017-09-11 19:28 - 2017-09-11 23:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.nbc.com_0.localstorage 2017-09-11 19:28 - 2017-09-11 23:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.nbc.com_0.localstorage-journal 2017-09-10 19:37 - 2017-09-10 19:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 19:37 - 2017-09-10 19:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 19:27 - 2017-09-11 19:28 - 000011264 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.oakley.com_0.localstorage 2017-09-11 19:27 - 2017-09-11 19:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.oakley.com_0.localstorage-journal 2017-09-10 22:56 - 2017-09-10 22:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.parents.com_0.localstorage 2017-09-10 22:56 - 2017-09-10 22:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-10 22:53 - 2017-09-10 22:54 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.saksoff5th.com_0.localstorage 2017-09-10 22:53 - 2017-09-10 22:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.saksoff5th.com_0.localstorage-journal 2017-09-11 23:18 - 2017-09-11 23:19 - 000012288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.tmz.com_0.localstorage 2017-09-11 23:18 - 2017-09-11 23:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.tmz.com_0.localstorage-journal 2017-09-10 19:36 - 2017-09-10 19:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.today.com_0.localstorage 2017-09-10 19:36 - 2017-09-10 19:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.today.com_0.localstorage-journal 2017-09-10 22:59 - 2017-09-10 22:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.vogue.com.cn_0.localstorage 2017-09-10 22:59 - 2017-09-10 22:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.vogue.com.cn_0.localstorage-journal 2017-09-11 19:26 - 2017-09-11 19:28 - 000009216 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.wikihow.com_0.localstorage 2017-09-11 19:26 - 2017-09-11 19:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\http_www.wikihow.com_0.localstorage-journal 2017-09-11 19:27 - 2017-09-11 19:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_assets.bounceexchange.com_0.localstorage 2017-09-11 19:27 - 2017-09-11 19:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_assets.bounceexchange.com_0.localstorage-journal 2017-09-10 22:57 - 2017-09-10 22:57 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 22:57 - 2017-09-10 22:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 22:53 - 2017-09-10 22:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_connexity.net_0.localstorage 2017-09-10 22:53 - 2017-09-10 22:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 22:53 - 2017-09-10 22:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_content.shoprunner.com_0.localstorage 2017-09-10 22:53 - 2017-09-10 22:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_content.shoprunner.com_0.localstorage-journal 2017-09-10 16:09 - 2017-09-11 19:27 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 16:09 - 2017-09-11 19:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 19:27 - 2017-09-11 19:28 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage 2017-09-11 19:27 - 2017-09-11 19:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_d22j4fzzszoii2.cloudfront.net_0.localstorage-journal 2017-09-10 16:09 - 2017-09-10 16:10 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 16:09 - 2017-09-10 16:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 19:27 - 2017-09-11 19:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_s.salecycle.com_0.localstorage 2017-09-11 19:27 - 2017-09-11 19:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_s.salecycle.com_0.localstorage-journal 2017-09-10 16:09 - 2017-09-11 19:28 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 16:09 - 2017-09-11 19:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 22:54 - 2017-09-10 22:54 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_uhytajrtpo-a.akamaihd.net_0.localstorage 2017-09-10 22:54 - 2017-09-10 22:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_uhytajrtpo-a.akamaihd.net_0.localstorage-journal 2017-09-10 16:09 - 2017-09-10 16:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_www.budget.com_0.localstorage 2017-09-10 16:09 - 2017-09-10 16:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_www.budget.com_0.localstorage-journal 2017-09-10 19:32 - 2017-09-10 19:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_www.google.com_0.localstorage 2017-09-10 19:32 - 2017-09-10 19:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_www.google.com_0.localstorage-journal 2017-09-10 19:31 - 2017-09-10 19:31 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_www.wine.com_0.localstorage 2017-09-10 19:31 - 2017-09-10 19:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_www.wine.com_0.localstorage-journal 2017-09-11 23:18 - 2017-09-11 23:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_www.youtube.com_0.localstorage 2017-09-11 23:18 - 2017-09-11 23:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data 2017-09-10 16:09 - 2017-09-11 23:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\R3J7LLYH 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 16:09 - 2017-09-11 23:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA 2017-09-11 23:19 - 2017-09-11 23:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\cdn.dashbid.io 2017-09-11 23:19 - 2017-09-11 23:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\cdn.dashbid.io\prod 2017-09-11 23:19 - 2017-09-11 23:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-11 23:19 - 2017-09-11 23:19 - 000000069 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-10 16:09 - 2017-09-11 23:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\cdn.stickyadstv.com 2017-09-11 19:27 - 2017-09-11 19:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\cdn.tremormedia.com 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\cdncache-a.akamaihd.net 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\cdncache-a.akamaihd.net\items 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 16:09 - 2017-09-11 19:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 16:09 - 2017-09-11 19:32 - 000000579 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 16:09 - 2017-09-11 23:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\eereader.com 2017-09-10 19:33 - 2017-09-11 23:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\efreader.com 2017-09-10 23:01 - 2017-09-11 23:26 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\efreader.com\analytics.sol 2017-09-10 19:31 - 2017-09-11 23:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\egreader.com 2017-09-11 23:22 - 2017-09-11 23:22 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\egreader.com\analytics.sol 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com\support 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com\support\flashplayer 2017-09-10 16:09 - 2017-09-11 23:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com\support\flashplayer\sys 2017-09-10 16:09 - 2017-09-11 23:19 - 000000559 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 23:19 - 2017-09-11 23:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-11 23:19 - 2017-09-11 23:19 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 16:09 - 2017-09-10 16:09 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 19:27 - 2017-09-11 19:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com\support\flashplayer\sys\#cdn.tremormedia.com 2017-09-11 19:27 - 2017-09-11 19:27 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com\support\flashplayer\sys\#cdn.tremormedia.com\settings.sol 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 16:09 - 2017-09-10 16:09 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 16:09 - 2017-09-10 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 16:09 - 2017-09-10 16:09 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 19:33 - 2017-09-10 19:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 19:33 - 2017-09-10 19:33 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 19:31 - 2017-09-10 19:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 19:31 - 2017-09-10 19:31 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 19:27 - 2017-09-11 19:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com 2017-09-11 19:27 - 2017-09-11 19:27 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com\settings.sol 2017-09-11 19:27 - 2017-09-11 19:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\objects.tremormedia.com 2017-09-11 19:27 - 2017-09-11 19:27 - 000000072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data608\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G86Y4EQA\objects.tremormedia.com\com.quantserve.sol 2017-09-10 02:16 - 2017-09-11 09:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609 2017-09-10 02:16 - 2017-09-11 07:49 - 000309248 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Cookies 2017-09-10 23:33 - 2017-09-11 07:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Cookies-journal 2017-09-10 02:16 - 2017-09-10 02:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\databases 2017-09-10 02:16 - 2017-09-10 02:16 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\databases\Databases.db 2017-09-10 02:16 - 2017-09-10 02:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\databases\Databases.db-journal 2017-09-10 02:17 - 2017-09-11 07:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\File System 2017-09-10 02:17 - 2017-09-10 02:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\File System\000 2017-09-10 02:17 - 2017-09-10 02:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\File System\000\t 2017-09-10 02:20 - 2017-09-10 02:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\File System\001 2017-09-10 02:20 - 2017-09-10 02:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\File System\001\t 2017-09-10 02:21 - 2017-09-10 02:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\File System\002 2017-09-10 02:21 - 2017-09-10 02:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\File System\002\t 2017-09-10 23:35 - 2017-09-10 23:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\File System\003 2017-09-10 23:35 - 2017-09-10 23:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\File System\003\t 2017-09-10 23:41 - 2017-09-10 23:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\File System\004 2017-09-10 23:41 - 2017-09-10 23:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\File System\004\t 2017-09-11 07:46 - 2017-09-11 07:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\File System\005 2017-09-11 07:46 - 2017-09-11 07:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\File System\005\t 2017-09-10 02:17 - 2017-09-11 07:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\File System\Origins 2017-09-10 02:17 - 2017-09-11 07:48 - 000000449 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\File System\Origins\000003.log 2017-09-10 02:17 - 2017-09-10 02:17 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\File System\Origins\CURRENT 2017-09-10 02:17 - 2017-09-10 02:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\File System\Origins\LOCK 2017-09-10 02:17 - 2017-09-11 07:47 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\File System\Origins\LOG 2017-09-10 02:17 - 2017-09-11 07:44 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\File System\Origins\LOG.old 2017-09-10 02:17 - 2017-09-10 02:17 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\File System\Origins\MANIFEST-000001 2017-09-10 02:16 - 2017-09-10 02:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\IndexedDB 2017-09-10 02:16 - 2017-09-10 02:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb 2017-09-10 02:16 - 2017-09-10 02:16 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb\000003.log 2017-09-10 02:16 - 2017-09-10 02:16 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb\CURRENT 2017-09-10 02:16 - 2017-09-10 02:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb\LOCK 2017-09-10 02:16 - 2017-09-10 02:16 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb\LOG 2017-09-10 02:16 - 2017-09-10 02:16 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 02:16 - 2017-09-11 07:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage 2017-09-10 23:35 - 2017-09-10 23:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 23:35 - 2017-09-10 23:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 02:20 - 2017-09-10 02:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 02:20 - 2017-09-10 02:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 02:16 - 2017-09-10 02:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_cdn-gl.imrworldwide.com_0.localstorage 2017-09-10 02:16 - 2017-09-10 02:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_cdn-gl.imrworldwide.com_0.localstorage-journal 2017-09-10 23:35 - 2017-09-10 23:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_connexity.net_0.localstorage 2017-09-10 23:35 - 2017-09-10 23:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 02:23 - 2017-09-10 02:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_mashable.com_0.localstorage 2017-09-10 02:23 - 2017-09-10 02:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_mashable.com_0.localstorage-journal 2017-09-10 02:17 - 2017-09-10 02:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 02:17 - 2017-09-10 02:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 02:20 - 2017-09-10 02:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_tpc.googlesyndication.com_0.localstorage 2017-09-10 02:20 - 2017-09-10 02:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_tpc.googlesyndication.com_0.localstorage-journal 2017-09-10 02:22 - 2017-09-10 02:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.blabbermouth.net_0.localstorage 2017-09-10 02:22 - 2017-09-10 02:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.blabbermouth.net_0.localstorage-journal 2017-09-10 23:37 - 2017-09-10 23:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.bounty.com_0.localstorage 2017-09-10 23:37 - 2017-09-10 23:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.bounty.com_0.localstorage-journal 2017-09-11 07:47 - 2017-09-11 07:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.cbs.com_0.localstorage 2017-09-11 07:47 - 2017-09-11 07:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.cbs.com_0.localstorage-journal 2017-09-10 23:35 - 2017-09-10 23:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 23:35 - 2017-09-10 23:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 07:45 - 2017-09-11 07:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.complex.com_0.localstorage 2017-09-11 07:45 - 2017-09-11 07:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-11 07:45 - 2017-09-11 07:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.courant.com_0.localstorage 2017-09-11 07:45 - 2017-09-11 07:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-10 23:38 - 2017-09-10 23:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.ehow.com_0.localstorage 2017-09-10 23:38 - 2017-09-10 23:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.ehow.com_0.localstorage-journal 2017-09-10 23:33 - 2017-09-10 23:34 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.express.co.uk_0.localstorage 2017-09-10 23:33 - 2017-09-10 23:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.express.co.uk_0.localstorage-journal 2017-09-10 02:22 - 2017-09-10 02:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.fandango.com_0.localstorage 2017-09-10 02:22 - 2017-09-10 02:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.fandango.com_0.localstorage-journal 2017-09-10 02:21 - 2017-09-10 02:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.finecooking.com_0.localstorage 2017-09-10 02:21 - 2017-09-10 02:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.finecooking.com_0.localstorage-journal 2017-09-10 23:39 - 2017-09-10 23:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.food.com_0.localstorage 2017-09-10 23:39 - 2017-09-10 23:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-10 23:36 - 2017-09-10 23:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.foxnews.com_0.localstorage 2017-09-10 23:36 - 2017-09-10 23:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.foxnews.com_0.localstorage-journal 2017-09-10 02:16 - 2017-09-10 02:17 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.hollywood.com_0.localstorage 2017-09-10 02:16 - 2017-09-10 02:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.hollywood.com_0.localstorage-journal 2017-09-11 07:45 - 2017-09-11 07:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.instyle.com_0.localstorage 2017-09-11 07:45 - 2017-09-11 07:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-10 23:36 - 2017-09-10 23:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.insurancejournal.tv_0.localstorage 2017-09-10 23:36 - 2017-09-10 23:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.insurancejournal.tv_0.localstorage-journal 2017-09-10 02:21 - 2017-09-11 07:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 02:21 - 2017-09-11 07:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 02:16 - 2017-09-10 02:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.laptopbattery.net_0.localstorage 2017-09-10 02:16 - 2017-09-10 02:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.laptopbattery.net_0.localstorage-journal 2017-09-10 02:20 - 2017-09-11 07:45 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-10 02:20 - 2017-09-11 07:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-10 02:23 - 2017-09-10 02:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 02:23 - 2017-09-10 02:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 23:36 - 2017-09-10 23:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.parents.com_0.localstorage 2017-09-10 23:36 - 2017-09-10 23:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-11 07:41 - 2017-09-11 07:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.thesaurus.com_0.localstorage 2017-09-11 07:41 - 2017-09-11 07:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\http_www.thesaurus.com_0.localstorage-journal 2017-09-10 02:16 - 2017-09-10 02:16 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 02:16 - 2017-09-10 02:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 07:41 - 2017-09-11 07:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\https_cdn.krxd.net_0.localstorage 2017-09-11 07:41 - 2017-09-11 07:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\https_cdn.krxd.net_0.localstorage-journal 2017-09-10 23:35 - 2017-09-10 23:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\https_connexity.net_0.localstorage 2017-09-10 23:35 - 2017-09-10 23:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 02:17 - 2017-09-11 07:42 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 02:17 - 2017-09-11 07:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 07:42 - 2017-09-11 07:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\https_hades.srvtrck.com_0.localstorage 2017-09-11 07:42 - 2017-09-11 07:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\https_hades.srvtrck.com_0.localstorage-journal 2017-09-10 23:33 - 2017-09-11 07:42 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 23:33 - 2017-09-11 07:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 02:17 - 2017-09-11 07:42 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 02:17 - 2017-09-11 07:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 23:33 - 2017-09-10 23:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\https_widgets.outbrain.com_0.localstorage 2017-09-10 23:33 - 2017-09-10 23:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\https_widgets.outbrain.com_0.localstorage-journal 2017-09-11 07:41 - 2017-09-11 07:42 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\https_www.mlb.com_0.localstorage 2017-09-11 07:41 - 2017-09-11 07:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\https_www.mlb.com_0.localstorage-journal 2017-09-10 23:33 - 2017-09-10 23:34 - 000011264 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\https_www.rocketlawyer.com_0.localstorage 2017-09-10 23:33 - 2017-09-10 23:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Local Storage\https_www.rocketlawyer.com_0.localstorage-journal 2017-09-10 02:16 - 2017-09-10 02:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data 2017-09-10 02:16 - 2017-09-11 07:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash 2017-09-10 02:16 - 2017-09-10 02:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 02:16 - 2017-09-10 02:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 02:16 - 2017-09-10 02:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\WS7RVXNP 2017-09-10 02:16 - 2017-09-10 02:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 02:16 - 2017-09-10 02:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 02:16 - 2017-09-10 23:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF 2017-09-10 02:16 - 2017-09-11 07:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\cdn.stickyadstv.com 2017-09-10 02:17 - 2017-09-10 02:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\cdncache-a.akamaihd.net 2017-09-10 02:17 - 2017-09-10 02:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\cdncache-a.akamaihd.net\items 2017-09-10 02:17 - 2017-09-10 02:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 02:17 - 2017-09-11 07:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 02:17 - 2017-09-11 07:45 - 000000489 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 02:16 - 2017-09-11 07:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\eereader.com 2017-09-10 02:18 - 2017-09-11 07:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\efreader.com 2017-09-10 23:36 - 2017-09-11 07:48 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\efreader.com\analytics.sol 2017-09-10 02:16 - 2017-09-11 07:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\egreader.com 2017-09-10 02:18 - 2017-09-10 02:18 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\egreader.com\analytics.sol 2017-09-10 02:16 - 2017-09-10 02:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\macromedia.com 2017-09-10 02:16 - 2017-09-10 02:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\macromedia.com\support 2017-09-10 02:16 - 2017-09-10 02:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\macromedia.com\support\flashplayer 2017-09-10 02:16 - 2017-09-10 23:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\macromedia.com\support\flashplayer\sys 2017-09-10 02:16 - 2017-09-10 23:35 - 000000518 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 02:16 - 2017-09-10 02:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 02:16 - 2017-09-10 02:16 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 02:17 - 2017-09-10 02:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 02:17 - 2017-09-10 02:17 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 02:16 - 2017-09-10 02:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 02:16 - 2017-09-10 02:16 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 02:18 - 2017-09-10 02:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 02:18 - 2017-09-10 02:18 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 02:16 - 2017-09-10 02:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 02:16 - 2017-09-10 02:16 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 23:35 - 2017-09-10 23:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com 2017-09-10 23:35 - 2017-09-10 23:35 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com\settings.sol 2017-09-10 23:35 - 2017-09-10 23:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\objects.tremormedia.com 2017-09-10 23:35 - 2017-09-10 23:35 - 000000072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data609\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JDUVBCBF\objects.tremormedia.com\com.quantserve.sol 2017-09-10 13:16 - 2017-09-11 13:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610 2017-09-10 13:16 - 2017-09-11 12:37 - 000245760 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Cookies 2017-09-10 13:16 - 2017-09-11 12:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Cookies-journal 2017-09-11 12:33 - 2017-09-11 12:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\databases 2017-09-11 12:33 - 2017-09-11 12:33 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\databases\Databases.db 2017-09-11 12:33 - 2017-09-11 12:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\databases\Databases.db-journal 2017-09-10 13:20 - 2017-09-10 13:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System 2017-09-10 13:20 - 2017-09-10 13:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\000 2017-09-10 13:20 - 2017-09-11 12:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\000\t 2017-09-11 12:33 - 2017-09-11 12:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\000\t\Paths 2017-09-11 12:33 - 2017-09-11 12:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\000\t\Paths\000003.log 2017-09-11 12:33 - 2017-09-11 12:33 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\000\t\Paths\CURRENT 2017-09-11 12:33 - 2017-09-11 12:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\000\t\Paths\LOCK 2017-09-11 12:33 - 2017-09-11 12:33 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\000\t\Paths\LOG 2017-09-11 12:33 - 2017-09-11 12:33 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\000\t\Paths\MANIFEST-000001 2017-09-10 13:20 - 2017-09-10 13:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\001 2017-09-10 13:20 - 2017-09-11 12:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\001\t 2017-09-11 12:33 - 2017-09-11 12:33 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\001\t\.usage 2017-09-11 12:33 - 2017-09-11 12:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\001\t\Paths 2017-09-11 12:33 - 2017-09-11 12:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\001\t\Paths\000003.log 2017-09-11 12:33 - 2017-09-11 12:33 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\001\t\Paths\CURRENT 2017-09-11 12:33 - 2017-09-11 12:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\001\t\Paths\LOCK 2017-09-11 12:33 - 2017-09-11 12:33 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\001\t\Paths\LOG 2017-09-11 12:33 - 2017-09-11 12:33 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\001\t\Paths\MANIFEST-000001 2017-09-10 13:22 - 2017-09-10 13:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\002 2017-09-10 13:22 - 2017-09-11 12:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\002\t 2017-09-11 12:33 - 2017-09-11 12:33 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\002\t\.usage 2017-09-11 12:33 - 2017-09-11 12:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\002\t\Paths 2017-09-11 12:33 - 2017-09-11 12:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\002\t\Paths\000003.log 2017-09-11 12:33 - 2017-09-11 12:33 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\002\t\Paths\CURRENT 2017-09-11 12:33 - 2017-09-11 12:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\002\t\Paths\LOCK 2017-09-11 12:33 - 2017-09-11 12:33 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\002\t\Paths\LOG 2017-09-11 12:33 - 2017-09-11 12:33 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\002\t\Paths\MANIFEST-000001 2017-09-10 13:23 - 2017-09-10 13:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\003 2017-09-10 13:23 - 2017-09-11 12:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\003\t 2017-09-11 12:33 - 2017-09-11 12:33 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\003\t\.usage 2017-09-11 12:33 - 2017-09-11 12:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\003\t\Paths 2017-09-11 12:33 - 2017-09-11 12:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\003\t\Paths\000003.log 2017-09-11 12:33 - 2017-09-11 12:33 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\003\t\Paths\CURRENT 2017-09-11 12:33 - 2017-09-11 12:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\003\t\Paths\LOCK 2017-09-11 12:33 - 2017-09-11 12:33 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\003\t\Paths\LOG 2017-09-11 12:33 - 2017-09-11 12:33 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\003\t\Paths\MANIFEST-000001 2017-09-10 13:20 - 2017-09-11 12:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\Origins 2017-09-10 13:20 - 2017-09-10 13:25 - 000000312 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\Origins\000003.log 2017-09-11 12:34 - 2017-09-11 12:34 - 000000261 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\Origins\000004.ldb 2017-09-11 12:35 - 2017-09-11 12:35 - 000000261 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\Origins\000005.ldb 2017-09-10 13:20 - 2017-09-10 13:20 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\Origins\CURRENT 2017-09-10 13:20 - 2017-09-10 13:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\Origins\LOCK 2017-09-10 13:20 - 2017-09-11 12:35 - 000000741 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\Origins\LOG 2017-09-10 13:20 - 2017-09-10 13:23 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\Origins\LOG.old 2017-09-10 13:20 - 2017-09-10 13:20 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\Origins\MANIFEST-000001 2017-09-11 12:34 - 2017-09-11 12:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\File System\Origins\lost 2017-09-11 12:33 - 2017-09-11 12:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\IndexedDB 2017-09-11 12:33 - 2017-09-11 12:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb 2017-09-11 12:33 - 2017-09-11 12:33 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb\000003.log 2017-09-11 12:33 - 2017-09-11 12:33 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb\CURRENT 2017-09-11 12:33 - 2017-09-11 12:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb\LOCK 2017-09-11 12:33 - 2017-09-11 12:33 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb\LOG 2017-09-11 12:33 - 2017-09-11 12:33 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 13:16 - 2017-09-11 12:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage 2017-09-10 13:22 - 2017-09-10 13:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_allrecipes.com_0.localstorage 2017-09-10 13:22 - 2017-09-10 13:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-11 12:30 - 2017-09-11 12:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 12:30 - 2017-09-11 12:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 13:18 - 2017-09-10 13:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_connexity.net_0.localstorage 2017-09-10 13:18 - 2017-09-10 13:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 12:31 - 2017-09-11 12:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_davedameshek.nfl.com_0.localstorage 2017-09-11 12:31 - 2017-09-11 12:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_davedameshek.nfl.com_0.localstorage-journal 2017-09-10 13:21 - 2017-09-10 13:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_nadaguides.com_0.localstorage 2017-09-10 13:21 - 2017-09-10 13:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_nadaguides.com_0.localstorage-journal 2017-09-11 12:29 - 2017-09-11 12:30 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 12:29 - 2017-09-11 12:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 13:16 - 2017-09-10 13:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_secure-us.imrworldwide.com_0.localstorage 2017-09-10 13:16 - 2017-09-10 13:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_secure-us.imrworldwide.com_0.localstorage-journal 2017-09-11 12:36 - 2017-09-11 12:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.aetv.com_0.localstorage 2017-09-11 12:36 - 2017-09-11 12:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.aetv.com_0.localstorage-journal 2017-09-11 12:33 - 2017-09-11 12:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-11 12:33 - 2017-09-11 12:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-10 13:20 - 2017-09-10 13:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.bounty.com_0.localstorage 2017-09-10 13:20 - 2017-09-10 13:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.bounty.com_0.localstorage-journal 2017-09-10 13:18 - 2017-09-10 13:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 13:18 - 2017-09-10 13:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 12:30 - 2017-09-11 12:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.citysearch.com_0.localstorage 2017-09-11 12:30 - 2017-09-11 12:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.citysearch.com_0.localstorage-journal 2017-09-10 13:20 - 2017-09-10 13:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-10 13:20 - 2017-09-10 13:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-11 12:29 - 2017-09-11 12:30 - 000011264 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.familycircle.com_0.localstorage 2017-09-11 12:29 - 2017-09-11 12:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.familycircle.com_0.localstorage-journal 2017-09-11 12:34 - 2017-09-11 12:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.foxnews.com_0.localstorage 2017-09-11 12:34 - 2017-09-11 12:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.foxnews.com_0.localstorage-journal 2017-09-11 12:29 - 2017-09-11 12:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.fruitoftheloom.com_0.localstorage 2017-09-11 12:29 - 2017-09-11 12:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.fruitoftheloom.com_0.localstorage-journal 2017-09-11 12:32 - 2017-09-11 12:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.insurancejournal.tv_0.localstorage 2017-09-11 12:32 - 2017-09-11 12:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.insurancejournal.tv_0.localstorage-journal 2017-09-10 13:18 - 2017-09-10 13:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 13:18 - 2017-09-10 13:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 13:19 - 2017-09-10 13:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.latimes.com_0.localstorage 2017-09-10 13:19 - 2017-09-10 13:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-11 12:35 - 2017-09-11 12:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.macworld.com_0.localstorage 2017-09-11 12:35 - 2017-09-11 12:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-10 13:16 - 2017-09-10 13:17 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.metacritic.com_0.localstorage 2017-09-10 13:16 - 2017-09-10 13:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.metacritic.com_0.localstorage-journal 2017-09-10 13:18 - 2017-09-10 13:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 13:18 - 2017-09-10 13:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 12:32 - 2017-09-11 12:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.parents.com_0.localstorage 2017-09-11 12:32 - 2017-09-11 12:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-10 13:19 - 2017-09-10 13:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-10 13:19 - 2017-09-10 13:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-10 13:19 - 2017-09-10 13:19 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 13:19 - 2017-09-10 13:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 13:18 - 2017-09-10 13:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\https_connexity.net_0.localstorage 2017-09-10 13:18 - 2017-09-10 13:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 12:29 - 2017-09-11 12:30 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 12:29 - 2017-09-11 12:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 12:29 - 2017-09-11 12:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\https_sb.monetate.net_0.localstorage 2017-09-11 12:29 - 2017-09-11 12:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\https_sb.monetate.net_0.localstorage-journal 2017-09-11 12:29 - 2017-09-11 12:30 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 12:29 - 2017-09-11 12:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 13:16 - 2017-09-10 13:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data 2017-09-10 13:16 - 2017-09-11 12:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash 2017-09-10 13:16 - 2017-09-10 13:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 13:16 - 2017-09-10 13:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 13:16 - 2017-09-10 13:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\Y5D5VLVR 2017-09-10 13:16 - 2017-09-10 13:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 13:16 - 2017-09-10 13:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 13:16 - 2017-09-11 12:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5 2017-09-10 13:16 - 2017-09-11 12:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\cdn.stickyadstv.com 2017-09-11 12:29 - 2017-09-11 12:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\cdncache-a.akamaihd.net 2017-09-11 12:29 - 2017-09-11 12:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\cdncache-a.akamaihd.net\items 2017-09-11 12:29 - 2017-09-11 12:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 12:29 - 2017-09-11 12:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 12:29 - 2017-09-11 12:35 - 000000415 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 13:16 - 2017-09-11 12:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\eereader.com 2017-09-10 13:17 - 2017-09-11 12:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\efreader.com 2017-09-10 13:25 - 2017-09-11 12:36 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\efreader.com\analytics.sol 2017-09-10 13:16 - 2017-09-11 12:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\egreader.com 2017-09-11 12:31 - 2017-09-11 12:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\inread.anyclip.com 2017-09-11 12:31 - 2017-09-11 12:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\inread.anyclip.com\ac# 2017-09-11 12:31 - 2017-09-11 12:31 - 000000441 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-10 13:16 - 2017-09-10 13:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\macromedia.com 2017-09-10 13:16 - 2017-09-10 13:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\macromedia.com\support 2017-09-10 13:16 - 2017-09-10 13:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\macromedia.com\support\flashplayer 2017-09-10 13:16 - 2017-09-11 12:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\macromedia.com\support\flashplayer\sys 2017-09-10 13:16 - 2017-09-11 12:31 - 000000513 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 13:16 - 2017-09-10 13:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 13:16 - 2017-09-10 13:16 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 12:29 - 2017-09-11 12:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 12:29 - 2017-09-11 12:29 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 13:16 - 2017-09-10 13:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 13:16 - 2017-09-10 13:16 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 13:17 - 2017-09-10 13:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 13:17 - 2017-09-10 13:17 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 13:16 - 2017-09-10 13:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 13:16 - 2017-09-10 13:16 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 12:31 - 2017-09-11 12:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 12:31 - 2017-09-11 12:31 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data610\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\6NUJ65P5\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-10 22:33 - 2017-09-11 05:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611 2017-09-10 22:33 - 2017-09-11 05:10 - 000209920 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Cookies 2017-09-10 22:33 - 2017-09-11 05:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Cookies-journal 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\databases 2017-09-10 22:33 - 2017-09-10 22:33 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\databases\Databases.db 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\databases\Databases.db-journal 2017-09-10 22:33 - 2017-09-11 05:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System\000 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System\000\t 2017-09-10 22:33 - 2017-09-10 22:33 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System\000\t\.usage 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System\000\t\Paths 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System\000\t\Paths\000003.log 2017-09-10 22:33 - 2017-09-10 22:33 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System\000\t\Paths\CURRENT 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System\000\t\Paths\LOCK 2017-09-10 22:33 - 2017-09-10 22:33 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System\000\t\Paths\LOG 2017-09-10 22:33 - 2017-09-10 22:33 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System\000\t\Paths\MANIFEST-000001 2017-09-11 05:05 - 2017-09-11 05:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System\001 2017-09-11 05:05 - 2017-09-11 05:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System\001\t 2017-09-11 05:09 - 2017-09-11 05:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System\002 2017-09-11 05:09 - 2017-09-11 05:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System\002\t 2017-09-10 22:33 - 2017-09-11 05:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System\Origins 2017-09-10 22:33 - 2017-09-11 05:11 - 000000245 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System\Origins\000003.log 2017-09-10 22:33 - 2017-09-10 22:33 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System\Origins\CURRENT 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System\Origins\LOCK 2017-09-10 22:33 - 2017-09-11 05:10 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System\Origins\LOG 2017-09-10 22:33 - 2017-09-11 05:06 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System\Origins\LOG.old 2017-09-10 22:33 - 2017-09-10 22:33 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\File System\Origins\MANIFEST-000001 2017-09-10 22:33 - 2017-09-11 05:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB 2017-09-10 22:37 - 2017-09-10 22:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\http_www.jamieoliver.com_0.indexeddb.leveldb 2017-09-10 22:37 - 2017-09-10 22:37 - 000000188 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\http_www.jamieoliver.com_0.indexeddb.leveldb\000003.log 2017-09-10 22:37 - 2017-09-10 22:37 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\http_www.jamieoliver.com_0.indexeddb.leveldb\CURRENT 2017-09-10 22:37 - 2017-09-10 22:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\http_www.jamieoliver.com_0.indexeddb.leveldb\LOCK 2017-09-10 22:37 - 2017-09-10 22:37 - 000000162 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\http_www.jamieoliver.com_0.indexeddb.leveldb\LOG 2017-09-10 22:37 - 2017-09-10 22:37 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\http_www.jamieoliver.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\https_11609953.va.cobrowse.liveperson.net_0.indexeddb.leveldb 2017-09-10 22:33 - 2017-09-10 22:33 - 000000587 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\https_11609953.va.cobrowse.liveperson.net_0.indexeddb.leveldb\000003.log 2017-09-10 22:33 - 2017-09-10 22:33 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\https_11609953.va.cobrowse.liveperson.net_0.indexeddb.leveldb\CURRENT 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\https_11609953.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOCK 2017-09-10 22:33 - 2017-09-10 22:33 - 000000179 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\https_11609953.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOG 2017-09-10 22:33 - 2017-09-10 22:33 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\https_11609953.va.cobrowse.liveperson.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 05:03 - 2017-09-11 05:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\https_iframe.chatid.com_0.indexeddb.leveldb 2017-09-11 05:03 - 2017-09-11 05:03 - 000000926 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\https_iframe.chatid.com_0.indexeddb.leveldb\000003.log 2017-09-11 05:03 - 2017-09-11 05:03 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\https_iframe.chatid.com_0.indexeddb.leveldb\CURRENT 2017-09-11 05:03 - 2017-09-11 05:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\https_iframe.chatid.com_0.indexeddb.leveldb\LOCK 2017-09-11 05:03 - 2017-09-11 05:03 - 000000364 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\https_iframe.chatid.com_0.indexeddb.leveldb\LOG 2017-09-11 05:03 - 2017-09-11 05:03 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\https_iframe.chatid.com_0.indexeddb.leveldb\LOG.old 2017-09-11 05:03 - 2017-09-11 05:03 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\https_iframe.chatid.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb 2017-09-10 22:33 - 2017-09-10 22:33 - 000001342 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\000003.log 2017-09-10 22:33 - 2017-09-10 22:33 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\CURRENT 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOCK 2017-09-10 22:33 - 2017-09-10 22:33 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOG 2017-09-10 22:33 - 2017-09-10 22:33 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 22:33 - 2017-09-11 05:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage 2017-09-11 05:07 - 2017-09-11 05:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-11 05:07 - 2017-09-11 05:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-10 22:35 - 2017-09-10 22:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_connexity.net_0.localstorage 2017-09-10 22:35 - 2017-09-10 22:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 05:08 - 2017-09-11 05:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_mashable.com_0.localstorage 2017-09-11 05:08 - 2017-09-11 05:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_mashable.com_0.localstorage-journal 2017-09-10 22:33 - 2017-09-10 22:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 22:33 - 2017-09-10 22:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 22:33 - 2017-09-10 22:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.1800getlens.com_0.localstorage 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.1800getlens.com_0.localstorage-journal 2017-09-11 05:06 - 2017-09-11 05:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-11 05:06 - 2017-09-11 05:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-10 22:37 - 2017-09-10 22:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.blabbermouth.net_0.localstorage 2017-09-10 22:37 - 2017-09-10 22:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.blabbermouth.net_0.localstorage-journal 2017-09-10 22:35 - 2017-09-10 22:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 22:35 - 2017-09-10 22:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 05:06 - 2017-09-11 05:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-11 05:06 - 2017-09-11 05:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-10 22:36 - 2017-09-10 22:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-10 22:36 - 2017-09-10 22:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-11 05:05 - 2017-09-11 05:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.insideedition.com_0.localstorage 2017-09-11 05:05 - 2017-09-11 05:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.insideedition.com_0.localstorage-journal 2017-09-10 22:34 - 2017-09-10 22:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 22:34 - 2017-09-10 22:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 22:36 - 2017-09-10 22:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-10 22:36 - 2017-09-10 22:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-10 22:35 - 2017-09-10 22:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-10 22:35 - 2017-09-10 22:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-10 22:38 - 2017-09-10 22:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 22:38 - 2017-09-10 22:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 22:38 - 2017-09-10 22:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.torontosun.com_0.localstorage 2017-09-10 22:38 - 2017-09-10 22:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\http_www.torontosun.com_0.localstorage-journal 2017-09-10 22:35 - 2017-09-10 22:35 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 22:35 - 2017-09-10 22:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 22:35 - 2017-09-10 22:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\https_connexity.net_0.localstorage 2017-09-10 22:35 - 2017-09-10 22:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 05:03 - 2017-09-11 05:03 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 05:03 - 2017-09-11 05:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 22:33 - 2017-09-11 05:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\https_pokemondb.net_0.localstorage 2017-09-10 22:33 - 2017-09-11 05:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\https_pokemondb.net_0.localstorage-journal 2017-09-10 22:33 - 2017-09-11 05:03 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 22:33 - 2017-09-11 05:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 22:33 - 2017-09-11 05:03 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 22:33 - 2017-09-11 05:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 22:33 - 2017-09-10 22:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\https_www.eyebuydirect.com_0.localstorage 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\https_www.eyebuydirect.com_0.localstorage-journal 2017-09-11 05:03 - 2017-09-11 05:04 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\https_www.fingerhut.com_0.localstorage 2017-09-11 05:03 - 2017-09-11 05:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Local Storage\https_www.fingerhut.com_0.localstorage-journal 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data 2017-09-10 22:33 - 2017-09-11 05:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\AMTNM5RS 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 22:33 - 2017-09-10 22:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC 2017-09-10 22:33 - 2017-09-11 05:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\cdn.stickyadstv.com 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\cdncache-a.akamaihd.net 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\cdncache-a.akamaihd.net\items 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 22:33 - 2017-09-11 05:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 22:33 - 2017-09-11 05:03 - 000000592 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 22:33 - 2017-09-11 05:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\eereader.com 2017-09-11 05:07 - 2017-09-11 05:07 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\eereader.com\analytics.sol 2017-09-10 22:34 - 2017-09-11 05:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\efreader.com 2017-09-11 05:11 - 2017-09-11 05:11 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\efreader.com\analytics.sol 2017-09-10 22:33 - 2017-09-11 05:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\egreader.com 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\macromedia.com 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\macromedia.com\support 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\macromedia.com\support\flashplayer 2017-09-10 22:33 - 2017-09-10 22:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\macromedia.com\support\flashplayer\sys 2017-09-10 22:33 - 2017-09-10 22:34 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 22:33 - 2017-09-10 22:33 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 22:33 - 2017-09-10 22:33 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 22:33 - 2017-09-10 22:33 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 22:34 - 2017-09-10 22:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 22:34 - 2017-09-10 22:34 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 22:33 - 2017-09-10 22:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 22:33 - 2017-09-10 22:33 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data611\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LQ5E4UYC\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 12:46 - 2017-09-11 10:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612 2017-09-10 12:46 - 2017-09-11 09:17 - 000302080 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Cookies 2017-09-10 12:46 - 2017-09-11 09:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Cookies-journal 2017-09-11 00:34 - 2017-09-11 00:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\databases 2017-09-11 00:34 - 2017-09-11 00:34 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\databases\Databases.db 2017-09-11 00:34 - 2017-09-11 00:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\databases\Databases.db-journal 2017-09-10 12:46 - 2017-09-11 09:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\File System 2017-09-11 09:11 - 2017-09-11 09:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\File System\002 2017-09-11 09:11 - 2017-09-11 09:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\File System\002\t 2017-09-11 09:16 - 2017-09-11 09:16 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\File System\002\t\.usage 2017-09-11 09:16 - 2017-09-11 09:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\File System\002\t\Paths 2017-09-11 09:16 - 2017-09-11 09:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\File System\002\t\Paths\000003.log 2017-09-11 09:16 - 2017-09-11 09:16 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\File System\002\t\Paths\CURRENT 2017-09-11 09:16 - 2017-09-11 09:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\File System\002\t\Paths\LOCK 2017-09-11 09:16 - 2017-09-11 09:16 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\File System\002\t\Paths\LOG 2017-09-11 09:16 - 2017-09-11 09:16 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\File System\002\t\Paths\MANIFEST-000001 2017-09-10 12:46 - 2017-09-11 09:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\File System\Origins 2017-09-10 12:46 - 2017-09-11 09:13 - 000000243 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\File System\Origins\000003.log 2017-09-10 12:46 - 2017-09-10 12:46 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\File System\Origins\CURRENT 2017-09-10 12:46 - 2017-09-10 12:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\File System\Origins\LOCK 2017-09-10 12:46 - 2017-09-11 09:16 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\File System\Origins\LOG 2017-09-10 12:46 - 2017-09-11 09:12 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\File System\Origins\LOG.old 2017-09-10 12:46 - 2017-09-10 12:46 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\File System\Origins\MANIFEST-000001 2017-09-10 12:50 - 2017-09-10 12:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\File System\Origins\lost 2017-09-11 00:34 - 2017-09-11 09:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\IndexedDB 2017-09-11 00:34 - 2017-09-11 00:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\IndexedDB\http_www.sierra.com_0.indexeddb.leveldb 2017-09-11 00:34 - 2017-09-11 00:34 - 000000178 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\IndexedDB\http_www.sierra.com_0.indexeddb.leveldb\000003.log 2017-09-11 00:34 - 2017-09-11 00:34 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\IndexedDB\http_www.sierra.com_0.indexeddb.leveldb\CURRENT 2017-09-11 00:34 - 2017-09-11 00:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\IndexedDB\http_www.sierra.com_0.indexeddb.leveldb\LOCK 2017-09-11 00:34 - 2017-09-11 00:35 - 000000157 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\IndexedDB\http_www.sierra.com_0.indexeddb.leveldb\LOG 2017-09-11 00:34 - 2017-09-11 00:34 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\IndexedDB\http_www.sierra.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 09:16 - 2017-09-11 09:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\IndexedDB\http_www4.fmovies.io_0.indexeddb.leveldb 2017-09-11 09:16 - 2017-09-11 09:16 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\IndexedDB\http_www4.fmovies.io_0.indexeddb.leveldb\000003.log 2017-09-11 09:16 - 2017-09-11 09:16 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\IndexedDB\http_www4.fmovies.io_0.indexeddb.leveldb\CURRENT 2017-09-11 09:16 - 2017-09-11 09:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\IndexedDB\http_www4.fmovies.io_0.indexeddb.leveldb\LOCK 2017-09-11 09:16 - 2017-09-11 09:16 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\IndexedDB\http_www4.fmovies.io_0.indexeddb.leveldb\LOG 2017-09-11 09:16 - 2017-09-11 09:16 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\IndexedDB\http_www4.fmovies.io_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 12:46 - 2017-09-11 09:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage 2017-09-10 12:46 - 2017-09-10 12:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 12:46 - 2017-09-10 12:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-11 00:36 - 2017-09-11 00:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_connexity.net_0.localstorage 2017-09-11 00:36 - 2017-09-11 00:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 09:10 - 2017-09-11 09:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_hades.srvtrck.com_0.localstorage 2017-09-11 09:10 - 2017-09-11 09:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_hades.srvtrck.com_0.localstorage-journal 2017-09-11 09:15 - 2017-09-11 09:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_mashable.com_0.localstorage 2017-09-11 09:15 - 2017-09-11 09:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_mashable.com_0.localstorage-journal 2017-09-10 12:46 - 2017-09-10 12:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_mepower.com_0.localstorage 2017-09-10 12:46 - 2017-09-10 12:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_mepower.com_0.localstorage-journal 2017-09-11 09:10 - 2017-09-11 09:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_pokemonshowdown.com_0.localstorage 2017-09-11 09:10 - 2017-09-11 09:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_pokemonshowdown.com_0.localstorage-journal 2017-09-11 00:34 - 2017-09-11 09:10 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 00:34 - 2017-09-11 09:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 00:38 - 2017-09-11 09:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-11 00:38 - 2017-09-11 09:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-10 12:48 - 2017-09-10 12:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 12:48 - 2017-09-10 12:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 12:50 - 2017-09-10 12:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.complex.com_0.localstorage 2017-09-10 12:50 - 2017-09-10 12:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-11 00:37 - 2017-09-11 00:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.crash.net_0.localstorage 2017-09-11 00:37 - 2017-09-11 00:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-11 00:34 - 2017-09-11 00:35 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-11 00:34 - 2017-09-11 00:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-11 00:40 - 2017-09-11 00:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-11 00:40 - 2017-09-11 00:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-10 12:51 - 2017-09-10 12:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.health.com_0.localstorage 2017-09-10 12:51 - 2017-09-10 12:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.health.com_0.localstorage-journal 2017-09-10 12:52 - 2017-09-10 12:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-10 12:52 - 2017-09-10 12:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-11 09:12 - 2017-09-11 09:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 09:12 - 2017-09-11 09:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 12:50 - 2017-09-11 00:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.latimes.com_0.localstorage 2017-09-10 12:50 - 2017-09-11 00:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-11 09:13 - 2017-09-11 09:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.macworld.com_0.localstorage 2017-09-11 09:13 - 2017-09-11 09:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-11 00:37 - 2017-09-11 00:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 00:37 - 2017-09-11 00:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-10 12:49 - 2017-09-10 12:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-10 12:49 - 2017-09-10 12:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-10 12:46 - 2017-09-10 12:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.nba.com_0.localstorage 2017-09-10 12:46 - 2017-09-10 12:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.nba.com_0.localstorage-journal 2017-09-10 12:48 - 2017-09-10 12:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 12:48 - 2017-09-10 12:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 00:34 - 2017-09-11 00:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.sierra.com_0.localstorage 2017-09-11 00:34 - 2017-09-11 00:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.sierra.com_0.localstorage-journal 2017-09-11 09:10 - 2017-09-11 09:11 - 000016384 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.smartfares.com_0.localstorage 2017-09-11 09:10 - 2017-09-11 09:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.smartfares.com_0.localstorage-journal 2017-09-11 00:39 - 2017-09-11 00:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.torontosun.com_0.localstorage 2017-09-11 00:39 - 2017-09-11 00:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www.torontosun.com_0.localstorage-journal 2017-09-11 09:15 - 2017-09-11 09:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www4.fmovies.io_0.localstorage 2017-09-11 09:15 - 2017-09-11 09:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\http_www4.fmovies.io_0.localstorage-journal 2017-09-11 00:34 - 2017-09-11 00:34 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 00:34 - 2017-09-11 00:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 00:36 - 2017-09-11 00:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\https_connexity.net_0.localstorage 2017-09-11 00:36 - 2017-09-11 00:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 00:34 - 2017-09-11 00:34 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 00:34 - 2017-09-11 00:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 12:48 - 2017-09-10 12:51 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-10 12:48 - 2017-09-10 12:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-11 00:34 - 2017-09-11 09:11 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 00:34 - 2017-09-11 09:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 12:46 - 2017-09-10 12:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\https_td.yieldify.com_0.localstorage 2017-09-10 12:46 - 2017-09-10 12:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Local Storage\https_td.yieldify.com_0.localstorage-journal 2017-09-10 12:46 - 2017-09-10 12:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data 2017-09-10 12:46 - 2017-09-11 09:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash 2017-09-10 12:46 - 2017-09-10 12:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 12:46 - 2017-09-10 12:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 12:46 - 2017-09-10 12:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\WUSCM35S 2017-09-10 12:46 - 2017-09-10 12:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 12:46 - 2017-09-10 12:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 12:46 - 2017-09-11 09:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K 2017-09-11 09:11 - 2017-09-11 09:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cdn.dashbid.io 2017-09-11 09:11 - 2017-09-11 09:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cdn.dashbid.io\prod 2017-09-11 09:11 - 2017-09-11 09:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-11 09:11 - 2017-09-11 09:11 - 000000250 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-10 12:46 - 2017-09-11 09:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cdn.stickyadstv.com 2017-09-11 00:34 - 2017-09-11 00:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cdncache-a.akamaihd.net 2017-09-11 00:34 - 2017-09-11 00:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cdncache-a.akamaihd.net\items 2017-09-11 00:34 - 2017-09-11 00:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 00:34 - 2017-09-11 09:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 00:34 - 2017-09-11 09:10 - 000000428 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 12:46 - 2017-09-10 12:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cvp1.cdn.turner.com 2017-09-10 12:46 - 2017-09-10 12:46 - 000000263 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cvp1.cdn.turner.com\com.turner.cvp.so.sol 2017-09-10 12:47 - 2017-09-10 12:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cvp1.cdn.turner.com\##1D4E44DCE9A330DB 2017-09-10 12:47 - 2017-09-10 12:47 - 000000301 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cvp1.cdn.turner.com\##1D4E44DCE9A330DB\00000001.sol 2017-09-10 12:47 - 2017-09-10 12:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cvp1.cdn.turner.com\##251A43378BA1DC62 2017-09-10 12:47 - 2017-09-10 12:47 - 000000204 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cvp1.cdn.turner.com\##251A43378BA1DC62\00000001.sol 2017-09-10 12:47 - 2017-09-10 12:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cvp1.cdn.turner.com\##9AE674EE6E5BCE26 2017-09-10 12:47 - 2017-09-10 12:47 - 000000227 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cvp1.cdn.turner.com\##9AE674EE6E5BCE26\00000001.sol 2017-09-10 12:48 - 2017-09-10 12:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cvp1.cdn.turner.com\xslo 2017-09-10 12:48 - 2017-09-10 12:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cvp1.cdn.turner.com\xslo\cvp 2017-09-10 12:48 - 2017-09-10 12:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cvp1.cdn.turner.com\xslo\cvp\core 2017-09-10 12:48 - 2017-09-10 12:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cvp1.cdn.turner.com\xslo\cvp\core\player 2017-09-10 12:48 - 2017-09-10 12:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cvp1.cdn.turner.com\xslo\cvp\core\player\3.x 2017-09-10 12:48 - 2017-09-10 12:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cvp1.cdn.turner.com\xslo\cvp\core\player\3.x\CVP_3.0.0.0_RC9-3.4.swf 2017-09-10 12:48 - 2017-09-10 12:48 - 000000043 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\cvp1.cdn.turner.com\xslo\cvp\core\player\3.x\CVP_3.0.0.0_RC9-3.4.swf\HDCore.sol 2017-09-10 12:46 - 2017-09-11 09:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\eereader.com 2017-09-10 12:48 - 2017-09-11 09:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\efreader.com 2017-09-10 12:50 - 2017-09-10 12:51 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\efreader.com\analytics.sol 2017-09-10 12:46 - 2017-09-11 09:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\egreader.com 2017-09-11 09:17 - 2017-09-11 09:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\inread.anyclip.com 2017-09-11 09:17 - 2017-09-11 09:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\inread.anyclip.com\ac# 2017-09-10 12:46 - 2017-09-10 12:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com 2017-09-10 12:46 - 2017-09-10 12:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com\support 2017-09-10 12:46 - 2017-09-10 12:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com\support\flashplayer 2017-09-10 12:46 - 2017-09-11 09:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com\support\flashplayer\sys 2017-09-10 12:46 - 2017-09-11 09:17 - 000000531 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 09:11 - 2017-09-11 09:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-11 09:11 - 2017-09-11 09:11 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-10 12:46 - 2017-09-10 12:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 12:46 - 2017-09-10 12:46 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 00:34 - 2017-09-11 00:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 00:34 - 2017-09-11 00:34 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 12:46 - 2017-09-10 12:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com\support\flashplayer\sys\#cvp1.cdn.turner.com 2017-09-10 12:46 - 2017-09-10 12:46 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com\support\flashplayer\sys\#cvp1.cdn.turner.com\settings.sol 2017-09-10 12:46 - 2017-09-10 12:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 12:46 - 2017-09-10 12:46 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 12:48 - 2017-09-10 12:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 12:48 - 2017-09-10 12:48 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 12:46 - 2017-09-10 12:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 12:46 - 2017-09-10 12:46 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 09:17 - 2017-09-11 09:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 09:17 - 2017-09-11 09:17 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data612\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HTC7PV6K\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-10 13:26 - 2017-09-11 21:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613 2017-09-10 13:26 - 2017-09-11 19:45 - 000437248 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Cookies 2017-09-10 13:26 - 2017-09-11 19:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Cookies-journal 2017-09-10 20:22 - 2017-09-11 19:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\databases 2017-09-10 20:22 - 2017-09-11 19:39 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\databases\Databases.db 2017-09-10 20:22 - 2017-09-11 19:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\databases\Databases.db-journal 2017-09-11 19:39 - 2017-09-11 19:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\databases\http_www.tonerboss.com_0 2017-09-11 19:39 - 2017-09-11 19:39 - 000020480 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\databases\http_www.tonerboss.com_0\1 2017-09-10 13:30 - 2017-09-11 19:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\File System 2017-09-11 19:39 - 2017-09-11 19:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\File System\002 2017-09-11 19:39 - 2017-09-11 19:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\File System\002\t 2017-09-11 19:39 - 2017-09-11 19:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\File System\002\t\Paths 2017-09-11 19:39 - 2017-09-11 19:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\File System\002\t\Paths\000003.log 2017-09-11 19:39 - 2017-09-11 19:39 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\File System\002\t\Paths\CURRENT 2017-09-11 19:39 - 2017-09-11 19:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\File System\002\t\Paths\LOCK 2017-09-11 19:39 - 2017-09-11 19:39 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\File System\002\t\Paths\LOG 2017-09-11 19:39 - 2017-09-11 19:39 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\File System\002\t\Paths\MANIFEST-000001 2017-09-11 19:40 - 2017-09-11 19:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\File System\008 2017-09-11 19:40 - 2017-09-11 19:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\File System\008\t 2017-09-10 13:30 - 2017-09-11 19:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\File System\Origins 2017-09-10 13:30 - 2017-09-11 19:41 - 000000678 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\File System\Origins\000003.log 2017-09-10 13:30 - 2017-09-10 13:30 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\File System\Origins\CURRENT 2017-09-10 13:30 - 2017-09-10 13:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\File System\Origins\LOCK 2017-09-10 13:30 - 2017-09-11 19:40 - 000000487 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\File System\Origins\LOG 2017-09-10 13:30 - 2017-09-11 19:40 - 000000852 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\File System\Origins\LOG.old 2017-09-10 13:30 - 2017-09-10 13:30 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\File System\Origins\MANIFEST-000001 2017-09-10 20:22 - 2017-09-10 20:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\File System\Origins\lost 2017-09-10 20:22 - 2017-09-11 19:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\IndexedDB 2017-09-11 10:30 - 2017-09-11 10:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb 2017-09-11 10:30 - 2017-09-11 10:30 - 000000178 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\000003.log 2017-09-11 10:30 - 2017-09-11 10:30 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\CURRENT 2017-09-11 10:30 - 2017-09-11 10:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\LOCK 2017-09-11 10:30 - 2017-09-11 10:30 - 000000157 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\LOG 2017-09-11 10:30 - 2017-09-11 10:30 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 20:22 - 2017-09-10 20:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\IndexedDB\http_tpc.googlesyndication.com_0.indexeddb.leveldb 2017-09-10 20:22 - 2017-09-10 20:22 - 000000200 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\IndexedDB\http_tpc.googlesyndication.com_0.indexeddb.leveldb\000003.log 2017-09-10 20:22 - 2017-09-10 20:22 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\IndexedDB\http_tpc.googlesyndication.com_0.indexeddb.leveldb\CURRENT 2017-09-10 20:22 - 2017-09-10 20:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\IndexedDB\http_tpc.googlesyndication.com_0.indexeddb.leveldb\LOCK 2017-09-10 20:22 - 2017-09-10 20:22 - 000000168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\IndexedDB\http_tpc.googlesyndication.com_0.indexeddb.leveldb\LOG 2017-09-10 20:22 - 2017-09-10 20:22 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\IndexedDB\http_tpc.googlesyndication.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 19:39 - 2017-09-11 19:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\IndexedDB\http_www.tonerboss.com_0.indexeddb.leveldb 2017-09-11 19:39 - 2017-09-11 19:39 - 000000718 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\IndexedDB\http_www.tonerboss.com_0.indexeddb.leveldb\000003.log 2017-09-11 19:39 - 2017-09-11 19:39 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\IndexedDB\http_www.tonerboss.com_0.indexeddb.leveldb\CURRENT 2017-09-11 19:39 - 2017-09-11 19:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\IndexedDB\http_www.tonerboss.com_0.indexeddb.leveldb\LOCK 2017-09-11 19:39 - 2017-09-11 19:39 - 000000365 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\IndexedDB\http_www.tonerboss.com_0.indexeddb.leveldb\LOG 2017-09-11 19:39 - 2017-09-11 19:39 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\IndexedDB\http_www.tonerboss.com_0.indexeddb.leveldb\LOG.old 2017-09-11 19:39 - 2017-09-11 19:39 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\IndexedDB\http_www.tonerboss.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 13:26 - 2017-09-11 19:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage 2017-09-11 10:28 - 2017-09-11 10:30 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_allrecipes.com_0.localstorage 2017-09-11 10:28 - 2017-09-11 10:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-11 09:32 - 2017-09-11 09:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 09:32 - 2017-09-11 09:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 15:20 - 2017-09-10 15:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 15:20 - 2017-09-10 15:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 13:28 - 2017-09-10 13:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_connexity.net_0.localstorage 2017-09-10 13:28 - 2017-09-10 13:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 19:43 - 2017-09-11 19:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_jp.reuters.com_0.localstorage 2017-09-11 19:43 - 2017-09-11 19:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_jp.reuters.com_0.localstorage-journal 2017-09-10 20:22 - 2017-09-10 20:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_lucotube.com_0.localstorage 2017-09-10 20:22 - 2017-09-10 20:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_lucotube.com_0.localstorage-journal 2017-09-10 15:19 - 2017-09-10 15:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 15:19 - 2017-09-10 15:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 15:19 - 2017-09-11 19:38 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 15:19 - 2017-09-11 19:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 13:26 - 2017-09-10 13:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_secure-us.imrworldwide.com_0.localstorage 2017-09-10 13:26 - 2017-09-10 13:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_secure-us.imrworldwide.com_0.localstorage-journal 2017-09-10 15:19 - 2017-09-10 15:20 - 000014336 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_thebreastcancersite.greatergood.com_0.localstorage 2017-09-10 15:19 - 2017-09-10 15:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_thebreastcancersite.greatergood.com_0.localstorage-journal 2017-09-10 20:22 - 2017-09-10 20:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_tpc.googlesyndication.com_0.localstorage 2017-09-10 20:22 - 2017-09-10 20:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_tpc.googlesyndication.com_0.localstorage-journal 2017-09-10 15:21 - 2017-09-10 15:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.businessinsider.com_0.localstorage 2017-09-10 15:21 - 2017-09-10 15:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.businessinsider.com_0.localstorage-journal 2017-09-10 13:28 - 2017-09-11 10:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 13:28 - 2017-09-11 10:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 09:34 - 2017-09-11 10:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.complex.com_0.localstorage 2017-09-11 09:34 - 2017-09-11 10:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-10 15:23 - 2017-09-10 15:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.concordmonitor.com_0.localstorage 2017-09-10 15:23 - 2017-09-10 15:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.concordmonitor.com_0.localstorage-journal 2017-09-11 09:34 - 2017-09-11 09:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.courant.com_0.localstorage 2017-09-11 09:34 - 2017-09-11 09:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-10 15:22 - 2017-09-10 15:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.crash.net_0.localstorage 2017-09-10 15:22 - 2017-09-10 15:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-11 19:37 - 2017-09-11 19:38 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-11 19:37 - 2017-09-11 19:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-10 13:32 - 2017-09-10 13:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-10 13:32 - 2017-09-10 13:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-11 10:26 - 2017-09-11 10:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.finecooking.com_0.localstorage 2017-09-11 10:26 - 2017-09-11 10:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.finecooking.com_0.localstorage-journal 2017-09-10 13:30 - 2017-09-10 13:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-10 13:30 - 2017-09-10 13:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-11 09:36 - 2017-09-11 09:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.happy-mothering.com_0.localstorage 2017-09-11 09:36 - 2017-09-11 09:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.happy-mothering.com_0.localstorage-journal 2017-09-11 09:33 - 2017-09-11 09:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-11 09:33 - 2017-09-11 09:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-10 20:25 - 2017-09-10 20:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.innerself.com_0.localstorage 2017-09-10 20:25 - 2017-09-10 20:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.innerself.com_0.localstorage-journal 2017-09-10 13:29 - 2017-09-10 13:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-10 13:29 - 2017-09-10 13:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-10 20:27 - 2017-09-10 20:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.instyle.com_0.localstorage 2017-09-10 20:27 - 2017-09-10 20:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-10 15:22 - 2017-09-11 10:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 15:22 - 2017-09-11 10:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 19:40 - 2017-09-11 19:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-11 19:40 - 2017-09-11 19:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-11 19:42 - 2017-09-11 19:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.kiplinger.com_0.localstorage 2017-09-11 19:42 - 2017-09-11 19:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.kiplinger.com_0.localstorage-journal 2017-09-10 15:22 - 2017-09-11 09:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.macworld.com_0.localstorage 2017-09-10 15:22 - 2017-09-11 09:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-10 20:24 - 2017-09-10 20:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-10 20:24 - 2017-09-10 20:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-10 13:26 - 2017-09-10 13:27 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.metacritic.com_0.localstorage 2017-09-10 13:26 - 2017-09-10 13:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.metacritic.com_0.localstorage-journal 2017-09-11 10:28 - 2017-09-11 10:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.myhomeideas.com_0.localstorage 2017-09-11 10:28 - 2017-09-11 10:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.myhomeideas.com_0.localstorage-journal 2017-09-11 10:25 - 2017-09-11 10:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.mylifetime.com_0.localstorage 2017-09-11 10:25 - 2017-09-11 10:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.mylifetime.com_0.localstorage-journal 2017-09-10 13:28 - 2017-09-11 19:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 13:28 - 2017-09-11 19:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 13:29 - 2017-09-10 13:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.parents.com_0.localstorage 2017-09-10 13:29 - 2017-09-10 13:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-11 19:40 - 2017-09-11 19:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-11 19:40 - 2017-09-11 19:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-10 15:25 - 2017-09-10 15:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.qvc.com_0.localstorage 2017-09-10 15:25 - 2017-09-10 15:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.qvc.com_0.localstorage-journal 2017-09-11 09:33 - 2017-09-11 09:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.reuters.com_0.localstorage 2017-09-11 09:33 - 2017-09-11 09:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-10 20:21 - 2017-09-10 20:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.southernliving.com_0.localstorage 2017-09-10 20:21 - 2017-09-10 20:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.southernliving.com_0.localstorage-journal 2017-09-10 15:19 - 2017-09-10 15:20 - 000009216 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.stltoday.com_0.localstorage 2017-09-10 15:19 - 2017-09-10 15:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.stltoday.com_0.localstorage-journal 2017-09-11 09:30 - 2017-09-11 09:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.thedenverchannel.com_0.localstorage 2017-09-11 09:30 - 2017-09-11 09:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.thedenverchannel.com_0.localstorage-journal 2017-09-11 19:37 - 2017-09-11 19:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.tonerboss.com_0.localstorage 2017-09-11 19:37 - 2017-09-11 19:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.tonerboss.com_0.localstorage-journal 2017-09-10 13:31 - 2017-09-10 20:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.torontosun.com_0.localstorage 2017-09-10 13:31 - 2017-09-10 20:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\http_www.torontosun.com_0.localstorage-journal 2017-09-10 15:19 - 2017-09-10 15:19 - 000013312 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_a2215220948.cdn.optimizely.com_0.localstorage 2017-09-10 15:19 - 2017-09-10 15:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_a2215220948.cdn.optimizely.com_0.localstorage-journal 2017-09-10 13:27 - 2017-09-10 13:27 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 13:27 - 2017-09-10 13:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 20:22 - 2017-09-11 10:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_cdn.krxd.net_0.localstorage 2017-09-10 20:22 - 2017-09-11 10:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_cdn.krxd.net_0.localstorage-journal 2017-09-10 13:28 - 2017-09-10 13:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_connexity.net_0.localstorage 2017-09-10 13:28 - 2017-09-10 13:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 15:19 - 2017-09-11 19:38 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 15:19 - 2017-09-11 19:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 15:21 - 2017-09-10 15:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-10 15:21 - 2017-09-10 15:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-10 13:26 - 2017-09-10 13:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_newspaperarchive.com_0.localstorage 2017-09-10 13:26 - 2017-09-10 13:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_newspaperarchive.com_0.localstorage-journal 2017-09-10 20:22 - 2017-09-10 20:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 20:22 - 2017-09-10 20:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 15:19 - 2017-09-11 19:37 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 15:19 - 2017-09-11 19:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 20:21 - 2017-09-10 20:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_widgets.outbrain.com_0.localstorage 2017-09-10 20:21 - 2017-09-10 20:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_widgets.outbrain.com_0.localstorage-journal 2017-09-10 20:22 - 2017-09-10 20:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_www.booking.com_0.localstorage 2017-09-10 20:22 - 2017-09-10 20:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_www.booking.com_0.localstorage-journal 2017-09-10 20:22 - 2017-09-10 20:22 - 000011264 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_www.expedia.ca_0.localstorage 2017-09-10 20:22 - 2017-09-10 20:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_www.expedia.ca_0.localstorage-journal 2017-09-11 10:23 - 2017-09-11 10:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_www.instagram.com_0.localstorage 2017-09-11 10:23 - 2017-09-11 10:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_www.instagram.com_0.localstorage-journal 2017-09-11 10:23 - 2017-09-11 10:24 - 000012288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_www.today.com_0.localstorage 2017-09-11 10:23 - 2017-09-11 10:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_www.today.com_0.localstorage-journal 2017-09-11 10:23 - 2017-09-11 10:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_www.workoutwarehouse.com_0.localstorage 2017-09-11 10:23 - 2017-09-11 10:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_www.workoutwarehouse.com_0.localstorage-journal 2017-09-11 09:30 - 2017-09-11 09:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_www.zak.com_0.localstorage 2017-09-11 09:30 - 2017-09-11 09:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Local Storage\https_www.zak.com_0.localstorage-journal 2017-09-10 13:26 - 2017-09-10 13:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data 2017-09-10 13:26 - 2017-09-11 19:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash 2017-09-10 13:26 - 2017-09-10 13:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 13:26 - 2017-09-10 13:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 13:26 - 2017-09-10 13:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\UAJZW8NS 2017-09-10 13:26 - 2017-09-10 13:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 13:26 - 2017-09-10 13:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 13:26 - 2017-09-11 10:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z 2017-09-11 10:25 - 2017-09-11 10:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\aka.spotxcdn.com 2017-09-10 13:26 - 2017-09-11 19:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\cdn.stickyadstv.com 2017-09-10 15:19 - 2017-09-10 15:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\cdncache-a.akamaihd.net 2017-09-10 15:19 - 2017-09-10 15:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\cdncache-a.akamaihd.net\items 2017-09-10 15:19 - 2017-09-10 15:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 15:19 - 2017-09-11 19:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 15:19 - 2017-09-11 19:43 - 000000592 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 13:26 - 2017-09-11 19:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\eereader.com 2017-09-11 09:32 - 2017-09-11 10:24 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\eereader.com\analytics.sol 2017-09-10 13:27 - 2017-09-11 19:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\efreader.com 2017-09-10 13:31 - 2017-09-11 10:31 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\efreader.com\analytics.sol 2017-09-10 13:26 - 2017-09-11 19:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\egreader.com 2017-09-11 10:27 - 2017-09-11 10:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\inread.anyclip.com 2017-09-11 10:27 - 2017-09-11 10:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\inread.anyclip.com\ac# 2017-09-11 10:28 - 2017-09-11 10:28 - 000000455 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-10 13:26 - 2017-09-10 13:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com 2017-09-10 13:26 - 2017-09-10 13:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com\support 2017-09-10 13:26 - 2017-09-10 13:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com\support\flashplayer 2017-09-10 13:26 - 2017-09-11 10:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com\support\flashplayer\sys 2017-09-10 13:26 - 2017-09-11 10:28 - 000000560 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 10:25 - 2017-09-11 10:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com\support\flashplayer\sys\#aka.spotxcdn.com 2017-09-11 10:25 - 2017-09-11 10:25 - 000000086 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com\support\flashplayer\sys\#aka.spotxcdn.com\settings.sol 2017-09-10 13:26 - 2017-09-10 13:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 13:26 - 2017-09-10 13:26 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 15:19 - 2017-09-10 15:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 15:19 - 2017-09-10 15:19 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 13:26 - 2017-09-10 13:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 13:26 - 2017-09-10 13:26 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 13:27 - 2017-09-10 13:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 13:27 - 2017-09-10 13:27 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 13:26 - 2017-09-10 13:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 13:26 - 2017-09-10 13:26 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 10:27 - 2017-09-11 10:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 10:27 - 2017-09-11 10:27 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-11 09:37 - 2017-09-11 09:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com 2017-09-11 09:37 - 2017-09-11 09:37 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com\settings.sol 2017-09-11 09:37 - 2017-09-11 09:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\objects.tremormedia.com 2017-09-11 09:37 - 2017-09-11 09:37 - 000000072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data613\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC7HC63Z\objects.tremormedia.com\com.quantserve.sol 2017-09-10 11:46 - 2017-09-12 02:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614 2017-09-10 11:46 - 2017-09-12 00:44 - 000271360 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Cookies 2017-09-10 11:46 - 2017-09-12 00:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Cookies-journal 2017-09-10 11:46 - 2017-09-10 11:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\databases 2017-09-10 11:46 - 2017-09-10 11:46 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\databases\Databases.db 2017-09-10 11:46 - 2017-09-10 11:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\databases\Databases.db-journal 2017-09-10 11:46 - 2017-09-12 00:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\File System 2017-09-12 00:43 - 2017-09-12 00:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\File System\002 2017-09-12 00:43 - 2017-09-12 00:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\File System\002\t 2017-09-10 11:46 - 2017-09-12 00:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\File System\Origins 2017-09-10 11:46 - 2017-09-12 00:45 - 000000245 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\File System\Origins\000003.log 2017-09-10 11:46 - 2017-09-10 11:46 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\File System\Origins\CURRENT 2017-09-10 11:46 - 2017-09-10 11:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\File System\Origins\LOCK 2017-09-10 11:46 - 2017-09-12 00:43 - 000000393 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\File System\Origins\LOG 2017-09-10 11:46 - 2017-09-12 00:39 - 000000741 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\File System\Origins\LOG.old 2017-09-10 11:46 - 2017-09-10 11:46 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\File System\Origins\MANIFEST-000001 2017-09-10 11:46 - 2017-09-10 11:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\File System\Origins\lost 2017-09-10 11:46 - 2017-09-12 00:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB 2017-09-10 11:48 - 2017-09-10 11:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb 2017-09-10 11:48 - 2017-09-10 11:48 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\000003.log 2017-09-10 11:48 - 2017-09-10 11:48 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\CURRENT 2017-09-10 11:48 - 2017-09-10 11:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\LOCK 2017-09-10 11:48 - 2017-09-10 11:48 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\LOG 2017-09-10 11:48 - 2017-09-10 11:48 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 11:50 - 2017-09-10 11:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\http_www.foxnews.com_0.indexeddb.leveldb 2017-09-10 11:50 - 2017-09-10 11:50 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\http_www.foxnews.com_0.indexeddb.leveldb\000003.log 2017-09-10 11:50 - 2017-09-10 11:50 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\http_www.foxnews.com_0.indexeddb.leveldb\CURRENT 2017-09-10 11:50 - 2017-09-10 11:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\http_www.foxnews.com_0.indexeddb.leveldb\LOCK 2017-09-10 11:50 - 2017-09-10 11:50 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\http_www.foxnews.com_0.indexeddb.leveldb\LOG 2017-09-10 11:50 - 2017-09-10 11:50 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\http_www.foxnews.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 00:39 - 2017-09-12 00:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\https_eastads.simpli.fi_0.indexeddb.leveldb 2017-09-12 00:39 - 2017-09-12 00:39 - 000000186 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\https_eastads.simpli.fi_0.indexeddb.leveldb\000003.log 2017-09-12 00:39 - 2017-09-12 00:39 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\https_eastads.simpli.fi_0.indexeddb.leveldb\CURRENT 2017-09-12 00:39 - 2017-09-12 00:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\https_eastads.simpli.fi_0.indexeddb.leveldb\LOCK 2017-09-12 00:39 - 2017-09-12 00:39 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\https_eastads.simpli.fi_0.indexeddb.leveldb\LOG 2017-09-12 00:39 - 2017-09-12 00:39 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\https_eastads.simpli.fi_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 11:46 - 2017-09-10 11:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\https_www.personalcreations.com_0.indexeddb.leveldb 2017-09-10 11:46 - 2017-09-10 11:46 - 000125566 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\https_www.personalcreations.com_0.indexeddb.leveldb\000003.log 2017-09-10 11:46 - 2017-09-10 11:46 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\https_www.personalcreations.com_0.indexeddb.leveldb\CURRENT 2017-09-10 11:46 - 2017-09-10 11:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\https_www.personalcreations.com_0.indexeddb.leveldb\LOCK 2017-09-10 11:46 - 2017-09-10 11:46 - 000000170 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\https_www.personalcreations.com_0.indexeddb.leveldb\LOG 2017-09-10 11:46 - 2017-09-10 11:46 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\IndexedDB\https_www.personalcreations.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 11:46 - 2017-09-12 00:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage 2017-09-12 00:42 - 2017-09-12 00:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_af.reuters.com_0.localstorage 2017-09-12 00:42 - 2017-09-12 00:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_af.reuters.com_0.localstorage-journal 2017-09-12 00:43 - 2017-09-12 00:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-12 00:43 - 2017-09-12 00:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-12 00:38 - 2017-09-12 00:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-12 00:38 - 2017-09-12 00:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 11:46 - 2017-09-10 11:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 11:46 - 2017-09-10 11:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-12 00:40 - 2017-09-12 00:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_connexity.net_0.localstorage 2017-09-12 00:40 - 2017-09-12 00:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 11:51 - 2017-09-10 11:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_nadaguides.com_0.localstorage 2017-09-10 11:51 - 2017-09-10 11:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_nadaguides.com_0.localstorage-journal 2017-09-10 11:51 - 2017-09-10 11:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-10 11:51 - 2017-09-10 11:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-12 00:40 - 2017-09-12 00:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.blabbermouth.net_0.localstorage 2017-09-12 00:40 - 2017-09-12 00:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.blabbermouth.net_0.localstorage-journal 2017-09-10 11:48 - 2017-09-12 00:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 11:48 - 2017-09-12 00:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-12 00:40 - 2017-09-12 00:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.crash.net_0.localstorage 2017-09-12 00:40 - 2017-09-12 00:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-10 11:46 - 2017-09-10 11:47 - 000012288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.familycircle.com_0.localstorage 2017-09-10 11:46 - 2017-09-10 11:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.familycircle.com_0.localstorage-journal 2017-09-12 00:41 - 2017-09-12 00:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.fitnessmagazine.com_0.localstorage 2017-09-12 00:41 - 2017-09-12 00:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.fitnessmagazine.com_0.localstorage-journal 2017-09-10 11:49 - 2017-09-10 11:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.foxnews.com_0.localstorage 2017-09-10 11:49 - 2017-09-10 11:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.foxnews.com_0.localstorage-journal 2017-09-10 11:51 - 2017-09-10 11:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.instyle.com_0.localstorage 2017-09-10 11:51 - 2017-09-10 11:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-12 00:39 - 2017-09-12 00:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-12 00:39 - 2017-09-12 00:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 11:49 - 2017-09-10 11:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-10 11:49 - 2017-09-10 11:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-10 11:48 - 2017-09-12 00:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 11:48 - 2017-09-12 00:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-12 00:39 - 2017-09-12 00:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.parents.com_0.localstorage 2017-09-12 00:39 - 2017-09-12 00:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-12 00:36 - 2017-09-12 00:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.southernliving.com_0.localstorage 2017-09-12 00:36 - 2017-09-12 00:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\http_www.southernliving.com_0.localstorage-journal 2017-09-12 00:39 - 2017-09-12 00:39 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\https_c.betrad.com_0.localstorage 2017-09-12 00:39 - 2017-09-12 00:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-12 00:40 - 2017-09-12 00:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\https_connexity.net_0.localstorage 2017-09-12 00:40 - 2017-09-12 00:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 11:50 - 2017-09-10 11:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-10 11:50 - 2017-09-10 11:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-10 11:46 - 2017-09-10 11:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\https_sb.monetate.net_0.localstorage 2017-09-10 11:46 - 2017-09-10 11:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\https_sb.monetate.net_0.localstorage-journal 2017-09-12 00:36 - 2017-09-12 00:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\https_widgets.outbrain.com_0.localstorage 2017-09-12 00:36 - 2017-09-12 00:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\https_widgets.outbrain.com_0.localstorage-journal 2017-09-12 00:36 - 2017-09-12 00:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\https_www.ice.com_0.localstorage 2017-09-12 00:36 - 2017-09-12 00:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\https_www.ice.com_0.localstorage-journal 2017-09-10 11:46 - 2017-09-10 11:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\https_www.personalcreations.com_0.localstorage 2017-09-10 11:46 - 2017-09-10 11:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Local Storage\https_www.personalcreations.com_0.localstorage-journal 2017-09-10 11:46 - 2017-09-10 11:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data 2017-09-10 11:46 - 2017-09-12 00:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash 2017-09-10 11:46 - 2017-09-10 11:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 11:46 - 2017-09-10 11:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 11:46 - 2017-09-10 11:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\JX6BQAZR 2017-09-10 11:46 - 2017-09-10 11:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 11:46 - 2017-09-10 11:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 11:46 - 2017-09-10 11:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\X7QTS49S 2017-09-10 11:46 - 2017-09-12 00:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\X7QTS49S\cdn.stickyadstv.com 2017-09-10 11:46 - 2017-09-12 00:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\X7QTS49S\eereader.com 2017-09-10 11:48 - 2017-09-12 00:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\X7QTS49S\efreader.com 2017-09-10 11:50 - 2017-09-12 00:45 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\X7QTS49S\efreader.com\analytics.sol 2017-09-10 11:46 - 2017-09-12 00:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\X7QTS49S\egreader.com 2017-09-12 00:39 - 2017-09-12 00:39 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\X7QTS49S\egreader.com\analytics.sol 2017-09-10 11:46 - 2017-09-10 11:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\X7QTS49S\macromedia.com 2017-09-10 11:46 - 2017-09-10 11:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\X7QTS49S\macromedia.com\support 2017-09-10 11:46 - 2017-09-10 11:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\X7QTS49S\macromedia.com\support\flashplayer 2017-09-10 11:46 - 2017-09-10 11:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\X7QTS49S\macromedia.com\support\flashplayer\sys 2017-09-10 11:46 - 2017-09-10 11:48 - 000000464 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\X7QTS49S\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 11:46 - 2017-09-10 11:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\X7QTS49S\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 11:46 - 2017-09-10 11:46 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\X7QTS49S\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 11:46 - 2017-09-10 11:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\X7QTS49S\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 11:46 - 2017-09-10 11:46 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\X7QTS49S\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 11:48 - 2017-09-10 11:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\X7QTS49S\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 11:48 - 2017-09-10 11:48 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\X7QTS49S\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 11:46 - 2017-09-10 11:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\X7QTS49S\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 11:46 - 2017-09-10 11:46 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data614\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\X7QTS49S\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 01:05 - 2017-09-12 09:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615 2017-09-10 01:05 - 2017-09-12 08:01 - 000318464 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Cookies 2017-09-10 01:05 - 2017-09-12 08:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Cookies-journal 2017-09-10 12:31 - 2017-09-10 12:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\databases 2017-09-10 12:31 - 2017-09-10 12:31 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\databases\Databases.db 2017-09-10 12:31 - 2017-09-10 12:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\databases\Databases.db-journal 2017-09-10 01:08 - 2017-09-12 07:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\File System 2017-09-10 01:08 - 2017-09-12 07:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\File System\Origins 2017-09-10 01:08 - 2017-09-12 07:56 - 000000518 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\File System\Origins\000003.log 2017-09-12 07:58 - 2017-09-12 07:58 - 000000282 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\File System\Origins\000004.ldb 2017-09-12 07:58 - 2017-09-12 07:58 - 000000282 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\File System\Origins\000005.ldb 2017-09-12 07:58 - 2017-09-12 07:58 - 000000282 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\File System\Origins\000006.ldb 2017-09-12 07:58 - 2017-09-12 07:58 - 000000282 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\File System\Origins\000007.ldb 2017-09-10 01:08 - 2017-09-10 01:08 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\File System\Origins\CURRENT 2017-09-10 01:08 - 2017-09-10 01:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\File System\Origins\LOCK 2017-09-10 01:08 - 2017-09-12 07:58 - 000000852 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\File System\Origins\LOG 2017-09-10 01:08 - 2017-09-12 07:56 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\File System\Origins\LOG.old 2017-09-10 01:08 - 2017-09-10 01:08 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\File System\Origins\MANIFEST-000001 2017-09-10 12:31 - 2017-09-10 12:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\File System\Origins\lost 2017-09-10 12:31 - 2017-09-12 07:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB 2017-09-10 12:31 - 2017-09-10 12:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.bounty.com_0.indexeddb.leveldb 2017-09-10 12:31 - 2017-09-10 12:31 - 000000178 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.bounty.com_0.indexeddb.leveldb\000003.log 2017-09-10 12:31 - 2017-09-10 12:31 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.bounty.com_0.indexeddb.leveldb\CURRENT 2017-09-10 12:31 - 2017-09-10 12:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.bounty.com_0.indexeddb.leveldb\LOCK 2017-09-10 12:31 - 2017-09-10 12:31 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.bounty.com_0.indexeddb.leveldb\LOG 2017-09-10 12:31 - 2017-09-10 12:31 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.bounty.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 07:58 - 2017-09-12 07:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb 2017-09-12 07:58 - 2017-09-12 07:58 - 000000186 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb\000003.log 2017-09-12 07:58 - 2017-09-12 07:58 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb\CURRENT 2017-09-12 07:58 - 2017-09-12 07:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb\LOCK 2017-09-12 07:58 - 2017-09-12 07:58 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb\LOG 2017-09-12 07:58 - 2017-09-12 07:58 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 12:32 - 2017-09-10 12:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.food.com_0.indexeddb.leveldb 2017-09-10 12:32 - 2017-09-10 12:32 - 000000174 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.food.com_0.indexeddb.leveldb\000003.log 2017-09-10 12:32 - 2017-09-10 12:32 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.food.com_0.indexeddb.leveldb\CURRENT 2017-09-10 12:32 - 2017-09-10 12:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.food.com_0.indexeddb.leveldb\LOCK 2017-09-10 12:32 - 2017-09-10 12:34 - 000000355 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.food.com_0.indexeddb.leveldb\LOG 2017-09-10 12:32 - 2017-09-10 12:32 - 000000156 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.food.com_0.indexeddb.leveldb\LOG.old 2017-09-10 12:32 - 2017-09-10 12:32 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.food.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 12:32 - 2017-09-10 12:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb 2017-09-10 12:32 - 2017-09-10 12:32 - 000000172 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\000003.log 2017-09-10 12:32 - 2017-09-10 12:32 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\CURRENT 2017-09-10 12:32 - 2017-09-10 12:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOCK 2017-09-10 12:32 - 2017-09-10 12:32 - 000000155 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOG 2017-09-10 12:32 - 2017-09-10 12:32 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 21:09 - 2017-09-11 21:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\https_80139247.va.cobrowse.liveperson.net_0.indexeddb.leveldb 2017-09-11 21:09 - 2017-09-11 21:09 - 000001013 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\https_80139247.va.cobrowse.liveperson.net_0.indexeddb.leveldb\000003.log 2017-09-11 21:09 - 2017-09-11 21:09 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\https_80139247.va.cobrowse.liveperson.net_0.indexeddb.leveldb\CURRENT 2017-09-11 21:09 - 2017-09-11 21:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\https_80139247.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOCK 2017-09-11 21:09 - 2017-09-11 21:09 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\https_80139247.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOG 2017-09-11 21:09 - 2017-09-11 21:09 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\https_80139247.va.cobrowse.liveperson.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 21:09 - 2017-09-11 21:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb 2017-09-11 21:09 - 2017-09-11 21:09 - 000003324 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\000003.log 2017-09-11 21:09 - 2017-09-11 21:09 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\CURRENT 2017-09-11 21:09 - 2017-09-11 21:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOCK 2017-09-11 21:09 - 2017-09-11 21:09 - 000000164 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOG 2017-09-11 21:09 - 2017-09-11 21:09 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 01:05 - 2017-09-12 07:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage 2017-09-10 01:12 - 2017-09-10 01:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-10 01:12 - 2017-09-10 01:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-12 07:55 - 2017-09-12 07:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-12 07:55 - 2017-09-12 07:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-12 07:53 - 2017-09-12 07:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_cdn-gl.imrworldwide.com_0.localstorage 2017-09-12 07:53 - 2017-09-12 07:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_cdn-gl.imrworldwide.com_0.localstorage-journal 2017-09-12 07:53 - 2017-09-12 07:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_connexity.net_0.localstorage 2017-09-12 07:53 - 2017-09-12 07:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 01:08 - 2017-09-10 01:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_davedameshek.nfl.com_0.localstorage 2017-09-10 01:08 - 2017-09-10 01:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_davedameshek.nfl.com_0.localstorage-journal 2017-09-11 21:09 - 2017-09-11 21:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-11 21:09 - 2017-09-11 21:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 12:27 - 2017-09-10 12:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_video-static.tunnl.com_0.localstorage 2017-09-10 12:27 - 2017-09-10 12:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_video-static.tunnl.com_0.localstorage-journal 2017-09-10 01:10 - 2017-09-10 01:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-10 01:10 - 2017-09-10 01:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-10 12:31 - 2017-09-12 07:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.bounty.com_0.localstorage 2017-09-10 12:31 - 2017-09-12 07:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.bounty.com_0.localstorage-journal 2017-09-10 01:07 - 2017-09-10 01:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 01:07 - 2017-09-10 01:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 12:30 - 2017-09-10 12:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.courant.com_0.localstorage 2017-09-10 12:30 - 2017-09-10 12:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-10 01:10 - 2017-09-10 01:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.detroitlions.com_0.localstorage 2017-09-10 01:10 - 2017-09-10 01:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.detroitlions.com_0.localstorage-journal 2017-09-12 07:57 - 2017-09-12 07:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-12 07:57 - 2017-09-12 07:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-10 01:09 - 2017-09-10 01:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.finecooking.com_0.localstorage 2017-09-10 01:09 - 2017-09-10 01:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.finecooking.com_0.localstorage-journal 2017-09-10 12:32 - 2017-09-10 12:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.food.com_0.localstorage 2017-09-10 12:32 - 2017-09-10 12:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-12 07:58 - 2017-09-12 07:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.golfdigest.com_0.localstorage 2017-09-12 07:58 - 2017-09-12 07:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.golfdigest.com_0.localstorage-journal 2017-09-12 07:54 - 2017-09-12 07:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.greekgear.com_0.localstorage 2017-09-12 07:54 - 2017-09-12 07:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.greekgear.com_0.localstorage-journal 2017-09-12 07:53 - 2017-09-12 07:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.hollywood.com_0.localstorage 2017-09-12 07:53 - 2017-09-12 07:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.hollywood.com_0.localstorage-journal 2017-09-10 12:30 - 2017-09-10 12:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.innerself.com_0.localstorage 2017-09-10 12:30 - 2017-09-10 12:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.innerself.com_0.localstorage-journal 2017-09-11 21:11 - 2017-09-11 21:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.insideedition.com_0.localstorage 2017-09-11 21:11 - 2017-09-11 21:11 - 000000512 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.insideedition.com_0.localstorage-journal 2017-09-12 07:56 - 2017-09-12 07:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.instyle.com_0.localstorage 2017-09-12 07:56 - 2017-09-12 07:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-10 01:07 - 2017-09-10 01:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 01:07 - 2017-09-10 01:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 01:13 - 2017-09-10 01:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.latimes.com_0.localstorage 2017-09-10 01:13 - 2017-09-10 01:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-10 12:32 - 2017-09-10 12:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.lifeandstylemag.com_0.localstorage 2017-09-10 12:32 - 2017-09-10 12:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.lifeandstylemag.com_0.localstorage-journal 2017-09-11 21:11 - 2017-09-12 07:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 21:11 - 2017-09-12 07:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-10 01:08 - 2017-09-10 01:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.mylifetime.com_0.localstorage 2017-09-10 01:08 - 2017-09-10 01:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.mylifetime.com_0.localstorage-journal 2017-09-12 07:55 - 2017-09-12 07:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.nbc.com_0.localstorage 2017-09-12 07:55 - 2017-09-12 07:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.nbc.com_0.localstorage-journal 2017-09-10 01:11 - 2017-09-10 01:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 01:11 - 2017-09-10 01:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 01:05 - 2017-09-10 01:06 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.primabead.com_0.localstorage 2017-09-10 01:05 - 2017-09-10 01:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.primabead.com_0.localstorage-journal 2017-09-10 12:29 - 2017-09-10 12:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.reuters.com_0.localstorage 2017-09-10 12:29 - 2017-09-10 12:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-10 01:05 - 2017-09-10 01:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.thesaurus.com_0.localstorage 2017-09-10 01:05 - 2017-09-10 01:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.thesaurus.com_0.localstorage-journal 2017-09-10 12:26 - 2017-09-10 12:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.wordgames.com_0.localstorage 2017-09-10 12:26 - 2017-09-10 12:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\http_www.wordgames.com_0.localstorage-journal 2017-09-10 01:09 - 2017-09-10 01:09 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 01:09 - 2017-09-10 01:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 21:08 - 2017-09-11 21:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_cdn-gl.imrworldwide.com_0.localstorage 2017-09-11 21:08 - 2017-09-11 21:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_cdn-gl.imrworldwide.com_0.localstorage-journal 2017-09-12 07:53 - 2017-09-12 07:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_connexity.net_0.localstorage 2017-09-12 07:53 - 2017-09-12 07:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 21:08 - 2017-09-11 21:08 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 21:08 - 2017-09-11 21:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 21:09 - 2017-09-11 21:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_hades.srvtrck.com_0.localstorage 2017-09-11 21:09 - 2017-09-11 21:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_hades.srvtrck.com_0.localstorage-journal 2017-09-10 12:27 - 2017-09-10 12:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_monkey.tunnl.com_0.localstorage 2017-09-10 12:27 - 2017-09-10 12:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_monkey.tunnl.com_0.localstorage-journal 2017-09-11 21:08 - 2017-09-11 21:09 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 21:08 - 2017-09-11 21:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 21:08 - 2017-09-11 21:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_secure-au.imrworldwide.com_0.localstorage 2017-09-11 21:08 - 2017-09-11 21:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_secure-au.imrworldwide.com_0.localstorage-journal 2017-09-11 21:08 - 2017-09-11 21:10 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 21:08 - 2017-09-11 21:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 12:27 - 2017-09-10 12:28 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_www.2modern.com_0.localstorage 2017-09-10 12:27 - 2017-09-10 12:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_www.2modern.com_0.localstorage-journal 2017-09-11 21:08 - 2017-09-11 21:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_www.babycentre.co.uk_0.localstorage 2017-09-11 21:08 - 2017-09-11 21:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_www.babycentre.co.uk_0.localstorage-journal 2017-09-11 21:08 - 2017-09-11 21:09 - 000023552 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_www.coastal.com_0.localstorage 2017-09-11 21:08 - 2017-09-11 21:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_www.coastal.com_0.localstorage-journal 2017-09-10 12:27 - 2017-09-10 12:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_www.google.com_0.localstorage 2017-09-10 12:27 - 2017-09-10 12:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_www.google.com_0.localstorage-journal 2017-09-10 12:27 - 2017-09-10 12:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_www.youtube.com_0.localstorage 2017-09-10 12:27 - 2017-09-10 12:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-10 01:05 - 2017-09-10 01:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data 2017-09-10 01:05 - 2017-09-12 08:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash 2017-09-11 21:11 - 2017-09-11 21:11 - 000004096 ____T () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\227.tmp 2017-09-11 21:11 - 2017-09-11 21:11 - 000004096 ____T () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\AE78.tmp 2017-09-11 21:11 - 2017-09-11 21:11 - 011122399 ____T () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\C7BD.tmp 2017-09-11 21:10 - 2017-09-11 21:10 - 000004096 ____T () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\EC21.tmp 2017-09-10 01:05 - 2017-09-10 01:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 01:05 - 2017-09-10 01:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 01:05 - 2017-09-10 01:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\YN5EVMH7 2017-09-10 01:05 - 2017-09-10 01:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 01:05 - 2017-09-10 01:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 01:05 - 2017-09-11 21:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ 2017-09-11 21:10 - 2017-09-11 21:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\cdn.dashbid.io 2017-09-11 21:10 - 2017-09-11 21:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\cdn.dashbid.io\prod 2017-09-11 21:10 - 2017-09-11 21:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-11 21:10 - 2017-09-11 21:10 - 000000069 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-10 01:05 - 2017-09-12 08:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\cdn.stickyadstv.com 2017-09-11 21:08 - 2017-09-11 21:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\cdncache-a.akamaihd.net 2017-09-11 21:08 - 2017-09-11 21:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\cdncache-a.akamaihd.net\items 2017-09-11 21:08 - 2017-09-11 21:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 21:08 - 2017-09-11 21:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 21:08 - 2017-09-11 21:09 - 000000484 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 01:05 - 2017-09-12 07:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\eereader.com 2017-09-10 01:07 - 2017-09-12 08:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\efreader.com 2017-09-10 01:11 - 2017-09-12 07:59 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\efreader.com\analytics.sol 2017-09-10 01:05 - 2017-09-12 07:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\egreader.com 2017-09-10 01:05 - 2017-09-10 01:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\macromedia.com 2017-09-10 01:05 - 2017-09-10 01:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\macromedia.com\support 2017-09-10 01:05 - 2017-09-10 01:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\macromedia.com\support\flashplayer 2017-09-10 01:05 - 2017-09-11 21:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\macromedia.com\support\flashplayer\sys 2017-09-10 01:05 - 2017-09-11 21:10 - 000000509 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 21:10 - 2017-09-11 21:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-11 21:10 - 2017-09-11 21:10 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-10 01:05 - 2017-09-10 01:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 01:05 - 2017-09-10 01:05 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 21:08 - 2017-09-11 21:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 21:08 - 2017-09-11 21:08 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 01:05 - 2017-09-10 01:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 01:05 - 2017-09-10 01:05 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 01:07 - 2017-09-10 01:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 01:07 - 2017-09-10 01:07 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 01:05 - 2017-09-10 01:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 01:05 - 2017-09-10 01:05 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data615\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NPTGLBKZ\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 07:07 - 2017-09-12 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616 2017-09-11 07:07 - 2017-09-12 05:59 - 000350208 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Cookies 2017-09-11 07:07 - 2017-09-12 05:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Cookies-journal 2017-09-11 07:07 - 2017-09-12 05:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\databases 2017-09-11 07:07 - 2017-09-12 05:52 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\databases\Databases.db 2017-09-11 07:07 - 2017-09-12 05:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\databases\Databases.db-journal 2017-09-12 05:52 - 2017-09-12 05:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\databases\https_www.fredericks.com_0 2017-09-12 05:52 - 2017-09-12 05:52 - 000020480 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\databases\https_www.fredericks.com_0\1 2017-09-11 07:07 - 2017-09-12 05:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\File System 2017-09-12 03:58 - 2017-09-12 03:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\File System\003 2017-09-12 03:58 - 2017-09-12 05:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\File System\003\t 2017-09-12 05:52 - 2017-09-12 05:52 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\File System\003\t\.usage 2017-09-12 05:52 - 2017-09-12 05:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\File System\003\t\Paths 2017-09-12 05:52 - 2017-09-12 05:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\File System\003\t\Paths\000003.log 2017-09-12 05:52 - 2017-09-12 05:52 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\File System\003\t\Paths\CURRENT 2017-09-12 05:52 - 2017-09-12 05:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\File System\003\t\Paths\LOCK 2017-09-12 05:52 - 2017-09-12 05:52 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\File System\003\t\Paths\LOG 2017-09-12 05:52 - 2017-09-12 05:52 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\File System\003\t\Paths\MANIFEST-000001 2017-09-12 05:55 - 2017-09-12 05:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\File System\006 2017-09-12 05:55 - 2017-09-12 05:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\File System\006\t 2017-09-11 07:07 - 2017-09-12 05:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\File System\Origins 2017-09-11 07:07 - 2017-09-12 05:56 - 000000507 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\File System\Origins\000003.log 2017-09-11 07:07 - 2017-09-11 07:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\File System\Origins\CURRENT 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\File System\Origins\LOCK 2017-09-11 07:07 - 2017-09-12 05:55 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\File System\Origins\LOG 2017-09-11 07:07 - 2017-09-12 05:52 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\File System\Origins\LOG.old 2017-09-11 07:07 - 2017-09-11 07:07 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\File System\Origins\MANIFEST-000001 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\File System\Origins\lost 2017-09-11 07:07 - 2017-09-12 05:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB 2017-09-11 20:33 - 2017-09-11 20:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_breakfast.food.com_0.indexeddb.leveldb 2017-09-11 20:33 - 2017-09-11 20:33 - 000000186 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_breakfast.food.com_0.indexeddb.leveldb\000003.log 2017-09-11 20:33 - 2017-09-11 20:33 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_breakfast.food.com_0.indexeddb.leveldb\CURRENT 2017-09-11 20:33 - 2017-09-11 20:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_breakfast.food.com_0.indexeddb.leveldb\LOCK 2017-09-11 20:33 - 2017-09-11 20:33 - 000000162 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_breakfast.food.com_0.indexeddb.leveldb\LOG 2017-09-11 20:33 - 2017-09-11 20:33 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_breakfast.food.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 20:17 - 2017-09-11 20:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_www.cableone.net_0.indexeddb.leveldb 2017-09-11 20:17 - 2017-09-11 20:17 - 000000190 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_www.cableone.net_0.indexeddb.leveldb\000003.log 2017-09-11 20:17 - 2017-09-11 20:17 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_www.cableone.net_0.indexeddb.leveldb\CURRENT 2017-09-11 20:17 - 2017-09-11 20:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_www.cableone.net_0.indexeddb.leveldb\LOCK 2017-09-11 20:17 - 2017-09-11 20:19 - 000000363 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_www.cableone.net_0.indexeddb.leveldb\LOG 2017-09-11 20:17 - 2017-09-11 20:17 - 000000160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_www.cableone.net_0.indexeddb.leveldb\LOG.old 2017-09-11 20:17 - 2017-09-11 20:17 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_www.cableone.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 03:54 - 2017-09-12 03:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_www.crash.net_0.indexeddb.leveldb 2017-09-12 03:54 - 2017-09-12 03:54 - 000000176 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_www.crash.net_0.indexeddb.leveldb\000003.log 2017-09-12 03:54 - 2017-09-12 03:54 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_www.crash.net_0.indexeddb.leveldb\CURRENT 2017-09-12 03:54 - 2017-09-12 03:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_www.crash.net_0.indexeddb.leveldb\LOCK 2017-09-12 03:54 - 2017-09-12 03:55 - 000000156 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_www.crash.net_0.indexeddb.leveldb\LOG 2017-09-12 03:54 - 2017-09-12 03:54 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_www.crash.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 07:10 - 2017-09-11 07:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb 2017-09-11 07:10 - 2017-09-11 07:10 - 000000190 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb\000003.log 2017-09-11 07:10 - 2017-09-11 07:10 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb\CURRENT 2017-09-11 07:10 - 2017-09-11 07:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb\LOCK 2017-09-11 07:10 - 2017-09-11 07:10 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb\LOG 2017-09-11 07:10 - 2017-09-11 07:10 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\https_www.enterprise.com_0.indexeddb.leveldb 2017-09-11 07:07 - 2017-09-11 07:08 - 000194492 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\https_www.enterprise.com_0.indexeddb.leveldb\000003.log 2017-09-11 07:07 - 2017-09-11 07:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\https_www.enterprise.com_0.indexeddb.leveldb\CURRENT 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\https_www.enterprise.com_0.indexeddb.leveldb\LOCK 2017-09-11 07:07 - 2017-09-11 07:07 - 000000162 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\https_www.enterprise.com_0.indexeddb.leveldb\LOG 2017-09-11 07:07 - 2017-09-11 07:07 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\https_www.enterprise.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 05:52 - 2017-09-12 05:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\https_www.fredericks.com_0.indexeddb.leveldb 2017-09-12 05:52 - 2017-09-12 05:52 - 000000722 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\https_www.fredericks.com_0.indexeddb.leveldb\000003.log 2017-09-12 05:52 - 2017-09-12 05:52 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\https_www.fredericks.com_0.indexeddb.leveldb\CURRENT 2017-09-12 05:52 - 2017-09-12 05:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\https_www.fredericks.com_0.indexeddb.leveldb\LOCK 2017-09-12 05:52 - 2017-09-12 05:52 - 000000162 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\https_www.fredericks.com_0.indexeddb.leveldb\LOG 2017-09-12 05:52 - 2017-09-12 05:52 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\IndexedDB\https_www.fredericks.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 07:07 - 2017-09-12 05:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage 2017-09-11 20:29 - 2017-09-11 20:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 20:29 - 2017-09-11 20:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 20:33 - 2017-09-11 20:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_breakfast.food.com_0.localstorage 2017-09-11 20:33 - 2017-09-11 20:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_breakfast.food.com_0.localstorage-journal 2017-09-11 07:07 - 2017-09-11 07:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 07:07 - 2017-09-11 07:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-11 07:10 - 2017-09-11 07:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_connexity.net_0.localstorage 2017-09-11 07:10 - 2017-09-11 07:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 20:28 - 2017-09-11 20:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_jgu5.amplitudefjtadjlo.website_0.localstorage 2017-09-11 20:28 - 2017-09-11 20:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_jgu5.amplitudefjtadjlo.website_0.localstorage-journal 2017-09-11 07:07 - 2017-09-11 20:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 07:07 - 2017-09-11 20:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 20:27 - 2017-09-11 20:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_rdr.valcom.online_0.localstorage 2017-09-11 20:27 - 2017-09-11 20:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_rdr.valcom.online_0.localstorage-journal 2017-09-11 07:11 - 2017-09-11 07:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-11 07:11 - 2017-09-11 07:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-11 07:07 - 2017-09-11 07:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_tpc.googlesyndication.com_0.localstorage 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_tpc.googlesyndication.com_0.localstorage-journal 2017-09-12 03:55 - 2017-09-12 03:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_washingtonmonthly.com_0.localstorage 2017-09-12 03:55 - 2017-09-12 03:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_washingtonmonthly.com_0.localstorage-journal 2017-09-12 05:54 - 2017-09-12 05:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.businessinsider.com_0.localstorage 2017-09-12 05:54 - 2017-09-12 05:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.businessinsider.com_0.localstorage-journal 2017-09-11 20:17 - 2017-09-11 20:19 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.cableone.net_0.localstorage 2017-09-11 20:17 - 2017-09-11 20:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.cableone.net_0.localstorage-journal 2017-09-11 20:19 - 2017-09-11 20:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 20:19 - 2017-09-11 20:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 20:21 - 2017-09-11 20:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.complex.com_0.localstorage 2017-09-11 20:21 - 2017-09-11 20:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-11 20:32 - 2017-09-11 20:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.concordmonitor.com_0.localstorage 2017-09-11 20:32 - 2017-09-11 20:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.concordmonitor.com_0.localstorage-journal 2017-09-11 20:32 - 2017-09-11 20:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.crash.net_0.localstorage 2017-09-11 20:32 - 2017-09-11 20:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-11 20:21 - 2017-09-11 20:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-11 20:21 - 2017-09-11 20:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-11 20:33 - 2017-09-11 20:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.ehow.com_0.localstorage 2017-09-11 20:33 - 2017-09-11 20:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.ehow.com_0.localstorage-journal 2017-09-11 07:10 - 2017-09-11 07:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-11 07:10 - 2017-09-11 07:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-12 03:51 - 2017-09-12 03:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.golf.com_0.localstorage 2017-09-12 03:51 - 2017-09-12 03:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.golf.com_0.localstorage-journal 2017-09-11 20:20 - 2017-09-11 20:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-11 20:20 - 2017-09-11 20:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-12 05:55 - 2017-09-12 05:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-12 05:55 - 2017-09-12 05:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-12 03:54 - 2017-09-12 03:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.instyle.com_0.localstorage 2017-09-12 03:54 - 2017-09-12 03:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 07:09 - 2017-09-12 05:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 07:09 - 2017-09-12 05:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 20:30 - 2017-09-11 20:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-11 20:30 - 2017-09-11 20:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-11 20:20 - 2017-09-11 20:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-11 20:20 - 2017-09-11 20:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-11 07:13 - 2017-09-12 05:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.macworld.com_0.localstorage 2017-09-11 07:13 - 2017-09-12 05:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-11 07:10 - 2017-09-11 07:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 07:10 - 2017-09-11 07:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-11 07:09 - 2017-09-11 20:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 07:09 - 2017-09-11 20:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 07:13 - 2017-09-12 03:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.petplace.com_0.localstorage 2017-09-11 07:13 - 2017-09-12 03:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.petplace.com_0.localstorage-journal 2017-09-12 03:54 - 2017-09-12 03:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-12 03:54 - 2017-09-12 03:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-11 20:30 - 2017-09-11 20:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.reuters.com_0.localstorage 2017-09-11 20:30 - 2017-09-11 20:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-11 07:07 - 2017-09-11 07:08 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.tmz.com_0.localstorage 2017-09-11 07:07 - 2017-09-11 07:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.tmz.com_0.localstorage-journal 2017-09-11 20:22 - 2017-09-11 20:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.vogue.com_0.localstorage 2017-09-11 20:22 - 2017-09-11 20:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.vogue.com_0.localstorage-journal 2017-09-11 20:17 - 2017-09-11 20:28 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.wnd.com_0.localstorage 2017-09-11 20:17 - 2017-09-11 20:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\http_www.wnd.com_0.localstorage-journal 2017-09-11 07:10 - 2017-09-11 07:10 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 07:10 - 2017-09-11 07:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 20:17 - 2017-09-11 20:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_configusa.veinteractive.com_0.localstorage 2017-09-11 20:17 - 2017-09-11 20:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_configusa.veinteractive.com_0.localstorage-journal 2017-09-11 07:10 - 2017-09-11 07:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_connexity.net_0.localstorage 2017-09-11 07:10 - 2017-09-11 07:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 20:17 - 2017-09-11 20:27 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 20:17 - 2017-09-11 20:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 20:18 - 2017-09-11 20:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_disqus.com_0.localstorage 2017-09-11 20:18 - 2017-09-11 20:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_disqus.com_0.localstorage-journal 2017-09-11 07:08 - 2017-09-11 07:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_gateway.answerscloud.com_0.localstorage 2017-09-11 07:08 - 2017-09-11 07:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_gateway.answerscloud.com_0.localstorage-journal 2017-09-12 05:52 - 2017-09-12 05:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_pokemondb.net_0.localstorage 2017-09-12 05:52 - 2017-09-12 05:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_pokemondb.net_0.localstorage-journal 2017-09-11 07:07 - 2017-09-11 07:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 07:07 - 2017-09-11 20:27 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 07:07 - 2017-09-11 20:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 07:07 - 2017-09-11 07:08 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_www.enterprise.com_0.localstorage 2017-09-11 07:07 - 2017-09-11 07:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_www.enterprise.com_0.localstorage-journal 2017-09-12 05:52 - 2017-09-12 05:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_www.fredericks.com_0.localstorage 2017-09-12 05:52 - 2017-09-12 05:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_www.fredericks.com_0.localstorage-journal 2017-09-11 20:27 - 2017-09-11 20:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_www.paypal.com_0.localstorage 2017-09-11 20:27 - 2017-09-11 20:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Local Storage\https_www.paypal.com_0.localstorage-journal 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data 2017-09-11 07:07 - 2017-09-12 05:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\9R5FLCT2 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 07:07 - 2017-09-11 20:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ 2017-09-11 20:19 - 2017-09-11 20:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\cdn.dashbid.io 2017-09-11 20:19 - 2017-09-11 20:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\cdn.dashbid.io\prod 2017-09-11 20:19 - 2017-09-11 20:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-11 20:19 - 2017-09-11 20:19 - 000000069 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-11 07:07 - 2017-09-12 05:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\cdn.stickyadstv.com 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\cdncache-a.akamaihd.net 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\cdncache-a.akamaihd.net\items 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 07:07 - 2017-09-11 20:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 07:07 - 2017-09-11 20:30 - 000000488 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 07:07 - 2017-09-12 05:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\eereader.com 2017-09-12 03:56 - 2017-09-12 03:56 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\eereader.com\analytics.sol 2017-09-11 07:08 - 2017-09-12 05:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\efreader.com 2017-09-11 07:16 - 2017-09-12 03:59 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\efreader.com\analytics.sol 2017-09-11 07:07 - 2017-09-12 05:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\egreader.com 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\macromedia.com 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\macromedia.com\support 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\macromedia.com\support\flashplayer 2017-09-11 07:07 - 2017-09-11 20:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\macromedia.com\support\flashplayer\sys 2017-09-11 07:07 - 2017-09-11 20:19 - 000000509 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 20:19 - 2017-09-11 20:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-11 20:19 - 2017-09-11 20:19 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 07:07 - 2017-09-11 07:07 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 07:07 - 2017-09-11 07:07 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 07:07 - 2017-09-11 07:07 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 07:08 - 2017-09-11 07:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 07:08 - 2017-09-11 07:08 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 07:07 - 2017-09-11 07:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 07:07 - 2017-09-11 07:07 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data616\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YZLYSKPZ\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 11:25 - 2017-09-12 07:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617 2017-09-10 11:25 - 2017-09-12 07:20 - 000362496 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Cookies 2017-09-10 11:25 - 2017-09-12 07:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Cookies-journal 2017-09-10 11:28 - 2017-09-10 11:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\databases 2017-09-10 11:28 - 2017-09-10 11:28 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\databases\Databases.db 2017-09-10 11:28 - 2017-09-10 11:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\databases\Databases.db-journal 2017-09-10 11:31 - 2017-09-12 07:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\File System 2017-09-12 07:20 - 2017-09-12 07:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\File System\006 2017-09-12 07:20 - 2017-09-12 07:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\File System\006\t 2017-09-10 11:31 - 2017-09-12 07:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\File System\Origins 2017-09-10 11:31 - 2017-09-12 07:14 - 000000588 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\File System\Origins\000003.log 2017-09-10 11:31 - 2017-09-10 11:31 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\File System\Origins\CURRENT 2017-09-10 11:31 - 2017-09-10 11:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\File System\Origins\LOCK 2017-09-10 11:31 - 2017-09-12 07:20 - 000000393 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\File System\Origins\LOG 2017-09-10 11:31 - 2017-09-12 07:13 - 000000744 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\File System\Origins\LOG.old 2017-09-10 11:31 - 2017-09-10 11:31 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\File System\Origins\MANIFEST-000001 2017-09-11 02:18 - 2017-09-11 02:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\File System\Origins\lost 2017-09-10 11:28 - 2017-09-11 02:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB 2017-09-10 11:28 - 2017-09-10 11:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb 2017-09-10 11:28 - 2017-09-10 11:28 - 000000198 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\000003.log 2017-09-10 11:28 - 2017-09-10 11:28 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\CURRENT 2017-09-10 11:28 - 2017-09-10 11:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\LOCK 2017-09-10 11:28 - 2017-09-10 11:28 - 000000168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\LOG 2017-09-10 11:28 - 2017-09-10 11:28 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 12:59 - 2017-09-10 12:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb 2017-09-10 12:59 - 2017-09-10 12:59 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb\000003.log 2017-09-10 12:59 - 2017-09-10 12:59 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb\CURRENT 2017-09-10 12:59 - 2017-09-10 12:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb\LOCK 2017-09-10 12:59 - 2017-09-10 12:59 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb\LOG 2017-09-10 12:59 - 2017-09-10 12:59 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 02:17 - 2017-09-11 02:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\http_www.virginatlantic.com_0.indexeddb.leveldb 2017-09-11 02:17 - 2017-09-11 02:17 - 000000194 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\http_www.virginatlantic.com_0.indexeddb.leveldb\000003.log 2017-09-11 02:17 - 2017-09-11 02:17 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\http_www.virginatlantic.com_0.indexeddb.leveldb\CURRENT 2017-09-11 02:17 - 2017-09-11 02:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\http_www.virginatlantic.com_0.indexeddb.leveldb\LOCK 2017-09-11 02:17 - 2017-09-11 02:17 - 000000165 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\http_www.virginatlantic.com_0.indexeddb.leveldb\LOG 2017-09-11 02:17 - 2017-09-11 02:17 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\http_www.virginatlantic.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 02:16 - 2017-09-11 02:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\https_74760319.lo.cobrowse.liveperson.net_0.indexeddb.leveldb 2017-09-11 02:16 - 2017-09-11 02:16 - 000000800 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\https_74760319.lo.cobrowse.liveperson.net_0.indexeddb.leveldb\000003.log 2017-09-11 02:16 - 2017-09-11 02:16 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\https_74760319.lo.cobrowse.liveperson.net_0.indexeddb.leveldb\CURRENT 2017-09-11 02:16 - 2017-09-11 02:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\https_74760319.lo.cobrowse.liveperson.net_0.indexeddb.leveldb\LOCK 2017-09-11 02:16 - 2017-09-11 02:16 - 000000179 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\https_74760319.lo.cobrowse.liveperson.net_0.indexeddb.leveldb\LOG 2017-09-11 02:16 - 2017-09-11 02:16 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\https_74760319.lo.cobrowse.liveperson.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 02:16 - 2017-09-11 02:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb 2017-09-11 02:16 - 2017-09-11 02:16 - 000001735 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\000003.log 2017-09-11 02:16 - 2017-09-11 02:16 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\CURRENT 2017-09-11 02:16 - 2017-09-11 02:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOCK 2017-09-11 02:16 - 2017-09-11 02:16 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOG 2017-09-11 02:16 - 2017-09-11 02:16 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 11:25 - 2017-09-12 07:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage 2017-09-10 11:27 - 2017-09-10 11:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 11:27 - 2017-09-10 11:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-12 07:13 - 2017-09-12 07:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-12 07:13 - 2017-09-12 07:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 11:26 - 2017-09-10 11:26 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_chicoryapp.com_0.localstorage 2017-09-10 11:26 - 2017-09-10 11:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_chicoryapp.com_0.localstorage-journal 2017-09-10 12:59 - 2017-09-10 12:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_connexity.net_0.localstorage 2017-09-10 12:59 - 2017-09-10 12:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 19:47 - 2017-09-11 19:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_ggjtfuzn.lpgreenworld.com_0.localstorage 2017-09-11 19:47 - 2017-09-11 19:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_ggjtfuzn.lpgreenworld.com_0.localstorage-journal 2017-09-11 19:47 - 2017-09-11 19:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-11 19:47 - 2017-09-11 19:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 13:02 - 2017-09-10 13:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_ru.reuters.com_0.localstorage 2017-09-10 13:02 - 2017-09-10 13:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_ru.reuters.com_0.localstorage-journal 2017-09-10 13:01 - 2017-09-11 19:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-10 13:01 - 2017-09-11 19:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-12 07:16 - 2017-09-12 07:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_variance.tv_0.localstorage 2017-09-12 07:16 - 2017-09-12 07:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_variance.tv_0.localstorage-journal 2017-09-12 07:18 - 2017-09-12 07:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_variety.com_0.localstorage 2017-09-12 07:18 - 2017-09-12 07:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_variety.com_0.localstorage-journal 2017-09-11 02:20 - 2017-09-11 02:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.bendbulletin.com_0.localstorage 2017-09-11 02:20 - 2017-09-11 02:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.bendbulletin.com_0.localstorage-journal 2017-09-12 07:17 - 2017-09-12 07:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.blabbermouth.net_0.localstorage 2017-09-12 07:17 - 2017-09-12 07:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.blabbermouth.net_0.localstorage-journal 2017-09-10 11:30 - 2017-09-10 11:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.bounty.com_0.localstorage 2017-09-10 11:30 - 2017-09-10 11:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.bounty.com_0.localstorage-journal 2017-09-11 02:21 - 2017-09-11 02:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.bravotv.com_0.localstorage 2017-09-11 02:21 - 2017-09-11 02:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.bravotv.com_0.localstorage-journal 2017-09-11 19:52 - 2017-09-11 19:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.bunsinmyoven.com_0.localstorage 2017-09-11 19:52 - 2017-09-11 19:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.bunsinmyoven.com_0.localstorage-journal 2017-09-10 11:31 - 2017-09-10 11:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.caranddriver.com_0.localstorage 2017-09-10 11:31 - 2017-09-10 11:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.caranddriver.com_0.localstorage-journal 2017-09-10 11:28 - 2017-09-11 19:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 11:28 - 2017-09-11 19:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 12:59 - 2017-09-10 13:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.courant.com_0.localstorage 2017-09-10 12:59 - 2017-09-10 13:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-11 02:19 - 2017-09-11 02:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.crash.net_0.localstorage 2017-09-11 02:19 - 2017-09-11 02:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-10 11:29 - 2017-09-10 11:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-10 11:29 - 2017-09-10 11:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-11 19:51 - 2017-09-12 07:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-11 19:51 - 2017-09-12 07:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-10 13:00 - 2017-09-10 13:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.instyle.com_0.localstorage 2017-09-10 13:00 - 2017-09-10 13:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-10 11:27 - 2017-09-11 19:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 11:27 - 2017-09-11 19:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-12 07:16 - 2017-09-12 07:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-12 07:16 - 2017-09-12 07:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-10 11:29 - 2017-09-10 11:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.latimes.com_0.localstorage 2017-09-10 11:29 - 2017-09-10 11:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-10 12:56 - 2017-09-10 12:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.livescore.com_0.localstorage 2017-09-10 12:56 - 2017-09-10 12:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.livescore.com_0.localstorage-journal 2017-09-11 02:19 - 2017-09-11 02:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 02:19 - 2017-09-11 02:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-11 02:16 - 2017-09-11 02:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.memedeportes.com_0.localstorage 2017-09-11 02:16 - 2017-09-11 02:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.memedeportes.com_0.localstorage-journal 2017-09-10 11:26 - 2017-09-10 11:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-10 11:26 - 2017-09-10 11:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-10 12:58 - 2017-09-10 12:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 12:58 - 2017-09-10 12:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-12 07:13 - 2017-09-12 07:14 - 000012288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.parents.com_0.localstorage 2017-09-12 07:13 - 2017-09-12 07:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-10 11:29 - 2017-09-12 07:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-10 11:29 - 2017-09-12 07:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-10 12:59 - 2017-09-11 19:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.reuters.com_0.localstorage 2017-09-10 12:59 - 2017-09-11 19:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-11 02:16 - 2017-09-11 02:17 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.virginatlantic.com_0.localstorage 2017-09-11 02:16 - 2017-09-11 02:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_www.virginatlantic.com_0.localstorage-journal 2017-09-10 11:26 - 2017-09-10 11:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_yunify.chicoryapp.com_0.localstorage 2017-09-10 11:26 - 2017-09-10 11:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\http_yunify.chicoryapp.com_0.localstorage-journal 2017-09-11 19:47 - 2017-09-11 19:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_a.zdbb.net_0.localstorage 2017-09-11 19:47 - 2017-09-11 19:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_a.zdbb.net_0.localstorage-journal 2017-09-10 11:28 - 2017-09-10 11:28 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 11:28 - 2017-09-10 11:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 13:00 - 2017-09-10 13:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_connexity.net_0.localstorage 2017-09-10 13:00 - 2017-09-10 13:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 19:47 - 2017-09-11 19:47 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 19:47 - 2017-09-11 19:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-12 07:13 - 2017-09-12 07:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_e1.fanplayr.com_0.localstorage 2017-09-12 07:13 - 2017-09-12 07:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_e1.fanplayr.com_0.localstorage-journal 2017-09-11 19:50 - 2017-09-11 19:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-11 19:50 - 2017-09-11 19:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-11 02:16 - 2017-09-11 02:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_gateway.answerscloud.com_0.localstorage 2017-09-11 02:16 - 2017-09-11 02:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_gateway.answerscloud.com_0.localstorage-journal 2017-09-12 07:13 - 2017-09-12 07:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_gateway.foresee.com_0.localstorage 2017-09-12 07:13 - 2017-09-12 07:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_gateway.foresee.com_0.localstorage-journal 2017-09-11 02:19 - 2017-09-11 02:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_player.mediabong.net_0.localstorage 2017-09-11 02:19 - 2017-09-11 02:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_player.mediabong.net_0.localstorage-journal 2017-09-11 19:47 - 2017-09-11 19:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 19:47 - 2017-09-11 19:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 02:16 - 2017-09-11 02:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_s.salecycle.com_0.localstorage 2017-09-11 02:16 - 2017-09-11 02:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_s.salecycle.com_0.localstorage-journal 2017-09-11 19:47 - 2017-09-11 19:47 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 19:47 - 2017-09-11 19:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 12:56 - 2017-09-10 12:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_www.catalogfavorites.com_0.localstorage 2017-09-10 12:56 - 2017-09-10 12:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_www.catalogfavorites.com_0.localstorage-journal 2017-09-10 11:26 - 2017-09-10 11:27 - 000791552 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_www.gilt.com_0.localstorage 2017-09-10 11:26 - 2017-09-10 11:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_www.gilt.com_0.localstorage-journal 2017-09-12 07:13 - 2017-09-12 07:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_www.heels.com_0.localstorage 2017-09-12 07:13 - 2017-09-12 07:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_www.heels.com_0.localstorage-journal 2017-09-11 19:47 - 2017-09-11 19:48 - 000019456 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_www.muscleandstrength.com_0.localstorage 2017-09-11 19:47 - 2017-09-11 19:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_www.muscleandstrength.com_0.localstorage-journal 2017-09-11 19:47 - 2017-09-11 19:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_www.whattoexpect.com_0.localstorage 2017-09-11 19:47 - 2017-09-11 19:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_www.whattoexpect.com_0.localstorage-journal 2017-09-11 02:16 - 2017-09-11 02:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_www.youtube.com_0.localstorage 2017-09-11 02:16 - 2017-09-11 02:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-10 11:25 - 2017-09-10 11:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data 2017-09-10 11:25 - 2017-09-12 07:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash 2017-09-10 11:25 - 2017-09-10 11:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 11:25 - 2017-09-10 11:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 11:25 - 2017-09-10 11:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\J47JC3XD 2017-09-10 11:25 - 2017-09-10 11:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 11:25 - 2017-09-10 11:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 11:25 - 2017-09-11 02:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY 2017-09-10 11:26 - 2017-09-12 07:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\cdn.stickyadstv.com 2017-09-11 02:19 - 2017-09-11 02:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\cdncache-a.akamaihd.net 2017-09-11 02:19 - 2017-09-11 02:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\cdncache-a.akamaihd.net\items 2017-09-11 02:19 - 2017-09-11 02:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 02:19 - 2017-09-11 19:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 02:19 - 2017-09-11 19:53 - 000000476 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 11:25 - 2017-09-12 07:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\eereader.com 2017-09-10 11:27 - 2017-09-12 07:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\efreader.com 2017-09-10 11:32 - 2017-09-12 07:21 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\efreader.com\analytics.sol 2017-09-10 11:26 - 2017-09-12 07:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\egreader.com 2017-09-11 02:17 - 2017-09-11 02:19 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\egreader.com\analytics.sol 2017-09-10 11:25 - 2017-09-10 11:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\macromedia.com 2017-09-10 11:25 - 2017-09-10 11:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\macromedia.com\support 2017-09-10 11:25 - 2017-09-10 11:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\macromedia.com\support\flashplayer 2017-09-10 11:25 - 2017-09-11 02:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\macromedia.com\support\flashplayer\sys 2017-09-10 11:25 - 2017-09-11 02:19 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 11:26 - 2017-09-10 11:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 11:26 - 2017-09-10 11:26 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 02:19 - 2017-09-11 02:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 02:19 - 2017-09-11 02:19 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 11:25 - 2017-09-10 11:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 11:25 - 2017-09-10 11:25 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 11:27 - 2017-09-10 11:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 11:27 - 2017-09-10 11:27 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 11:26 - 2017-09-10 11:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 11:26 - 2017-09-10 11:26 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data617\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DGVPM6ZY\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 18:00 - 2017-09-11 13:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618 2017-09-10 18:00 - 2017-09-11 11:51 - 000303104 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Cookies 2017-09-10 18:00 - 2017-09-11 11:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Cookies-journal 2017-09-11 03:01 - 2017-09-11 03:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\databases 2017-09-11 03:01 - 2017-09-11 03:01 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\databases\Databases.db 2017-09-11 03:01 - 2017-09-11 03:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\databases\Databases.db-journal 2017-09-10 18:02 - 2017-09-11 11:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\File System 2017-09-11 11:48 - 2017-09-11 11:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\File System\000 2017-09-11 11:48 - 2017-09-11 11:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\File System\000\t 2017-09-10 18:02 - 2017-09-11 11:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\File System\Origins 2017-09-10 18:02 - 2017-09-11 03:03 - 000000234 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\File System\Origins\000003.log 2017-09-10 18:02 - 2017-09-10 18:02 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\File System\Origins\CURRENT 2017-09-10 18:02 - 2017-09-10 18:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\File System\Origins\LOCK 2017-09-10 18:02 - 2017-09-11 11:48 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\File System\Origins\LOG 2017-09-10 18:02 - 2017-09-11 11:47 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\File System\Origins\LOG.old 2017-09-10 18:02 - 2017-09-10 18:02 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\File System\Origins\MANIFEST-000001 2017-09-10 18:03 - 2017-09-10 18:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\File System\Origins\lost 2017-09-11 03:01 - 2017-09-11 11:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB 2017-09-11 03:06 - 2017-09-11 03:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\http_thedroidguy.com_0.indexeddb.leveldb 2017-09-11 03:06 - 2017-09-11 03:06 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\http_thedroidguy.com_0.indexeddb.leveldb\000003.log 2017-09-11 03:06 - 2017-09-11 03:06 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\http_thedroidguy.com_0.indexeddb.leveldb\CURRENT 2017-09-11 03:06 - 2017-09-11 03:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\http_thedroidguy.com_0.indexeddb.leveldb\LOCK 2017-09-11 03:06 - 2017-09-11 03:06 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\http_thedroidguy.com_0.indexeddb.leveldb\LOG 2017-09-11 03:06 - 2017-09-11 03:06 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\http_thedroidguy.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 11:47 - 2017-09-11 11:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb 2017-09-11 11:47 - 2017-09-11 11:47 - 000000186 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb\000003.log 2017-09-11 11:47 - 2017-09-11 11:47 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb\CURRENT 2017-09-11 11:47 - 2017-09-11 11:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb\LOCK 2017-09-11 11:47 - 2017-09-11 11:47 - 000000162 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb\LOG 2017-09-11 11:47 - 2017-09-11 11:47 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 03:06 - 2017-09-11 03:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb 2017-09-11 03:06 - 2017-09-11 03:06 - 000000196 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\000003.log 2017-09-11 03:06 - 2017-09-11 03:06 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\CURRENT 2017-09-11 03:06 - 2017-09-11 03:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOCK 2017-09-11 03:06 - 2017-09-11 03:08 - 000000374 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOG 2017-09-11 03:06 - 2017-09-11 03:06 - 000000166 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOG.old 2017-09-11 03:06 - 2017-09-11 03:06 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 03:01 - 2017-09-11 03:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\https_tpc.googlesyndication.com_0.indexeddb.leveldb 2017-09-11 03:01 - 2017-09-11 03:01 - 000000202 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\https_tpc.googlesyndication.com_0.indexeddb.leveldb\000003.log 2017-09-11 03:01 - 2017-09-11 03:01 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\https_tpc.googlesyndication.com_0.indexeddb.leveldb\CURRENT 2017-09-11 03:01 - 2017-09-11 03:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\https_tpc.googlesyndication.com_0.indexeddb.leveldb\LOCK 2017-09-11 03:01 - 2017-09-11 03:01 - 000000169 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\https_tpc.googlesyndication.com_0.indexeddb.leveldb\LOG 2017-09-11 03:01 - 2017-09-11 03:01 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\https_tpc.googlesyndication.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 03:01 - 2017-09-11 03:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\https_www.wetsuitwearhouse.com_0.indexeddb.leveldb 2017-09-11 03:01 - 2017-09-11 03:01 - 000000537 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\https_www.wetsuitwearhouse.com_0.indexeddb.leveldb\000003.log 2017-09-11 03:01 - 2017-09-11 03:01 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\https_www.wetsuitwearhouse.com_0.indexeddb.leveldb\CURRENT 2017-09-11 03:01 - 2017-09-11 03:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\https_www.wetsuitwearhouse.com_0.indexeddb.leveldb\LOCK 2017-09-11 03:01 - 2017-09-11 03:01 - 000000168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\https_www.wetsuitwearhouse.com_0.indexeddb.leveldb\LOG 2017-09-11 03:01 - 2017-09-11 03:01 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\IndexedDB\https_www.wetsuitwearhouse.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 18:00 - 2017-09-11 11:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage 2017-09-11 03:02 - 2017-09-11 03:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 03:02 - 2017-09-11 03:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 18:00 - 2017-09-10 18:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 18:00 - 2017-09-10 18:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-11 11:45 - 2017-09-11 11:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_connexity.net_0.localstorage 2017-09-11 11:45 - 2017-09-11 11:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 18:06 - 2017-09-10 18:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_it.reuters.com_0.localstorage 2017-09-10 18:06 - 2017-09-10 18:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_it.reuters.com_0.localstorage-journal 2017-09-11 11:45 - 2017-09-11 11:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_nflfilms.nfl.com_0.localstorage 2017-09-11 11:45 - 2017-09-11 11:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_nflfilms.nfl.com_0.localstorage-journal 2017-09-10 18:00 - 2017-09-10 18:00 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 18:00 - 2017-09-10 18:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 03:05 - 2017-09-11 03:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-11 03:05 - 2017-09-11 03:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-11 11:43 - 2017-09-11 11:45 - 000087040 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_us.asos.com_0.localstorage 2017-09-11 11:43 - 2017-09-11 11:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_us.asos.com_0.localstorage-journal 2017-09-11 11:48 - 2017-09-11 11:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.bhg.com_0.localstorage 2017-09-11 11:48 - 2017-09-11 11:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.bhg.com_0.localstorage-journal 2017-09-10 18:05 - 2017-09-10 18:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-10 18:05 - 2017-09-10 18:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-11 11:48 - 2017-09-11 11:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.bounty.com_0.localstorage 2017-09-11 11:48 - 2017-09-11 11:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.bounty.com_0.localstorage-journal 2017-09-10 18:02 - 2017-09-10 18:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 18:02 - 2017-09-10 18:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 03:06 - 2017-09-11 03:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.food.com_0.localstorage 2017-09-11 03:06 - 2017-09-11 03:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-10 18:00 - 2017-09-10 18:01 - 000008192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.fox5vegas.com_0.localstorage 2017-09-10 18:00 - 2017-09-10 18:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.fox5vegas.com_0.localstorage-journal 2017-09-11 03:04 - 2017-09-11 03:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.foxnews.com_0.localstorage 2017-09-11 03:04 - 2017-09-11 03:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.foxnews.com_0.localstorage-journal 2017-09-10 18:03 - 2017-09-10 18:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-10 18:03 - 2017-09-10 18:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-10 18:05 - 2017-09-10 18:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.instyle.com_0.localstorage 2017-09-10 18:05 - 2017-09-10 18:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 11:46 - 2017-09-11 11:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.insurancejournal.tv_0.localstorage 2017-09-11 11:46 - 2017-09-11 11:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.insurancejournal.tv_0.localstorage-journal 2017-09-11 03:04 - 2017-09-11 03:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.islandpacket.com_0.localstorage 2017-09-11 03:04 - 2017-09-11 03:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.islandpacket.com_0.localstorage-journal 2017-09-11 03:06 - 2017-09-11 03:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.lifeandstylemag.com_0.localstorage 2017-09-11 03:06 - 2017-09-11 03:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.lifeandstylemag.com_0.localstorage-journal 2017-09-11 11:49 - 2017-09-11 11:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.macworld.com_0.localstorage 2017-09-11 11:49 - 2017-09-11 11:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-11 03:04 - 2017-09-11 03:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 03:04 - 2017-09-11 03:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-10 18:02 - 2017-09-11 11:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 18:02 - 2017-09-11 11:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 18:03 - 2017-09-10 18:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.parents.com_0.localstorage 2017-09-10 18:03 - 2017-09-10 18:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-11 11:46 - 2017-09-11 11:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.reuters.com_0.localstorage 2017-09-11 11:46 - 2017-09-11 11:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-11 11:43 - 2017-09-11 11:45 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.southernliving.com_0.localstorage 2017-09-11 11:43 - 2017-09-11 11:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.southernliving.com_0.localstorage-journal 2017-09-10 18:00 - 2017-09-10 18:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.swapalease.com_0.localstorage 2017-09-10 18:00 - 2017-09-10 18:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\http_www.swapalease.com_0.localstorage-journal 2017-09-11 03:04 - 2017-09-11 03:04 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 03:04 - 2017-09-11 03:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 11:45 - 2017-09-11 11:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_connexity.net_0.localstorage 2017-09-11 11:45 - 2017-09-11 11:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 18:00 - 2017-09-11 03:01 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 18:00 - 2017-09-11 03:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 18:03 - 2017-09-10 18:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-10 18:03 - 2017-09-10 18:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-11 03:05 - 2017-09-11 03:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_player.mediabong.net_0.localstorage 2017-09-11 03:05 - 2017-09-11 03:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_player.mediabong.net_0.localstorage-journal 2017-09-11 03:01 - 2017-09-11 03:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 03:01 - 2017-09-11 03:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 18:00 - 2017-09-11 11:44 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 18:00 - 2017-09-11 11:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 03:01 - 2017-09-11 03:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_tpc.googlesyndication.com_0.localstorage 2017-09-11 03:01 - 2017-09-11 03:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_tpc.googlesyndication.com_0.localstorage-journal 2017-09-11 11:43 - 2017-09-11 11:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_widgets.outbrain.com_0.localstorage 2017-09-11 11:43 - 2017-09-11 11:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_widgets.outbrain.com_0.localstorage-journal 2017-09-11 03:00 - 2017-09-11 03:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_www.irishtimes.com_0.localstorage 2017-09-11 03:00 - 2017-09-11 03:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_www.irishtimes.com_0.localstorage-journal 2017-09-11 03:01 - 2017-09-11 03:01 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_www.wetsuitwearhouse.com_0.localstorage 2017-09-11 03:01 - 2017-09-11 03:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Local Storage\https_www.wetsuitwearhouse.com_0.localstorage-journal 2017-09-10 18:00 - 2017-09-10 18:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data 2017-09-10 18:00 - 2017-09-11 11:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash 2017-09-10 18:00 - 2017-09-10 18:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 18:00 - 2017-09-10 18:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 18:00 - 2017-09-10 18:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\VB9RNUNU 2017-09-10 18:00 - 2017-09-10 18:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 18:00 - 2017-09-10 18:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 18:00 - 2017-09-11 11:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V 2017-09-10 18:00 - 2017-09-11 11:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\cdn.stickyadstv.com 2017-09-10 18:00 - 2017-09-10 18:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\cdncache-a.akamaihd.net 2017-09-10 18:00 - 2017-09-10 18:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\cdncache-a.akamaihd.net\items 2017-09-10 18:00 - 2017-09-10 18:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 18:00 - 2017-09-11 11:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 18:00 - 2017-09-11 11:49 - 000000487 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 03:01 - 2017-09-11 03:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\device.maxmind.com 2017-09-11 03:01 - 2017-09-11 03:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\device.maxmind.com\flash 2017-09-11 03:01 - 2017-09-11 03:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\device.maxmind.com\flash\Device.swf 2017-09-11 03:01 - 2017-09-11 03:01 - 000000117 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\device.maxmind.com\flash\Device.swf\__mmapiwsid.sol 2017-09-10 18:00 - 2017-09-11 11:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\eereader.com 2017-09-10 18:01 - 2017-09-11 11:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\efreader.com 2017-09-11 03:03 - 2017-09-11 11:50 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\efreader.com\analytics.sol 2017-09-10 18:00 - 2017-09-11 11:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\egreader.com 2017-09-11 03:03 - 2017-09-11 03:03 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\egreader.com\analytics.sol 2017-09-11 11:47 - 2017-09-11 11:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\inread.anyclip.com 2017-09-11 11:47 - 2017-09-11 11:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\inread.anyclip.com\ac# 2017-09-11 11:47 - 2017-09-11 11:47 - 000000443 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-10 18:00 - 2017-09-10 18:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com 2017-09-10 18:00 - 2017-09-10 18:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com\support 2017-09-10 18:00 - 2017-09-10 18:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com\support\flashplayer 2017-09-10 18:00 - 2017-09-11 11:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com\support\flashplayer\sys 2017-09-10 18:00 - 2017-09-11 11:47 - 000000562 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 18:00 - 2017-09-10 18:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 18:00 - 2017-09-10 18:00 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 18:00 - 2017-09-10 18:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 18:00 - 2017-09-10 18:00 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 03:01 - 2017-09-11 03:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com\support\flashplayer\sys\#device.maxmind.com 2017-09-11 03:01 - 2017-09-11 03:01 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com\support\flashplayer\sys\#device.maxmind.com\settings.sol 2017-09-10 18:00 - 2017-09-10 18:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 18:00 - 2017-09-10 18:00 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 18:01 - 2017-09-10 18:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 18:01 - 2017-09-10 18:01 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 18:00 - 2017-09-10 18:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 18:00 - 2017-09-10 18:00 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 11:47 - 2017-09-11 11:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 11:47 - 2017-09-11 11:47 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-11 03:02 - 2017-09-11 03:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com 2017-09-11 03:02 - 2017-09-11 03:02 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com\settings.sol 2017-09-11 03:02 - 2017-09-11 03:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\objects.tremormedia.com 2017-09-11 03:02 - 2017-09-11 03:02 - 000000073 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data618\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SCWFRL7V\objects.tremormedia.com\com.quantserve.sol 2017-09-10 21:32 - 2017-09-10 23:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619 2017-09-10 21:32 - 2017-09-10 21:40 - 000193536 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Cookies 2017-09-10 21:32 - 2017-09-10 21:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Cookies-journal 2017-09-10 21:34 - 2017-09-10 21:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\databases 2017-09-10 21:34 - 2017-09-10 21:34 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\databases\Databases.db 2017-09-10 21:34 - 2017-09-10 21:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\databases\Databases.db-journal 2017-09-10 21:34 - 2017-09-10 21:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\File System 2017-09-10 21:35 - 2017-09-10 21:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\File System\001 2017-09-10 21:35 - 2017-09-10 21:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\File System\001\t 2017-09-10 21:34 - 2017-09-10 21:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\File System\Origins 2017-09-10 21:34 - 2017-09-10 21:36 - 000000182 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\File System\Origins\000003.log 2017-09-10 21:34 - 2017-09-10 21:34 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\File System\Origins\CURRENT 2017-09-10 21:34 - 2017-09-10 21:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\File System\Origins\LOCK 2017-09-10 21:34 - 2017-09-10 21:35 - 000000487 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\File System\Origins\LOG 2017-09-10 21:34 - 2017-09-10 21:35 - 000000847 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\File System\Origins\LOG.old 2017-09-10 21:34 - 2017-09-10 21:34 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\File System\Origins\MANIFEST-000001 2017-09-10 21:34 - 2017-09-10 21:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\File System\Origins\lost 2017-09-10 21:34 - 2017-09-10 21:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\IndexedDB 2017-09-10 21:34 - 2017-09-10 21:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb 2017-09-10 21:34 - 2017-09-10 21:34 - 000000172 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\000003.log 2017-09-10 21:34 - 2017-09-10 21:34 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\CURRENT 2017-09-10 21:34 - 2017-09-10 21:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOCK 2017-09-10 21:34 - 2017-09-10 21:34 - 000000154 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOG 2017-09-10 21:34 - 2017-09-10 21:34 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 21:32 - 2017-09-10 21:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage 2017-09-10 21:34 - 2017-09-10 21:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\http_connexity.net_0.localstorage 2017-09-10 21:34 - 2017-09-10 21:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 21:34 - 2017-09-10 21:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\http_davedameshek.nfl.com_0.localstorage 2017-09-10 21:34 - 2017-09-10 21:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\http_davedameshek.nfl.com_0.localstorage-journal 2017-09-10 21:37 - 2017-09-10 21:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\http_www.blessyouboys.com_0.localstorage 2017-09-10 21:37 - 2017-09-10 21:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\http_www.blessyouboys.com_0.localstorage-journal 2017-09-10 21:34 - 2017-09-10 21:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 21:34 - 2017-09-10 21:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 21:35 - 2017-09-10 21:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-10 21:35 - 2017-09-10 21:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-10 21:35 - 2017-09-10 21:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\http_www.innerself.com_0.localstorage 2017-09-10 21:35 - 2017-09-10 21:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\http_www.innerself.com_0.localstorage-journal 2017-09-10 21:38 - 2017-09-10 21:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\http_www.instyle.com_0.localstorage 2017-09-10 21:38 - 2017-09-10 21:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-10 21:37 - 2017-09-10 21:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\http_www.macworld.com_0.localstorage 2017-09-10 21:37 - 2017-09-10 21:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-10 21:35 - 2017-09-10 21:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-10 21:35 - 2017-09-10 21:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-10 21:34 - 2017-09-10 21:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 21:34 - 2017-09-10 21:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 21:32 - 2017-09-10 21:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\https_cdn.krxd.net_0.localstorage 2017-09-10 21:32 - 2017-09-10 21:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\https_cdn.krxd.net_0.localstorage-journal 2017-09-10 21:34 - 2017-09-10 21:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\https_connexity.net_0.localstorage 2017-09-10 21:34 - 2017-09-10 21:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 21:32 - 2017-09-10 21:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 21:32 - 2017-09-10 21:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 21:32 - 2017-09-10 21:33 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 21:32 - 2017-09-10 21:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 21:32 - 2017-09-10 21:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\https_tpc.googlesyndication.com_0.localstorage 2017-09-10 21:32 - 2017-09-10 21:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\https_tpc.googlesyndication.com_0.localstorage-journal 2017-09-10 21:32 - 2017-09-10 21:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\https_www.mileskimball.com_0.localstorage 2017-09-10 21:32 - 2017-09-10 21:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\https_www.mileskimball.com_0.localstorage-journal 2017-09-10 21:32 - 2017-09-10 21:33 - 000014336 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\https_www.today.com_0.localstorage 2017-09-10 21:32 - 2017-09-10 21:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\https_www.today.com_0.localstorage-journal 2017-09-10 21:32 - 2017-09-10 21:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\https_www.youtube.com_0.localstorage 2017-09-10 21:32 - 2017-09-10 21:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-10 21:32 - 2017-09-10 21:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data 2017-09-10 21:32 - 2017-09-10 21:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash 2017-09-10 21:32 - 2017-09-10 21:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 21:32 - 2017-09-10 21:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 21:32 - 2017-09-10 21:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\MNSLWDLX 2017-09-10 21:32 - 2017-09-10 21:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 21:32 - 2017-09-10 21:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 21:32 - 2017-09-10 21:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E 2017-09-10 21:32 - 2017-09-10 21:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\cdn.stickyadstv.com 2017-09-10 21:32 - 2017-09-10 21:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\cdncache-a.akamaihd.net 2017-09-10 21:32 - 2017-09-10 21:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\cdncache-a.akamaihd.net\items 2017-09-10 21:32 - 2017-09-10 21:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 21:32 - 2017-09-10 21:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 21:32 - 2017-09-10 21:36 - 000000416 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 21:32 - 2017-09-10 21:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\eereader.com 2017-09-10 21:33 - 2017-09-10 21:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\efreader.com 2017-09-10 21:35 - 2017-09-10 21:35 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\efreader.com\analytics.sol 2017-09-10 21:32 - 2017-09-10 21:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\egreader.com 2017-09-10 21:35 - 2017-09-10 21:35 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\egreader.com\analytics.sol 2017-09-10 21:32 - 2017-09-10 21:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\macromedia.com 2017-09-10 21:32 - 2017-09-10 21:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\macromedia.com\support 2017-09-10 21:32 - 2017-09-10 21:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\macromedia.com\support\flashplayer 2017-09-10 21:32 - 2017-09-10 21:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\macromedia.com\support\flashplayer\sys 2017-09-10 21:32 - 2017-09-10 21:34 - 000000518 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 21:32 - 2017-09-10 21:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 21:32 - 2017-09-10 21:32 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 21:32 - 2017-09-10 21:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 21:32 - 2017-09-10 21:32 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 21:32 - 2017-09-10 21:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 21:32 - 2017-09-10 21:32 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 21:33 - 2017-09-10 21:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 21:33 - 2017-09-10 21:33 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 21:32 - 2017-09-10 21:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 21:32 - 2017-09-10 21:32 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 21:34 - 2017-09-10 21:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com 2017-09-10 21:34 - 2017-09-10 21:34 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com\settings.sol 2017-09-10 21:34 - 2017-09-10 21:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\objects.tremormedia.com 2017-09-10 21:34 - 2017-09-10 21:34 - 000000073 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data619\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NJ4589E\objects.tremormedia.com\com.quantserve.sol 2017-09-10 20:11 - 2017-09-10 21:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620 2017-09-10 20:11 - 2017-09-10 20:19 - 000179200 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Cookies 2017-09-10 20:11 - 2017-09-10 20:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Cookies-journal 2017-09-10 20:14 - 2017-09-10 20:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\File System 2017-09-10 20:14 - 2017-09-10 20:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\File System\Origins 2017-09-10 20:14 - 2017-09-10 20:14 - 000000102 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\File System\Origins\000003.log 2017-09-10 20:15 - 2017-09-10 20:15 - 000000179 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\File System\Origins\000004.ldb 2017-09-10 20:15 - 2017-09-10 20:15 - 000000179 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\File System\Origins\000005.ldb 2017-09-10 20:14 - 2017-09-10 20:14 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\File System\Origins\CURRENT 2017-09-10 20:14 - 2017-09-10 20:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\File System\Origins\LOCK 2017-09-10 20:14 - 2017-09-10 20:15 - 000000741 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\File System\Origins\LOG 2017-09-10 20:14 - 2017-09-10 20:14 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\File System\Origins\MANIFEST-000001 2017-09-10 20:15 - 2017-09-10 20:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\File System\Origins\lost 2017-09-10 20:11 - 2017-09-10 20:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage 2017-09-10 20:12 - 2017-09-10 20:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_adf.ly_0.localstorage 2017-09-10 20:12 - 2017-09-10 20:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_adf.ly_0.localstorage-journal 2017-09-10 20:11 - 2017-09-10 20:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 20:11 - 2017-09-10 20:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 20:12 - 2017-09-10 20:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_hades.srvtrck.com_0.localstorage 2017-09-10 20:12 - 2017-09-10 20:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_hades.srvtrck.com_0.localstorage-journal 2017-09-10 20:11 - 2017-09-10 20:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 20:11 - 2017-09-10 20:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 20:16 - 2017-09-10 20:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-10 20:16 - 2017-09-10 20:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-10 20:17 - 2017-09-10 20:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_thetop.tv_0.localstorage 2017-09-10 20:17 - 2017-09-10 20:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_thetop.tv_0.localstorage-journal 2017-09-10 20:14 - 2017-09-10 20:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 20:14 - 2017-09-10 20:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 20:15 - 2017-09-10 20:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-10 20:15 - 2017-09-10 20:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-10 20:13 - 2017-09-10 20:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 20:13 - 2017-09-10 20:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 20:13 - 2017-09-10 20:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 20:13 - 2017-09-10 20:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 20:11 - 2017-09-10 20:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_www.problemsolvers.com_0.localstorage 2017-09-10 20:11 - 2017-09-10 20:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_www.problemsolvers.com_0.localstorage-journal 2017-09-10 20:14 - 2017-09-10 20:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_www.reuters.com_0.localstorage 2017-09-10 20:14 - 2017-09-10 20:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-10 20:11 - 2017-09-10 20:12 - 000012288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_www.shape.com_0.localstorage 2017-09-10 20:11 - 2017-09-10 20:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\http_www.shape.com_0.localstorage-journal 2017-09-10 20:12 - 2017-09-10 20:12 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 20:12 - 2017-09-10 20:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 20:11 - 2017-09-10 20:12 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 20:11 - 2017-09-10 20:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 20:11 - 2017-09-10 20:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data 2017-09-10 20:11 - 2017-09-10 20:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash 2017-09-10 20:11 - 2017-09-10 20:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 20:11 - 2017-09-10 20:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 20:11 - 2017-09-10 20:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\Q3YXNN7F 2017-09-10 20:11 - 2017-09-10 20:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 20:11 - 2017-09-10 20:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 20:11 - 2017-09-10 20:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG 2017-09-10 20:11 - 2017-09-10 20:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\cdn.stickyadstv.com 2017-09-10 20:11 - 2017-09-10 20:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\cdncache-a.akamaihd.net 2017-09-10 20:11 - 2017-09-10 20:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\cdncache-a.akamaihd.net\items 2017-09-10 20:11 - 2017-09-10 20:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 20:11 - 2017-09-10 20:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 20:11 - 2017-09-10 20:17 - 000000416 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 20:11 - 2017-09-10 20:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\eereader.com 2017-09-10 20:16 - 2017-09-10 20:16 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\eereader.com\analytics.sol 2017-09-10 20:13 - 2017-09-10 20:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\efreader.com 2017-09-10 20:11 - 2017-09-10 20:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\egreader.com 2017-09-10 20:11 - 2017-09-10 20:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\macromedia.com 2017-09-10 20:11 - 2017-09-10 20:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\macromedia.com\support 2017-09-10 20:11 - 2017-09-10 20:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\macromedia.com\support\flashplayer 2017-09-10 20:11 - 2017-09-10 20:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\macromedia.com\support\flashplayer\sys 2017-09-10 20:11 - 2017-09-10 20:13 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 20:11 - 2017-09-10 20:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 20:11 - 2017-09-10 20:11 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 20:11 - 2017-09-10 20:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 20:11 - 2017-09-10 20:11 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 20:11 - 2017-09-10 20:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 20:11 - 2017-09-10 20:11 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 20:13 - 2017-09-10 20:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 20:13 - 2017-09-10 20:13 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 20:11 - 2017-09-10 20:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 20:11 - 2017-09-10 20:11 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data620\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NT7R5GDG\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 04:36 - 2017-09-12 09:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621 2017-09-11 04:36 - 2017-09-12 07:41 - 000326656 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Cookies 2017-09-11 04:36 - 2017-09-12 07:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Cookies-journal 2017-09-11 04:37 - 2017-09-11 04:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\databases 2017-09-11 04:37 - 2017-09-11 04:37 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\databases\Databases.db 2017-09-11 04:37 - 2017-09-11 04:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\databases\Databases.db-journal 2017-09-11 04:36 - 2017-09-12 07:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System 2017-09-11 04:44 - 2017-09-11 04:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\001 2017-09-11 04:44 - 2017-09-12 07:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\001\t 2017-09-12 07:33 - 2017-09-12 07:33 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\001\t\.usage 2017-09-12 03:35 - 2017-09-12 07:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\001\t\Paths 2017-09-12 03:35 - 2017-09-12 03:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\001\t\Paths\000003.log 2017-09-12 03:35 - 2017-09-12 03:35 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\001\t\Paths\CURRENT 2017-09-12 03:35 - 2017-09-12 03:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\001\t\Paths\LOCK 2017-09-12 03:35 - 2017-09-12 07:33 - 000000307 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\001\t\Paths\LOG 2017-09-12 03:35 - 2017-09-12 03:38 - 000000307 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\001\t\Paths\LOG.old 2017-09-12 03:35 - 2017-09-12 03:35 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\001\t\Paths\MANIFEST-000001 2017-09-12 03:30 - 2017-09-12 03:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\002 2017-09-12 03:30 - 2017-09-12 03:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\002\t 2017-09-12 03:35 - 2017-09-12 03:35 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\002\t\.usage 2017-09-12 03:35 - 2017-09-12 03:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\002\t\Paths 2017-09-12 03:35 - 2017-09-12 03:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\002\t\Paths\000003.log 2017-09-12 03:35 - 2017-09-12 03:35 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\002\t\Paths\CURRENT 2017-09-12 03:35 - 2017-09-12 03:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\002\t\Paths\LOCK 2017-09-12 03:35 - 2017-09-12 03:35 - 000000131 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\002\t\Paths\LOG 2017-09-12 03:35 - 2017-09-12 03:35 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\002\t\Paths\MANIFEST-000001 2017-09-12 03:34 - 2017-09-12 03:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\003 2017-09-12 03:34 - 2017-09-12 03:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\003\t 2017-09-12 03:35 - 2017-09-12 03:35 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\003\t\.usage 2017-09-12 03:35 - 2017-09-12 03:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\003\t\Paths 2017-09-12 03:35 - 2017-09-12 03:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\003\t\Paths\000003.log 2017-09-12 03:35 - 2017-09-12 03:35 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\003\t\Paths\CURRENT 2017-09-12 03:35 - 2017-09-12 03:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\003\t\Paths\LOCK 2017-09-12 03:35 - 2017-09-12 03:35 - 000000131 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\003\t\Paths\LOG 2017-09-12 03:35 - 2017-09-12 03:35 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\003\t\Paths\MANIFEST-000001 2017-09-12 03:37 - 2017-09-12 03:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\004 2017-09-12 03:37 - 2017-09-12 03:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\004\t 2017-09-12 03:38 - 2017-09-12 03:38 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\004\t\.usage 2017-09-12 03:38 - 2017-09-12 03:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\004\t\Paths 2017-09-12 03:38 - 2017-09-12 03:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\004\t\Paths\000003.log 2017-09-12 03:38 - 2017-09-12 03:38 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\004\t\Paths\CURRENT 2017-09-12 03:38 - 2017-09-12 03:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\004\t\Paths\LOCK 2017-09-12 03:38 - 2017-09-12 03:38 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\004\t\Paths\LOG 2017-09-12 03:38 - 2017-09-12 03:38 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\004\t\Paths\MANIFEST-000001 2017-09-12 07:36 - 2017-09-12 07:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\005 2017-09-12 07:36 - 2017-09-12 07:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\005\t 2017-09-11 04:36 - 2017-09-12 07:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\Origins 2017-09-11 04:36 - 2017-09-12 07:37 - 000000441 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\Origins\000003.log 2017-09-11 04:36 - 2017-09-11 04:36 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\Origins\CURRENT 2017-09-11 04:36 - 2017-09-11 04:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\Origins\LOCK 2017-09-11 04:36 - 2017-09-12 07:36 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\Origins\LOG 2017-09-11 04:36 - 2017-09-12 07:33 - 000000393 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\Origins\LOG.old 2017-09-11 04:36 - 2017-09-11 04:36 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\Origins\MANIFEST-000001 2017-09-11 04:37 - 2017-09-11 04:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\File System\Origins\lost 2017-09-11 04:37 - 2017-09-12 07:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB 2017-09-12 03:38 - 2017-09-12 03:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb 2017-09-12 03:38 - 2017-09-12 03:38 - 000000178 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\000003.log 2017-09-12 03:38 - 2017-09-12 03:38 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\CURRENT 2017-09-12 03:38 - 2017-09-12 03:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\LOCK 2017-09-12 03:38 - 2017-09-12 03:38 - 000000157 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\LOG 2017-09-12 03:38 - 2017-09-12 03:38 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 07:33 - 2017-09-12 07:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_lax1-ib.adnxs.com_0.indexeddb.leveldb 2017-09-12 07:33 - 2017-09-12 07:33 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_lax1-ib.adnxs.com_0.indexeddb.leveldb\000003.log 2017-09-12 07:33 - 2017-09-12 07:33 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_lax1-ib.adnxs.com_0.indexeddb.leveldb\CURRENT 2017-09-12 07:33 - 2017-09-12 07:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_lax1-ib.adnxs.com_0.indexeddb.leveldb\LOCK 2017-09-12 07:33 - 2017-09-12 07:33 - 000000160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_lax1-ib.adnxs.com_0.indexeddb.leveldb\LOG 2017-09-12 07:33 - 2017-09-12 07:33 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_lax1-ib.adnxs.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 03:35 - 2017-09-12 03:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_www.blessyouboys.com_0.indexeddb.leveldb 2017-09-12 03:35 - 2017-09-12 03:35 - 000000190 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_www.blessyouboys.com_0.indexeddb.leveldb\000003.log 2017-09-12 03:35 - 2017-09-12 03:35 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_www.blessyouboys.com_0.indexeddb.leveldb\CURRENT 2017-09-12 03:35 - 2017-09-12 03:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_www.blessyouboys.com_0.indexeddb.leveldb\LOCK 2017-09-12 03:35 - 2017-09-12 03:35 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_www.blessyouboys.com_0.indexeddb.leveldb\LOG 2017-09-12 03:35 - 2017-09-12 03:35 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_www.blessyouboys.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 04:42 - 2017-09-11 04:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_www.jamieoliver.com_0.indexeddb.leveldb 2017-09-11 04:42 - 2017-09-11 04:42 - 000000188 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_www.jamieoliver.com_0.indexeddb.leveldb\000003.log 2017-09-11 04:42 - 2017-09-11 04:42 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_www.jamieoliver.com_0.indexeddb.leveldb\CURRENT 2017-09-11 04:42 - 2017-09-11 04:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_www.jamieoliver.com_0.indexeddb.leveldb\LOCK 2017-09-11 04:42 - 2017-09-11 04:42 - 000000162 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_www.jamieoliver.com_0.indexeddb.leveldb\LOG 2017-09-11 04:42 - 2017-09-11 04:42 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\http_www.jamieoliver.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 04:43 - 2017-09-11 04:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\https_eastads.simpli.fi_0.indexeddb.leveldb 2017-09-11 04:43 - 2017-09-11 04:43 - 000000186 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\https_eastads.simpli.fi_0.indexeddb.leveldb\000003.log 2017-09-11 04:43 - 2017-09-11 04:43 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\https_eastads.simpli.fi_0.indexeddb.leveldb\CURRENT 2017-09-11 04:43 - 2017-09-11 04:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\https_eastads.simpli.fi_0.indexeddb.leveldb\LOCK 2017-09-11 04:43 - 2017-09-11 04:43 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\https_eastads.simpli.fi_0.indexeddb.leveldb\LOG 2017-09-11 04:43 - 2017-09-11 04:43 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\https_eastads.simpli.fi_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 04:37 - 2017-09-11 04:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb 2017-09-11 04:37 - 2017-09-11 04:37 - 000001338 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\000003.log 2017-09-11 04:37 - 2017-09-11 04:37 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\CURRENT 2017-09-11 04:37 - 2017-09-11 04:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOCK 2017-09-11 04:37 - 2017-09-11 04:37 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOG 2017-09-11 04:37 - 2017-09-11 04:37 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 04:37 - 2017-09-11 04:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\https_www.homedepot.ca_0.indexeddb.leveldb 2017-09-11 04:37 - 2017-09-11 04:37 - 000072798 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\https_www.homedepot.ca_0.indexeddb.leveldb\000003.log 2017-09-11 04:37 - 2017-09-11 04:37 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\https_www.homedepot.ca_0.indexeddb.leveldb\CURRENT 2017-09-11 04:37 - 2017-09-11 04:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\https_www.homedepot.ca_0.indexeddb.leveldb\LOCK 2017-09-11 04:37 - 2017-09-11 04:37 - 000000160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\https_www.homedepot.ca_0.indexeddb.leveldb\LOG 2017-09-11 04:37 - 2017-09-11 04:37 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\IndexedDB\https_www.homedepot.ca_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 04:36 - 2017-09-12 07:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage 2017-09-11 04:42 - 2017-09-12 03:38 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_allrecipes.com_0.localstorage 2017-09-11 04:42 - 2017-09-12 03:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-12 07:35 - 2017-09-12 07:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-12 07:35 - 2017-09-12 07:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 04:37 - 2017-09-11 04:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 04:37 - 2017-09-11 04:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-12 03:34 - 2017-09-12 03:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_connexity.net_0.localstorage 2017-09-12 03:34 - 2017-09-12 03:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-12 03:32 - 2017-09-12 03:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_davedameshek.nfl.com_0.localstorage 2017-09-12 03:32 - 2017-09-12 03:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_davedameshek.nfl.com_0.localstorage-journal 2017-09-11 04:39 - 2017-09-11 04:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_nflfilms.nfl.com_0.localstorage 2017-09-11 04:39 - 2017-09-11 04:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_nflfilms.nfl.com_0.localstorage-journal 2017-09-12 03:34 - 2017-09-12 03:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_sync.graph.bluecava.com_0.localstorage 2017-09-12 03:34 - 2017-09-12 03:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_sync.graph.bluecava.com_0.localstorage-journal 2017-09-12 04:36 - 2017-09-12 04:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.blabbermouth.net_0.localstorage 2017-09-12 04:36 - 2017-09-12 04:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.blabbermouth.net_0.localstorage-journal 2017-09-12 03:36 - 2017-09-12 03:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.blessyouboys.com_0.localstorage 2017-09-12 03:36 - 2017-09-12 03:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.blessyouboys.com_0.localstorage-journal 2017-09-11 04:39 - 2017-09-11 04:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 04:39 - 2017-09-11 04:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 04:36 - 2017-09-11 04:38 - 000016384 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.cnn.com_0.localstorage 2017-09-11 04:36 - 2017-09-11 04:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.cnn.com_0.localstorage-journal 2017-09-11 04:41 - 2017-09-11 04:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.complex.com_0.localstorage 2017-09-11 04:41 - 2017-09-11 04:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-12 04:35 - 2017-09-12 04:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-12 04:35 - 2017-09-12 04:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-12 07:33 - 2017-09-12 07:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.easybib.com_0.localstorage 2017-09-12 07:33 - 2017-09-12 07:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.easybib.com_0.localstorage-journal 2017-09-11 04:40 - 2017-09-11 04:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-11 04:40 - 2017-09-11 04:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-12 03:34 - 2017-09-12 03:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.finecooking.com_0.localstorage 2017-09-12 03:34 - 2017-09-12 03:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.finecooking.com_0.localstorage-journal 2017-09-12 04:37 - 2017-09-12 04:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.food.com_0.localstorage 2017-09-12 04:37 - 2017-09-12 04:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-11 04:38 - 2017-09-11 04:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 04:38 - 2017-09-11 04:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 04:40 - 2017-09-11 04:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-11 04:40 - 2017-09-11 04:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-11 04:39 - 2017-09-11 04:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-11 04:39 - 2017-09-11 04:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-12 03:33 - 2017-09-12 03:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.nbcconnecticut.com_0.localstorage 2017-09-12 03:33 - 2017-09-12 03:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.nbcconnecticut.com_0.localstorage-journal 2017-09-11 04:42 - 2017-09-11 04:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 04:42 - 2017-09-11 04:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-12 07:36 - 2017-09-12 07:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.parents.com_0.localstorage 2017-09-12 07:36 - 2017-09-12 07:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-12 04:34 - 2017-09-12 04:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-12 04:34 - 2017-09-12 04:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-11 04:41 - 2017-09-11 04:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.qvc.com_0.localstorage 2017-09-11 04:41 - 2017-09-11 04:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.qvc.com_0.localstorage-journal 2017-09-12 07:33 - 2017-09-12 07:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.tsmplug.com_0.localstorage 2017-09-12 07:33 - 2017-09-12 07:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.tsmplug.com_0.localstorage-journal 2017-09-12 03:31 - 2017-09-12 03:32 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.vh1.com_0.localstorage 2017-09-12 03:31 - 2017-09-12 03:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\http_www.vh1.com_0.localstorage-journal 2017-09-11 04:36 - 2017-09-11 04:37 - 000012288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\https_a125375509.cdn.optimizely.com_0.localstorage 2017-09-11 04:36 - 2017-09-11 04:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\https_a125375509.cdn.optimizely.com_0.localstorage-journal 2017-09-12 04:35 - 2017-09-12 04:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\https_ad.doubleclick.net_0.localstorage 2017-09-12 04:35 - 2017-09-12 04:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\https_ad.doubleclick.net_0.localstorage-journal 2017-09-12 04:37 - 2017-09-12 04:37 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\https_c.betrad.com_0.localstorage 2017-09-12 04:37 - 2017-09-12 04:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-12 03:34 - 2017-09-12 03:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\https_connexity.net_0.localstorage 2017-09-12 03:34 - 2017-09-12 03:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 04:37 - 2017-09-11 04:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\https_gateway.answerscloud.com_0.localstorage 2017-09-11 04:37 - 2017-09-11 04:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\https_gateway.answerscloud.com_0.localstorage-journal 2017-09-11 04:37 - 2017-09-11 04:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\https_widgets.outbrain.com_0.localstorage 2017-09-11 04:37 - 2017-09-11 04:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\https_widgets.outbrain.com_0.localstorage-journal 2017-09-11 04:37 - 2017-09-11 04:38 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\https_www.homedepot.ca_0.localstorage 2017-09-11 04:37 - 2017-09-11 04:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\https_www.homedepot.ca_0.localstorage-journal 2017-09-12 04:31 - 2017-09-12 04:32 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\https_www.shmoop.com_0.localstorage 2017-09-12 04:31 - 2017-09-12 04:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\https_www.shmoop.com_0.localstorage-journal 2017-09-12 04:31 - 2017-09-12 04:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\https_www.stitchery.com_0.localstorage 2017-09-12 04:31 - 2017-09-12 04:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\https_www.stitchery.com_0.localstorage-journal 2017-09-11 04:37 - 2017-09-12 03:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\https_www.youtube.com_0.localstorage 2017-09-11 04:37 - 2017-09-12 03:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-11 04:36 - 2017-09-11 04:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data 2017-09-11 04:36 - 2017-09-12 07:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash 2017-09-11 04:36 - 2017-09-11 04:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 04:36 - 2017-09-11 04:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 04:36 - 2017-09-11 04:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\NX7P659M 2017-09-11 04:36 - 2017-09-11 04:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 04:36 - 2017-09-11 04:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 04:36 - 2017-09-11 04:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBKPVVZX 2017-09-11 04:37 - 2017-09-12 07:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBKPVVZX\cdn.stickyadstv.com 2017-09-11 04:36 - 2017-09-12 07:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBKPVVZX\eereader.com 2017-09-11 04:38 - 2017-09-12 07:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBKPVVZX\efreader.com 2017-09-11 04:46 - 2017-09-12 03:39 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBKPVVZX\efreader.com\analytics.sol 2017-09-11 04:36 - 2017-09-12 07:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBKPVVZX\egreader.com 2017-09-12 03:37 - 2017-09-12 03:37 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBKPVVZX\egreader.com\analytics.sol 2017-09-11 04:36 - 2017-09-11 04:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBKPVVZX\macromedia.com 2017-09-11 04:36 - 2017-09-11 04:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBKPVVZX\macromedia.com\support 2017-09-11 04:36 - 2017-09-11 04:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBKPVVZX\macromedia.com\support\flashplayer 2017-09-11 04:36 - 2017-09-11 04:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBKPVVZX\macromedia.com\support\flashplayer\sys 2017-09-11 04:36 - 2017-09-11 04:38 - 000000464 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBKPVVZX\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 04:37 - 2017-09-11 04:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBKPVVZX\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 04:37 - 2017-09-11 04:37 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBKPVVZX\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 04:36 - 2017-09-11 04:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBKPVVZX\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 04:36 - 2017-09-11 04:36 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBKPVVZX\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 04:38 - 2017-09-11 04:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBKPVVZX\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 04:38 - 2017-09-11 04:38 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBKPVVZX\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 04:36 - 2017-09-11 04:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBKPVVZX\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 04:36 - 2017-09-11 04:36 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data621\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBKPVVZX\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 17:09 - 2017-09-12 04:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622 2017-09-10 17:09 - 2017-09-12 04:18 - 000324608 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Cookies 2017-09-10 17:09 - 2017-09-12 04:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Cookies-journal 2017-09-10 17:12 - 2017-09-10 17:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\databases 2017-09-10 17:12 - 2017-09-10 17:12 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\databases\Databases.db 2017-09-10 17:12 - 2017-09-10 17:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\databases\Databases.db-journal 2017-09-10 17:13 - 2017-09-12 01:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System 2017-09-10 17:13 - 2017-09-10 17:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\000 2017-09-10 17:13 - 2017-09-12 01:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\000\t 2017-09-12 01:48 - 2017-09-12 01:48 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\000\t\.usage 2017-09-12 01:48 - 2017-09-12 01:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\000\t\Paths 2017-09-12 01:48 - 2017-09-12 01:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\000\t\Paths\000003.log 2017-09-12 01:48 - 2017-09-12 01:48 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\000\t\Paths\CURRENT 2017-09-12 01:48 - 2017-09-12 01:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\000\t\Paths\LOCK 2017-09-12 01:48 - 2017-09-12 01:48 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\000\t\Paths\LOG 2017-09-12 01:48 - 2017-09-12 01:48 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\000\t\Paths\MANIFEST-000001 2017-09-10 17:17 - 2017-09-10 17:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\001 2017-09-10 17:17 - 2017-09-12 01:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\001\t 2017-09-12 01:48 - 2017-09-12 01:48 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\001\t\.usage 2017-09-12 01:48 - 2017-09-12 01:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\001\t\Paths 2017-09-12 01:48 - 2017-09-12 01:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\001\t\Paths\000003.log 2017-09-12 01:48 - 2017-09-12 01:48 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\001\t\Paths\CURRENT 2017-09-12 01:48 - 2017-09-12 01:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\001\t\Paths\LOCK 2017-09-12 01:48 - 2017-09-12 01:48 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\001\t\Paths\LOG 2017-09-12 01:48 - 2017-09-12 01:48 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\001\t\Paths\MANIFEST-000001 2017-09-12 01:47 - 2017-09-12 01:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\002 2017-09-12 01:47 - 2017-09-12 01:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\002\t 2017-09-12 01:48 - 2017-09-12 01:48 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\002\t\.usage 2017-09-12 01:48 - 2017-09-12 01:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\002\t\Paths 2017-09-12 01:48 - 2017-09-12 01:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\002\t\Paths\000003.log 2017-09-12 01:48 - 2017-09-12 01:48 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\002\t\Paths\CURRENT 2017-09-12 01:48 - 2017-09-12 01:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\002\t\Paths\LOCK 2017-09-12 01:48 - 2017-09-12 01:48 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\002\t\Paths\LOG 2017-09-12 01:48 - 2017-09-12 01:48 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\002\t\Paths\MANIFEST-000001 2017-09-12 01:51 - 2017-09-12 01:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\003 2017-09-12 01:51 - 2017-09-12 01:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\003\t 2017-09-12 01:52 - 2017-09-12 01:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\004 2017-09-12 01:52 - 2017-09-12 01:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\004\t 2017-09-10 17:13 - 2017-09-12 04:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\Origins 2017-09-10 17:13 - 2017-09-12 01:54 - 000000374 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\Origins\000003.log 2017-09-10 17:13 - 2017-09-10 17:13 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\Origins\CURRENT 2017-09-10 17:13 - 2017-09-10 17:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\Origins\LOCK 2017-09-10 17:13 - 2017-09-12 04:18 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\Origins\LOG 2017-09-10 17:13 - 2017-09-12 04:16 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\Origins\LOG.old 2017-09-10 17:13 - 2017-09-10 17:13 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\File System\Origins\MANIFEST-000001 2017-09-10 17:12 - 2017-09-12 01:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\IndexedDB 2017-09-10 17:12 - 2017-09-10 17:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\IndexedDB\http_nflfilms.nfl.com_0.indexeddb.leveldb 2017-09-10 17:12 - 2017-09-10 17:12 - 000000182 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\IndexedDB\http_nflfilms.nfl.com_0.indexeddb.leveldb\000003.log 2017-09-10 17:12 - 2017-09-10 17:12 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\IndexedDB\http_nflfilms.nfl.com_0.indexeddb.leveldb\CURRENT 2017-09-10 17:12 - 2017-09-10 17:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\IndexedDB\http_nflfilms.nfl.com_0.indexeddb.leveldb\LOCK 2017-09-10 17:12 - 2017-09-10 17:12 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\IndexedDB\http_nflfilms.nfl.com_0.indexeddb.leveldb\LOG 2017-09-10 17:12 - 2017-09-10 17:12 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\IndexedDB\http_nflfilms.nfl.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 01:50 - 2017-09-12 01:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb 2017-09-12 01:50 - 2017-09-12 01:50 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\000003.log 2017-09-12 01:50 - 2017-09-12 01:50 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\CURRENT 2017-09-12 01:50 - 2017-09-12 01:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\LOCK 2017-09-12 01:50 - 2017-09-12 01:50 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\LOG 2017-09-12 01:50 - 2017-09-12 01:50 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 01:48 - 2017-09-12 01:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\IndexedDB\http_www.shape.com_0.indexeddb.leveldb 2017-09-12 01:48 - 2017-09-12 01:48 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\IndexedDB\http_www.shape.com_0.indexeddb.leveldb\000003.log 2017-09-12 01:48 - 2017-09-12 01:48 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\IndexedDB\http_www.shape.com_0.indexeddb.leveldb\CURRENT 2017-09-12 01:48 - 2017-09-12 01:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\IndexedDB\http_www.shape.com_0.indexeddb.leveldb\LOCK 2017-09-12 01:48 - 2017-09-12 01:48 - 000000156 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\IndexedDB\http_www.shape.com_0.indexeddb.leveldb\LOG 2017-09-12 01:48 - 2017-09-12 01:48 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\IndexedDB\http_www.shape.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 17:09 - 2017-09-12 04:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage 2017-09-10 17:15 - 2017-09-12 01:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_allrecipes.com_0.localstorage 2017-09-10 17:15 - 2017-09-12 01:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-12 04:13 - 2017-09-12 04:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-12 04:13 - 2017-09-12 04:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 17:12 - 2017-09-12 01:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 17:12 - 2017-09-12 01:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-12 01:50 - 2017-09-12 01:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_connexity.net_0.localstorage 2017-09-12 01:50 - 2017-09-12 01:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 17:12 - 2017-09-10 17:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_nflfilms.nfl.com_0.localstorage 2017-09-10 17:12 - 2017-09-10 17:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_nflfilms.nfl.com_0.localstorage-journal 2017-09-10 17:10 - 2017-09-10 17:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 17:10 - 2017-09-10 17:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-12 04:11 - 2017-09-12 04:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_secure-us.imrworldwide.com_0.localstorage 2017-09-12 04:11 - 2017-09-12 04:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_secure-us.imrworldwide.com_0.localstorage-journal 2017-09-12 04:15 - 2017-09-12 04:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_washingtonmonthly.com_0.localstorage 2017-09-12 04:15 - 2017-09-12 04:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_washingtonmonthly.com_0.localstorage-journal 2017-09-12 04:16 - 2017-09-12 04:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_webassign.net_0.localstorage 2017-09-12 04:16 - 2017-09-12 04:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_webassign.net_0.localstorage-journal 2017-09-10 17:14 - 2017-09-10 17:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-10 17:14 - 2017-09-10 17:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-10 17:12 - 2017-09-10 17:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 17:12 - 2017-09-10 17:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-12 01:52 - 2017-09-12 01:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.complex.com_0.localstorage 2017-09-12 01:52 - 2017-09-12 01:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-10 17:13 - 2017-09-10 17:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.courant.com_0.localstorage 2017-09-10 17:13 - 2017-09-10 17:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-12 01:51 - 2017-09-12 01:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.crash.net_0.localstorage 2017-09-12 01:51 - 2017-09-12 01:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-12 04:11 - 2017-09-12 04:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.curtainworks.com_0.localstorage 2017-09-12 04:11 - 2017-09-12 04:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.curtainworks.com_0.localstorage-journal 2017-09-12 01:52 - 2017-09-12 01:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.fitnessmagazine.com_0.localstorage 2017-09-12 01:52 - 2017-09-12 01:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.fitnessmagazine.com_0.localstorage-journal 2017-09-12 04:14 - 2017-09-12 04:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.insurancejournal.tv_0.localstorage 2017-09-12 04:14 - 2017-09-12 04:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.insurancejournal.tv_0.localstorage-journal 2017-09-10 17:13 - 2017-09-10 17:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 17:13 - 2017-09-10 17:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-12 01:50 - 2017-09-12 01:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.latimes.com_0.localstorage 2017-09-12 01:50 - 2017-09-12 01:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-12 01:50 - 2017-09-12 01:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-12 01:50 - 2017-09-12 01:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-12 04:13 - 2017-09-12 04:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-12 04:13 - 2017-09-12 04:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-10 17:12 - 2017-09-10 17:12 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 17:12 - 2017-09-10 17:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 17:10 - 2017-09-10 17:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.servage.net_0.localstorage 2017-09-10 17:10 - 2017-09-10 17:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.servage.net_0.localstorage-journal 2017-09-12 01:47 - 2017-09-12 01:49 - 000013312 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.shape.com_0.localstorage 2017-09-12 01:47 - 2017-09-12 01:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.shape.com_0.localstorage-journal 2017-09-12 04:11 - 2017-09-12 04:12 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.sportingnews.com_0.localstorage 2017-09-12 04:11 - 2017-09-12 04:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.sportingnews.com_0.localstorage-journal 2017-09-10 17:10 - 2017-09-10 17:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.wordgames.com_0.localstorage 2017-09-10 17:10 - 2017-09-10 17:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\http_www.wordgames.com_0.localstorage-journal 2017-09-12 01:49 - 2017-09-12 01:49 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\https_c.betrad.com_0.localstorage 2017-09-12 01:49 - 2017-09-12 01:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-12 01:50 - 2017-09-12 01:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\https_connexity.net_0.localstorage 2017-09-12 01:50 - 2017-09-12 01:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 17:10 - 2017-09-10 17:10 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 17:10 - 2017-09-10 17:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-12 01:47 - 2017-09-12 01:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\https_gateway.foresee.com_0.localstorage 2017-09-12 01:47 - 2017-09-12 01:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\https_gateway.foresee.com_0.localstorage-journal 2017-09-12 01:47 - 2017-09-12 01:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\https_grokker.com_0.localstorage 2017-09-12 01:47 - 2017-09-12 01:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\https_grokker.com_0.localstorage-journal 2017-09-12 04:11 - 2017-09-12 04:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\https_player.mediabong.net_0.localstorage 2017-09-12 04:11 - 2017-09-12 04:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\https_player.mediabong.net_0.localstorage-journal 2017-09-10 17:10 - 2017-09-10 17:10 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 17:10 - 2017-09-10 17:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 17:09 - 2017-09-10 17:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data 2017-09-10 17:09 - 2017-09-12 04:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash 2017-09-10 17:09 - 2017-09-10 17:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 17:09 - 2017-09-10 17:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 17:09 - 2017-09-10 17:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\KDSBUGN6 2017-09-10 17:09 - 2017-09-10 17:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 17:09 - 2017-09-10 17:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 17:09 - 2017-09-10 17:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A 2017-09-10 17:10 - 2017-09-12 04:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\cdn.stickyadstv.com 2017-09-10 17:09 - 2017-09-10 17:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\cdncache-a.akamaihd.net 2017-09-10 17:09 - 2017-09-10 17:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\cdncache-a.akamaihd.net\items 2017-09-10 17:09 - 2017-09-10 17:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 17:09 - 2017-09-10 17:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 17:09 - 2017-09-10 17:15 - 000000475 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 17:09 - 2017-09-12 04:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\eereader.com 2017-09-12 01:52 - 2017-09-12 01:52 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\eereader.com\analytics.sol 2017-09-10 17:11 - 2017-09-12 04:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\efreader.com 2017-09-10 17:19 - 2017-09-12 04:19 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\efreader.com\analytics.sol 2017-09-10 17:10 - 2017-09-12 04:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\egreader.com 2017-09-10 17:09 - 2017-09-10 17:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\macromedia.com 2017-09-10 17:09 - 2017-09-10 17:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\macromedia.com\support 2017-09-10 17:09 - 2017-09-10 17:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\macromedia.com\support\flashplayer 2017-09-10 17:09 - 2017-09-10 17:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\macromedia.com\support\flashplayer\sys 2017-09-10 17:09 - 2017-09-10 17:11 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 17:10 - 2017-09-10 17:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 17:10 - 2017-09-10 17:10 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 17:09 - 2017-09-10 17:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 17:09 - 2017-09-10 17:09 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 17:09 - 2017-09-10 17:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 17:09 - 2017-09-10 17:09 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 17:11 - 2017-09-10 17:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 17:11 - 2017-09-10 17:11 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 17:10 - 2017-09-10 17:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 17:10 - 2017-09-10 17:10 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data622\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3NCWCY7A\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 15:59 - 2017-09-11 22:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623 2017-09-10 15:59 - 2017-09-11 22:20 - 000266240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Cookies 2017-09-10 15:59 - 2017-09-11 22:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Cookies-journal 2017-09-10 20:46 - 2017-09-10 20:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\databases 2017-09-10 20:46 - 2017-09-10 20:46 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\databases\Databases.db 2017-09-10 20:46 - 2017-09-10 20:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\databases\Databases.db-journal 2017-09-10 16:04 - 2017-09-11 22:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\File System 2017-09-10 16:04 - 2017-09-11 22:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\File System\Origins 2017-09-10 16:04 - 2017-09-11 22:19 - 000000247 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\File System\Origins\000003.log 2017-09-11 22:19 - 2017-09-11 22:19 - 000000238 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\File System\Origins\000004.ldb 2017-09-11 22:19 - 2017-09-11 22:19 - 000000238 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\File System\Origins\000005.ldb 2017-09-10 16:04 - 2017-09-10 16:04 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\File System\Origins\CURRENT 2017-09-10 16:04 - 2017-09-10 16:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\File System\Origins\LOCK 2017-09-10 16:04 - 2017-09-11 22:19 - 000000741 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\File System\Origins\LOG 2017-09-10 16:04 - 2017-09-11 22:17 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\File System\Origins\LOG.old 2017-09-10 16:04 - 2017-09-10 16:04 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\File System\Origins\MANIFEST-000001 2017-09-11 22:13 - 2017-09-11 22:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\File System\Origins\lost 2017-09-10 20:46 - 2017-09-11 22:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB 2017-09-10 20:46 - 2017-09-10 20:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\http_www.blabbermouth.net_0.indexeddb.leveldb 2017-09-10 20:46 - 2017-09-10 20:46 - 000000190 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\http_www.blabbermouth.net_0.indexeddb.leveldb\000003.log 2017-09-10 20:46 - 2017-09-10 20:46 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\http_www.blabbermouth.net_0.indexeddb.leveldb\CURRENT 2017-09-10 20:46 - 2017-09-10 20:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\http_www.blabbermouth.net_0.indexeddb.leveldb\LOCK 2017-09-10 20:46 - 2017-09-10 20:46 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\http_www.blabbermouth.net_0.indexeddb.leveldb\LOG 2017-09-10 20:46 - 2017-09-10 20:46 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\http_www.blabbermouth.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 22:17 - 2017-09-11 22:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb 2017-09-11 22:17 - 2017-09-11 22:17 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\000003.log 2017-09-11 22:17 - 2017-09-11 22:17 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\CURRENT 2017-09-11 22:17 - 2017-09-11 22:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\LOCK 2017-09-11 22:17 - 2017-09-11 22:17 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\LOG 2017-09-11 22:17 - 2017-09-11 22:17 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 22:16 - 2017-09-11 22:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb 2017-09-11 22:16 - 2017-09-11 22:16 - 000000198 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\000003.log 2017-09-11 22:16 - 2017-09-11 22:16 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\CURRENT 2017-09-11 22:16 - 2017-09-11 22:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\LOCK 2017-09-11 22:16 - 2017-09-11 22:16 - 000000167 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\LOG 2017-09-11 22:16 - 2017-09-11 22:16 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 22:13 - 2017-09-11 22:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\https_39585319.va.cobrowse.liveperson.net_0.indexeddb.leveldb 2017-09-11 22:13 - 2017-09-11 22:13 - 000000800 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\https_39585319.va.cobrowse.liveperson.net_0.indexeddb.leveldb\000003.log 2017-09-11 22:13 - 2017-09-11 22:13 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\https_39585319.va.cobrowse.liveperson.net_0.indexeddb.leveldb\CURRENT 2017-09-11 22:13 - 2017-09-11 22:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\https_39585319.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOCK 2017-09-11 22:13 - 2017-09-11 22:13 - 000000179 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\https_39585319.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOG 2017-09-11 22:13 - 2017-09-11 22:13 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\https_39585319.va.cobrowse.liveperson.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 22:13 - 2017-09-11 22:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb 2017-09-11 22:13 - 2017-09-11 22:13 - 000001733 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\000003.log 2017-09-11 22:13 - 2017-09-11 22:13 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\CURRENT 2017-09-11 22:13 - 2017-09-11 22:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOCK 2017-09-11 22:13 - 2017-09-11 22:13 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOG 2017-09-11 22:13 - 2017-09-11 22:13 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 15:59 - 2017-09-11 22:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage 2017-09-11 22:14 - 2017-09-11 22:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 22:14 - 2017-09-11 22:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 20:47 - 2017-09-10 20:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_ca.reuters.com_0.localstorage 2017-09-10 20:47 - 2017-09-10 20:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_ca.reuters.com_0.localstorage-journal 2017-09-10 15:59 - 2017-09-10 15:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_cdn.districtm.ca_0.localstorage 2017-09-10 15:59 - 2017-09-10 15:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_cdn.districtm.ca_0.localstorage-journal 2017-09-10 15:59 - 2017-09-10 15:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_ecommerce.sosonlinebackup.com_0.localstorage 2017-09-10 15:59 - 2017-09-10 15:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_ecommerce.sosonlinebackup.com_0.localstorage-journal 2017-09-11 22:13 - 2017-09-11 22:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_htpagbii.lpgreenworld.com_0.localstorage 2017-09-11 22:13 - 2017-09-11 22:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_htpagbii.lpgreenworld.com_0.localstorage-journal 2017-09-10 15:59 - 2017-09-11 22:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 15:59 - 2017-09-11 22:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 16:04 - 2017-09-10 16:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-10 16:04 - 2017-09-10 16:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-10 20:46 - 2017-09-10 20:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.blabbermouth.net_0.localstorage 2017-09-10 20:46 - 2017-09-10 20:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.blabbermouth.net_0.localstorage-journal 2017-09-11 22:17 - 2017-09-11 22:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.bounty.com_0.localstorage 2017-09-11 22:17 - 2017-09-11 22:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.bounty.com_0.localstorage-journal 2017-09-10 20:42 - 2017-09-10 20:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.brides.com_0.localstorage 2017-09-10 20:42 - 2017-09-10 20:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.brides.com_0.localstorage-journal 2017-09-10 16:01 - 2017-09-10 16:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 16:01 - 2017-09-10 16:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 20:46 - 2017-09-10 20:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-10 20:46 - 2017-09-10 20:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-10 16:03 - 2017-09-10 16:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-10 16:03 - 2017-09-10 16:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-10 20:47 - 2017-09-10 20:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.espn.co.uk_0.localstorage 2017-09-10 20:47 - 2017-09-10 20:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.espn.co.uk_0.localstorage-journal 2017-09-11 22:16 - 2017-09-11 22:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.food.com_0.localstorage 2017-09-11 22:16 - 2017-09-11 22:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-10 16:02 - 2017-09-10 16:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.innerself.com_0.localstorage 2017-09-10 16:02 - 2017-09-10 16:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.innerself.com_0.localstorage-journal 2017-09-10 16:02 - 2017-09-10 16:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 16:02 - 2017-09-10 16:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 22:15 - 2017-09-11 22:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.latimes.com_0.localstorage 2017-09-11 22:15 - 2017-09-11 22:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-11 22:18 - 2017-09-11 22:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.macworld.com_0.localstorage 2017-09-11 22:18 - 2017-09-11 22:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-10 16:02 - 2017-09-10 16:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-10 16:02 - 2017-09-10 16:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-10 16:01 - 2017-09-10 16:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 16:01 - 2017-09-10 16:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 22:15 - 2017-09-11 22:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-11 22:15 - 2017-09-11 22:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-10 20:44 - 2017-09-10 20:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.reuters.com_0.localstorage 2017-09-10 20:44 - 2017-09-10 20:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-10 15:59 - 2017-09-10 16:00 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.sparknotes.com_0.localstorage 2017-09-10 15:59 - 2017-09-10 16:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.sparknotes.com_0.localstorage-journal 2017-09-11 22:18 - 2017-09-11 22:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.vh1.com_0.localstorage 2017-09-11 22:18 - 2017-09-11 22:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.vh1.com_0.localstorage-journal 2017-09-11 22:12 - 2017-09-11 22:13 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.yummytummyaarthi.com_0.localstorage 2017-09-11 22:12 - 2017-09-11 22:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\http_www.yummytummyaarthi.com_0.localstorage-journal 2017-09-10 16:04 - 2017-09-10 16:04 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 16:04 - 2017-09-10 16:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 22:12 - 2017-09-11 22:13 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 22:12 - 2017-09-11 22:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 15:59 - 2017-09-11 22:13 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 15:59 - 2017-09-11 22:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 22:12 - 2017-09-11 22:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\https_www.freshtrends.com_0.localstorage 2017-09-11 22:12 - 2017-09-11 22:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Local Storage\https_www.freshtrends.com_0.localstorage-journal 2017-09-10 15:59 - 2017-09-10 15:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data 2017-09-10 15:59 - 2017-09-11 22:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash 2017-09-10 15:59 - 2017-09-10 15:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 15:59 - 2017-09-10 15:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 15:59 - 2017-09-10 15:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\7E4JFRU5 2017-09-10 15:59 - 2017-09-10 15:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 15:59 - 2017-09-10 15:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 15:59 - 2017-09-10 16:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75 2017-09-10 15:59 - 2017-09-11 22:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\cdn.stickyadstv.com 2017-09-10 15:59 - 2017-09-10 15:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\cdncache-a.akamaihd.net 2017-09-10 15:59 - 2017-09-10 15:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\cdncache-a.akamaihd.net\items 2017-09-10 15:59 - 2017-09-10 15:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 15:59 - 2017-09-11 22:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 15:59 - 2017-09-11 22:16 - 000000476 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 15:59 - 2017-09-11 22:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\eereader.com 2017-09-10 16:04 - 2017-09-10 16:04 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\eereader.com\analytics.sol 2017-09-10 16:01 - 2017-09-11 22:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\efreader.com 2017-09-11 22:19 - 2017-09-11 22:19 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\efreader.com\analytics.sol 2017-09-10 15:59 - 2017-09-11 22:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\egreader.com 2017-09-10 15:59 - 2017-09-10 15:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\macromedia.com 2017-09-10 15:59 - 2017-09-10 15:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\macromedia.com\support 2017-09-10 15:59 - 2017-09-10 15:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\macromedia.com\support\flashplayer 2017-09-10 15:59 - 2017-09-10 16:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\macromedia.com\support\flashplayer\sys 2017-09-10 15:59 - 2017-09-10 16:02 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 15:59 - 2017-09-10 15:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 15:59 - 2017-09-10 15:59 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 15:59 - 2017-09-10 15:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 15:59 - 2017-09-10 15:59 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 15:59 - 2017-09-10 15:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 15:59 - 2017-09-10 15:59 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 16:01 - 2017-09-10 16:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 16:01 - 2017-09-10 16:01 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 15:59 - 2017-09-10 15:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 15:59 - 2017-09-10 15:59 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data623\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KKENRS75\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 19:21 - 2017-09-12 04:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624 2017-09-10 19:21 - 2017-09-12 04:09 - 000281600 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Cookies 2017-09-10 19:21 - 2017-09-12 04:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Cookies-journal 2017-09-12 04:01 - 2017-09-12 04:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\databases 2017-09-12 04:01 - 2017-09-12 04:01 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\databases\Databases.db 2017-09-12 04:01 - 2017-09-12 04:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\databases\Databases.db-journal 2017-09-10 19:21 - 2017-09-12 04:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\File System 2017-09-10 19:21 - 2017-09-12 04:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\File System\Origins 2017-09-10 19:21 - 2017-09-12 04:08 - 000000451 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\File System\Origins\000003.log 2017-09-12 04:08 - 2017-09-12 04:08 - 000000322 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\File System\Origins\000004.ldb 2017-09-12 04:08 - 2017-09-12 04:08 - 000000322 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\File System\Origins\000005.ldb 2017-09-10 19:21 - 2017-09-10 19:21 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\File System\Origins\CURRENT 2017-09-10 19:21 - 2017-09-10 19:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\File System\Origins\LOCK 2017-09-10 19:21 - 2017-09-12 04:08 - 000000739 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\File System\Origins\LOG 2017-09-10 19:21 - 2017-09-12 04:05 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\File System\Origins\LOG.old 2017-09-10 19:21 - 2017-09-10 19:21 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\File System\Origins\MANIFEST-000001 2017-09-12 04:08 - 2017-09-12 04:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\File System\Origins\lost 2017-09-12 04:01 - 2017-09-12 04:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\IndexedDB 2017-09-12 04:03 - 2017-09-12 04:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb 2017-09-12 04:03 - 2017-09-12 04:03 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\000003.log 2017-09-12 04:03 - 2017-09-12 04:03 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\CURRENT 2017-09-12 04:03 - 2017-09-12 04:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\LOCK 2017-09-12 04:03 - 2017-09-12 04:03 - 000000160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\LOG 2017-09-12 04:03 - 2017-09-12 04:03 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 04:05 - 2017-09-12 04:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\IndexedDB\http_www.insidenova.com_0.indexeddb.leveldb 2017-09-12 04:05 - 2017-09-12 04:05 - 000000186 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\IndexedDB\http_www.insidenova.com_0.indexeddb.leveldb\000003.log 2017-09-12 04:05 - 2017-09-12 04:05 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\IndexedDB\http_www.insidenova.com_0.indexeddb.leveldb\CURRENT 2017-09-12 04:05 - 2017-09-12 04:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\IndexedDB\http_www.insidenova.com_0.indexeddb.leveldb\LOCK 2017-09-12 04:05 - 2017-09-12 04:05 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\IndexedDB\http_www.insidenova.com_0.indexeddb.leveldb\LOG 2017-09-12 04:05 - 2017-09-12 04:05 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\IndexedDB\http_www.insidenova.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 04:01 - 2017-09-12 04:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\IndexedDB\https_www.wildtangent.com_0.indexeddb.leveldb 2017-09-12 04:01 - 2017-09-12 04:01 - 000000625 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\IndexedDB\https_www.wildtangent.com_0.indexeddb.leveldb\000003.log 2017-09-12 04:01 - 2017-09-12 04:01 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\IndexedDB\https_www.wildtangent.com_0.indexeddb.leveldb\CURRENT 2017-09-12 04:01 - 2017-09-12 04:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\IndexedDB\https_www.wildtangent.com_0.indexeddb.leveldb\LOCK 2017-09-12 04:01 - 2017-09-12 04:01 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\IndexedDB\https_www.wildtangent.com_0.indexeddb.leveldb\LOG 2017-09-12 04:01 - 2017-09-12 04:01 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\IndexedDB\https_www.wildtangent.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 19:21 - 2017-09-12 04:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage 2017-09-10 19:27 - 2017-09-10 19:29 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_allrecipes.com_0.localstorage 2017-09-10 19:27 - 2017-09-10 19:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-10 19:23 - 2017-09-10 19:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 19:23 - 2017-09-10 19:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 19:21 - 2017-09-10 19:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 19:21 - 2017-09-10 19:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 19:21 - 2017-09-11 14:10 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 19:21 - 2017-09-11 14:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-12 04:05 - 2017-09-12 04:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.blabbermouth.net_0.localstorage 2017-09-12 04:05 - 2017-09-12 04:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.blabbermouth.net_0.localstorage-journal 2017-09-10 19:26 - 2017-09-10 19:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.blessyouboys.com_0.localstorage 2017-09-10 19:26 - 2017-09-10 19:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.blessyouboys.com_0.localstorage-journal 2017-09-12 04:06 - 2017-09-12 04:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.bravotv.com_0.localstorage 2017-09-12 04:06 - 2017-09-12 04:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.bravotv.com_0.localstorage-journal 2017-09-11 14:12 - 2017-09-11 14:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.businessinsider.com_0.localstorage 2017-09-11 14:12 - 2017-09-11 14:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.businessinsider.com_0.localstorage-journal 2017-09-10 19:23 - 2017-09-10 19:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 19:23 - 2017-09-10 19:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 19:25 - 2017-09-10 19:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.courant.com_0.localstorage 2017-09-10 19:25 - 2017-09-10 19:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-11 14:14 - 2017-09-11 14:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-11 14:14 - 2017-09-11 14:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-11 14:15 - 2017-09-11 14:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.foxnews.com_0.localstorage 2017-09-11 14:15 - 2017-09-11 14:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.foxnews.com_0.localstorage-journal 2017-09-12 04:04 - 2017-09-12 04:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-12 04:04 - 2017-09-12 04:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-11 14:13 - 2017-09-11 14:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.insurancejournal.tv_0.localstorage 2017-09-11 14:13 - 2017-09-11 14:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.insurancejournal.tv_0.localstorage-journal 2017-09-10 19:23 - 2017-09-10 19:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 19:23 - 2017-09-10 19:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 19:24 - 2017-09-10 19:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.latimes.com_0.localstorage 2017-09-10 19:24 - 2017-09-10 19:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-11 14:13 - 2017-09-11 14:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-11 14:13 - 2017-09-11 14:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-11 14:10 - 2017-09-11 14:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.livescore.com_0.localstorage 2017-09-11 14:10 - 2017-09-11 14:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.livescore.com_0.localstorage-journal 2017-09-10 19:27 - 2017-09-10 19:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 19:27 - 2017-09-10 19:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 19:21 - 2017-09-10 19:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.nydailynews.com_0.localstorage 2017-09-10 19:21 - 2017-09-10 19:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.nydailynews.com_0.localstorage-journal 2017-09-10 19:25 - 2017-09-10 19:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.parents.com_0.localstorage 2017-09-10 19:25 - 2017-09-10 19:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-12 04:04 - 2017-09-12 04:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.reuters.com_0.localstorage 2017-09-12 04:04 - 2017-09-12 04:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-10 19:23 - 2017-09-10 19:23 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 19:23 - 2017-09-10 19:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 19:21 - 2017-09-10 19:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_chartbeat.com_0.localstorage 2017-09-10 19:21 - 2017-09-10 19:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_chartbeat.com_0.localstorage-journal 2017-09-12 04:01 - 2017-09-12 04:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_checkout.stripe.com_0.localstorage 2017-09-12 04:01 - 2017-09-12 04:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_checkout.stripe.com_0.localstorage-journal 2017-09-12 04:01 - 2017-09-12 04:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_connexity.net_0.localstorage 2017-09-12 04:01 - 2017-09-12 04:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 19:21 - 2017-09-11 14:10 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 19:21 - 2017-09-11 14:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 19:21 - 2017-09-10 19:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 19:21 - 2017-09-10 19:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 19:21 - 2017-09-11 14:10 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 19:21 - 2017-09-11 14:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 14:10 - 2017-09-11 14:11 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_www.cinnabon.com_0.localstorage 2017-09-11 14:10 - 2017-09-11 14:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_www.cinnabon.com_0.localstorage-journal 2017-09-12 04:01 - 2017-09-12 04:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_www.ilizatech.com_0.localstorage 2017-09-12 04:01 - 2017-09-12 04:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_www.ilizatech.com_0.localstorage-journal 2017-09-10 19:21 - 2017-09-10 19:21 - 000014336 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_www.myperfectresume.com_0.localstorage 2017-09-10 19:21 - 2017-09-10 19:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_www.myperfectresume.com_0.localstorage-journal 2017-09-12 04:01 - 2017-09-12 04:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_www.wildtangent.com_0.localstorage 2017-09-12 04:01 - 2017-09-12 04:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_www.wildtangent.com_0.localstorage-journal 2017-09-12 04:01 - 2017-09-12 04:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_www.youtube.com_0.localstorage 2017-09-12 04:01 - 2017-09-12 04:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-10 19:21 - 2017-09-10 19:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data 2017-09-10 19:21 - 2017-09-12 04:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash 2017-09-10 19:21 - 2017-09-10 19:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 19:21 - 2017-09-10 19:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 19:21 - 2017-09-10 19:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\NQGWYMVL 2017-09-10 19:21 - 2017-09-10 19:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 19:21 - 2017-09-10 19:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 19:21 - 2017-09-11 14:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA 2017-09-11 14:13 - 2017-09-11 14:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\aka.spotxcdn.com 2017-09-10 19:21 - 2017-09-12 04:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\cdn.stickyadstv.com 2017-09-10 19:21 - 2017-09-10 19:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\cdncache-a.akamaihd.net 2017-09-10 19:21 - 2017-09-10 19:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\cdncache-a.akamaihd.net\items 2017-09-10 19:21 - 2017-09-10 19:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 19:21 - 2017-09-11 14:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 19:21 - 2017-09-11 14:14 - 000000554 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 19:21 - 2017-09-12 04:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\eereader.com 2017-09-10 19:22 - 2017-09-12 04:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\efreader.com 2017-09-11 14:13 - 2017-09-12 04:10 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\efreader.com\analytics.sol 2017-09-10 19:21 - 2017-09-12 04:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\egreader.com 2017-09-11 14:12 - 2017-09-11 14:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\inread.anyclip.com 2017-09-11 14:12 - 2017-09-11 14:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\inread.anyclip.com\ac# 2017-09-11 14:12 - 2017-09-11 14:12 - 000000497 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-10 19:21 - 2017-09-10 19:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\macromedia.com 2017-09-10 19:21 - 2017-09-10 19:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\macromedia.com\support 2017-09-10 19:21 - 2017-09-10 19:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\macromedia.com\support\flashplayer 2017-09-10 19:21 - 2017-09-11 14:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\macromedia.com\support\flashplayer\sys 2017-09-10 19:21 - 2017-09-11 14:13 - 000000533 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 14:13 - 2017-09-11 14:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\macromedia.com\support\flashplayer\sys\#aka.spotxcdn.com 2017-09-11 14:13 - 2017-09-11 14:13 - 000000086 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\macromedia.com\support\flashplayer\sys\#aka.spotxcdn.com\settings.sol 2017-09-10 19:21 - 2017-09-10 19:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 19:21 - 2017-09-10 19:21 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 19:21 - 2017-09-10 19:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 19:21 - 2017-09-10 19:21 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 19:21 - 2017-09-10 19:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 19:21 - 2017-09-10 19:21 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 19:22 - 2017-09-10 19:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 19:22 - 2017-09-10 19:22 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 19:21 - 2017-09-10 19:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 19:21 - 2017-09-10 19:21 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 14:12 - 2017-09-11 14:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 14:12 - 2017-09-11 14:12 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data624\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\FQ7XEFGA\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-11 09:50 - 2017-09-12 00:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625 2017-09-11 09:50 - 2017-09-11 23:45 - 000371712 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Cookies 2017-09-11 09:50 - 2017-09-11 23:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Cookies-journal 2017-09-11 19:07 - 2017-09-11 19:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\databases 2017-09-11 19:07 - 2017-09-11 19:07 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\databases\Databases.db 2017-09-11 19:07 - 2017-09-11 19:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\databases\Databases.db-journal 2017-09-11 09:50 - 2017-09-11 23:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\File System 2017-09-11 23:43 - 2017-09-11 23:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\File System\002 2017-09-11 23:43 - 2017-09-11 23:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\File System\002\t 2017-09-11 20:11 - 2017-09-11 20:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\File System\004 2017-09-11 20:11 - 2017-09-11 20:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\File System\004\t 2017-09-11 09:50 - 2017-09-11 23:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\File System\Origins 2017-09-11 09:50 - 2017-09-11 20:12 - 000000387 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\File System\Origins\000003.log 2017-09-11 09:50 - 2017-09-11 09:50 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\File System\Origins\CURRENT 2017-09-11 09:50 - 2017-09-11 09:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\File System\Origins\LOCK 2017-09-11 09:50 - 2017-09-11 23:43 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\File System\Origins\LOG 2017-09-11 09:50 - 2017-09-11 20:11 - 000000487 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\File System\Origins\LOG.old 2017-09-11 09:50 - 2017-09-11 09:50 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\File System\Origins\MANIFEST-000001 2017-09-11 19:09 - 2017-09-11 19:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\File System\Origins\lost 2017-09-11 19:07 - 2017-09-11 19:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\IndexedDB 2017-09-11 19:13 - 2017-09-11 19:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb 2017-09-11 19:13 - 2017-09-11 19:13 - 000000178 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\000003.log 2017-09-11 19:13 - 2017-09-11 19:13 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\CURRENT 2017-09-11 19:13 - 2017-09-11 19:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\LOCK 2017-09-11 19:13 - 2017-09-11 19:13 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\LOG 2017-09-11 19:13 - 2017-09-11 19:13 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 19:07 - 2017-09-11 19:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\IndexedDB\https_www.shmoop.com_0.indexeddb.leveldb 2017-09-11 19:07 - 2017-09-11 19:07 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\IndexedDB\https_www.shmoop.com_0.indexeddb.leveldb\000003.log 2017-09-11 19:07 - 2017-09-11 19:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\IndexedDB\https_www.shmoop.com_0.indexeddb.leveldb\CURRENT 2017-09-11 19:07 - 2017-09-11 19:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\IndexedDB\https_www.shmoop.com_0.indexeddb.leveldb\LOCK 2017-09-11 19:07 - 2017-09-11 19:07 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\IndexedDB\https_www.shmoop.com_0.indexeddb.leveldb\LOG 2017-09-11 19:07 - 2017-09-11 19:07 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\IndexedDB\https_www.shmoop.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 09:50 - 2017-09-11 23:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage 2017-09-11 19:12 - 2017-09-11 23:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_allrecipes.com_0.localstorage 2017-09-11 19:12 - 2017-09-11 23:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-11 09:52 - 2017-09-11 09:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 09:52 - 2017-09-11 09:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 19:07 - 2017-09-11 19:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_connexity.net_0.localstorage 2017-09-11 19:07 - 2017-09-11 19:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 20:08 - 2017-09-11 20:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-11 20:08 - 2017-09-11 20:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-11 09:50 - 2017-09-11 09:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 09:50 - 2017-09-11 09:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 09:50 - 2017-09-11 09:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_secure-us.imrworldwide.com_0.localstorage 2017-09-11 09:50 - 2017-09-11 09:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_secure-us.imrworldwide.com_0.localstorage-journal 2017-09-11 20:12 - 2017-09-11 20:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.aetv.com_0.localstorage 2017-09-11 20:12 - 2017-09-11 20:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.aetv.com_0.localstorage-journal 2017-09-11 20:11 - 2017-09-11 20:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-11 20:11 - 2017-09-11 20:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-11 09:54 - 2017-09-11 09:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-11 09:54 - 2017-09-11 09:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-11 19:11 - 2017-09-11 19:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.blessyouboys.com_0.localstorage 2017-09-11 19:11 - 2017-09-11 19:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.blessyouboys.com_0.localstorage-journal 2017-09-11 09:52 - 2017-09-11 09:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 09:52 - 2017-09-11 09:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 20:07 - 2017-09-11 20:08 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.cmt.com_0.localstorage 2017-09-11 20:07 - 2017-09-11 20:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.cmt.com_0.localstorage-journal 2017-09-11 09:50 - 2017-09-11 09:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.colehaan.com_0.localstorage 2017-09-11 09:50 - 2017-09-11 09:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.colehaan.com_0.localstorage-journal 2017-09-11 20:11 - 2017-09-11 20:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.courant.com_0.localstorage 2017-09-11 20:11 - 2017-09-11 20:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-11 19:07 - 2017-09-11 19:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.cpopowertools.com_0.localstorage 2017-09-11 19:07 - 2017-09-11 19:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.cpopowertools.com_0.localstorage-journal 2017-09-11 23:41 - 2017-09-11 23:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.crash.net_0.localstorage 2017-09-11 23:41 - 2017-09-11 23:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-11 23:38 - 2017-09-11 23:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.easybib.com_0.localstorage 2017-09-11 23:38 - 2017-09-11 23:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.easybib.com_0.localstorage-journal 2017-09-11 19:11 - 2017-09-11 19:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.espn.co.uk_0.localstorage 2017-09-11 19:11 - 2017-09-11 19:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.espn.co.uk_0.localstorage-journal 2017-09-11 09:50 - 2017-09-11 09:52 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.espncricinfo.com_0.localstorage 2017-09-11 09:50 - 2017-09-11 09:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.espncricinfo.com_0.localstorage-journal 2017-09-11 23:43 - 2017-09-11 23:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.fitnessmagazine.com_0.localstorage 2017-09-11 23:43 - 2017-09-11 23:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.fitnessmagazine.com_0.localstorage-journal 2017-09-11 09:54 - 2017-09-11 09:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.foxnews.com_0.localstorage 2017-09-11 09:54 - 2017-09-11 09:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.foxnews.com_0.localstorage-journal 2017-09-11 20:10 - 2017-09-11 20:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.insideedition.com_0.localstorage 2017-09-11 20:10 - 2017-09-11 20:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.insideedition.com_0.localstorage-journal 2017-09-11 20:13 - 2017-09-11 20:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-11 20:13 - 2017-09-11 20:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-11 19:10 - 2017-09-11 19:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.insurancejournal.tv_0.localstorage 2017-09-11 19:10 - 2017-09-11 19:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.insurancejournal.tv_0.localstorage-journal 2017-09-11 09:52 - 2017-09-11 20:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 09:52 - 2017-09-11 20:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 23:41 - 2017-09-11 23:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-11 23:41 - 2017-09-11 23:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-11 09:53 - 2017-09-11 09:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.latimes.com_0.localstorage 2017-09-11 09:53 - 2017-09-11 09:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-11 20:10 - 2017-09-11 20:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-11 20:10 - 2017-09-11 20:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-11 09:56 - 2017-09-11 19:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.macworld.com_0.localstorage 2017-09-11 09:56 - 2017-09-11 19:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-11 23:38 - 2017-09-11 23:39 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.mountainhardwear.com_0.localstorage 2017-09-11 23:38 - 2017-09-11 23:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.mountainhardwear.com_0.localstorage-journal 2017-09-11 23:41 - 2017-09-11 23:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-11 23:41 - 2017-09-11 23:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-11 09:56 - 2017-09-11 23:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 09:56 - 2017-09-11 23:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 09:53 - 2017-09-11 09:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.parents.com_0.localstorage 2017-09-11 09:53 - 2017-09-11 09:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-11 20:08 - 2017-09-11 20:08 - 000021504 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_a2320460149.cdn.optimizely.com_0.localstorage 2017-09-11 20:08 - 2017-09-11 20:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_a2320460149.cdn.optimizely.com_0.localstorage-journal 2017-09-11 19:07 - 2017-09-11 19:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_ardrone.swoop.com_0.localstorage 2017-09-11 19:07 - 2017-09-11 19:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_ardrone.swoop.com_0.localstorage-journal 2017-09-11 09:52 - 2017-09-11 09:52 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 09:52 - 2017-09-11 09:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 19:07 - 2017-09-11 19:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_connexity.net_0.localstorage 2017-09-11 19:07 - 2017-09-11 19:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 09:50 - 2017-09-11 09:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_content.shoprunner.com_0.localstorage 2017-09-11 09:50 - 2017-09-11 09:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_content.shoprunner.com_0.localstorage-journal 2017-09-11 09:50 - 2017-09-11 09:50 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 09:50 - 2017-09-11 09:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 09:51 - 2017-09-11 09:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_gateway.foresee.com_0.localstorage 2017-09-11 09:51 - 2017-09-11 09:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_gateway.foresee.com_0.localstorage-journal 2017-09-11 19:07 - 2017-09-11 20:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 19:07 - 2017-09-11 20:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 23:38 - 2017-09-11 23:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_s.salecycle.com_0.localstorage 2017-09-11 23:38 - 2017-09-11 23:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_s.salecycle.com_0.localstorage-journal 2017-09-11 09:50 - 2017-09-11 20:07 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 09:50 - 2017-09-11 20:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 19:06 - 2017-09-11 19:08 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_www.shmoop.com_0.localstorage 2017-09-11 19:06 - 2017-09-11 19:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_www.shmoop.com_0.localstorage-journal 2017-09-11 19:07 - 2017-09-11 19:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_www.spineuniverse.com_0.localstorage 2017-09-11 19:07 - 2017-09-11 19:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_www.spineuniverse.com_0.localstorage-journal 2017-09-11 20:07 - 2017-09-11 20:08 - 000026624 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_www.weightwatchers.com_0.localstorage 2017-09-11 20:07 - 2017-09-11 20:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_www.weightwatchers.com_0.localstorage-journal 2017-09-11 19:07 - 2017-09-11 19:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_www.youtube.com_0.localstorage 2017-09-11 19:07 - 2017-09-11 19:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-11 09:50 - 2017-09-11 09:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data 2017-09-11 09:50 - 2017-09-11 23:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash 2017-09-11 09:50 - 2017-09-11 09:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 09:50 - 2017-09-11 09:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 09:50 - 2017-09-11 09:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\JY5TS32J 2017-09-11 09:50 - 2017-09-11 09:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 09:50 - 2017-09-11 09:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 09:50 - 2017-09-11 20:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G 2017-09-11 20:08 - 2017-09-11 20:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\cdn.dashbid.io 2017-09-11 20:08 - 2017-09-11 20:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\cdn.dashbid.io\prod 2017-09-11 20:08 - 2017-09-11 20:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-11 20:08 - 2017-09-11 20:08 - 000000069 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-11 09:50 - 2017-09-11 23:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\cdn.stickyadstv.com 2017-09-11 09:50 - 2017-09-11 09:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\cdncache-a.akamaihd.net 2017-09-11 09:50 - 2017-09-11 09:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\cdncache-a.akamaihd.net\items 2017-09-11 09:50 - 2017-09-11 09:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 09:50 - 2017-09-11 20:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 09:50 - 2017-09-11 20:13 - 000000579 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 09:50 - 2017-09-11 23:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\eereader.com 2017-09-11 09:55 - 2017-09-11 09:55 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\eereader.com\analytics.sol 2017-09-11 09:52 - 2017-09-11 23:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\efreader.com 2017-09-11 23:45 - 2017-09-11 23:45 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\efreader.com\analytics.sol 2017-09-11 09:52 - 2017-09-11 23:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\egreader.com 2017-09-11 09:50 - 2017-09-11 09:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\macromedia.com 2017-09-11 09:50 - 2017-09-11 09:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\macromedia.com\support 2017-09-11 09:50 - 2017-09-11 09:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\macromedia.com\support\flashplayer 2017-09-11 09:50 - 2017-09-11 20:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\macromedia.com\support\flashplayer\sys 2017-09-11 09:50 - 2017-09-11 20:08 - 000000509 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 20:08 - 2017-09-11 20:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-11 20:08 - 2017-09-11 20:08 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-11 09:50 - 2017-09-11 09:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 09:50 - 2017-09-11 09:50 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 09:50 - 2017-09-11 09:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 09:50 - 2017-09-11 09:50 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 09:50 - 2017-09-11 09:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 09:50 - 2017-09-11 09:50 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 09:52 - 2017-09-11 09:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 09:52 - 2017-09-11 09:52 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 09:52 - 2017-09-11 09:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 09:52 - 2017-09-11 09:52 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data625\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7P945G8G\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 11:13 - 2017-09-11 13:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626 2017-09-11 11:13 - 2017-09-11 11:20 - 000178176 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Cookies 2017-09-11 11:13 - 2017-09-11 11:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Cookies-journal 2017-09-11 11:13 - 2017-09-11 11:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage 2017-09-11 11:14 - 2017-09-11 11:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 11:14 - 2017-09-11 11:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 11:13 - 2017-09-11 11:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-11 11:13 - 2017-09-11 11:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 11:15 - 2017-09-11 11:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 11:15 - 2017-09-11 11:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 11:17 - 2017-09-11 11:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-11 11:17 - 2017-09-11 11:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-11 11:13 - 2017-09-11 11:14 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-11 11:13 - 2017-09-11 11:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-11 11:16 - 2017-09-11 11:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_www.insideedition.com_0.localstorage 2017-09-11 11:16 - 2017-09-11 11:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_www.insideedition.com_0.localstorage-journal 2017-09-11 11:19 - 2017-09-11 11:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-11 11:19 - 2017-09-11 11:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-11 11:15 - 2017-09-11 11:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 11:15 - 2017-09-11 11:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 11:16 - 2017-09-11 11:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-11 11:16 - 2017-09-11 11:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-11 11:13 - 2017-09-11 11:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_www.nero.com_0.localstorage 2017-09-11 11:13 - 2017-09-11 11:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_www.nero.com_0.localstorage-journal 2017-09-11 11:20 - 2017-09-11 11:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 11:20 - 2017-09-11 11:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 11:17 - 2017-09-11 11:17 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 11:17 - 2017-09-11 11:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 11:13 - 2017-09-11 11:13 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 11:13 - 2017-09-11 11:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\https_sb.monetate.net_0.localstorage 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\https_sb.monetate.net_0.localstorage-journal 2017-09-11 11:13 - 2017-09-11 11:13 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 11:13 - 2017-09-11 11:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\https_widgets.outbrain.com_0.localstorage 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\https_widgets.outbrain.com_0.localstorage-journal 2017-09-11 11:13 - 2017-09-11 11:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\https_www.youtube.com_0.localstorage 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data 2017-09-11 11:13 - 2017-09-11 11:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\GZLTK4WW 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 11:13 - 2017-09-11 11:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2 2017-09-11 11:13 - 2017-09-11 11:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\cdn.stickyadstv.com 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\cdncache-a.akamaihd.net 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\cdncache-a.akamaihd.net\items 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 11:13 - 2017-09-11 11:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 11:13 - 2017-09-11 11:16 - 000000415 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 11:13 - 2017-09-11 11:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\eereader.com 2017-09-11 11:14 - 2017-09-11 11:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\efreader.com 2017-09-11 11:13 - 2017-09-11 11:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\egreader.com 2017-09-11 11:19 - 2017-09-11 11:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\inread.anyclip.com 2017-09-11 11:19 - 2017-09-11 11:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\inread.anyclip.com\ac# 2017-09-11 11:19 - 2017-09-11 11:19 - 000000459 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\macromedia.com 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\macromedia.com\support 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\macromedia.com\support\flashplayer 2017-09-11 11:13 - 2017-09-11 11:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\macromedia.com\support\flashplayer\sys 2017-09-11 11:13 - 2017-09-11 11:19 - 000000513 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 11:13 - 2017-09-11 11:13 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 11:13 - 2017-09-11 11:13 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 11:13 - 2017-09-11 11:13 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 11:14 - 2017-09-11 11:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 11:14 - 2017-09-11 11:14 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 11:13 - 2017-09-11 11:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 11:13 - 2017-09-11 11:13 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 11:19 - 2017-09-11 11:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 11:19 - 2017-09-11 11:19 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data626\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JHTD6ZN2\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-11 04:16 - 2017-09-12 09:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627 2017-09-11 04:16 - 2017-09-12 09:44 - 000176128 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Cookies 2017-09-11 04:16 - 2017-09-12 09:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Cookies-journal 2017-09-12 09:41 - 2017-09-12 09:44 - 000229376 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\data_0 2017-09-12 09:41 - 2017-09-12 09:44 - 005251072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\data_1 2017-09-12 09:41 - 2017-09-12 09:44 - 008396800 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\data_2 2017-09-12 09:41 - 2017-09-12 09:44 - 012591104 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\data_3 2017-09-12 09:41 - 2017-09-12 09:41 - 000042453 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000001 2017-09-12 09:41 - 2017-09-12 09:41 - 000020995 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000002 2017-09-12 09:41 - 2017-09-12 09:41 - 000138866 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000003 2017-09-12 09:41 - 2017-09-12 09:41 - 000034908 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000004 2017-09-12 09:41 - 2017-09-12 09:41 - 000042626 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000005 2017-09-12 09:41 - 2017-09-12 09:41 - 000049101 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000006 2017-09-12 09:41 - 2017-09-12 09:41 - 000048620 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000007 2017-09-12 09:41 - 2017-09-12 09:41 - 000063752 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000008 2017-09-12 09:41 - 2017-09-12 09:41 - 000017640 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000009 2017-09-12 09:41 - 2017-09-12 09:41 - 000018408 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00000a 2017-09-12 09:41 - 2017-09-12 09:41 - 000072677 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00000b 2017-09-12 09:41 - 2017-09-12 09:41 - 000042703 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00000c 2017-09-12 09:41 - 2017-09-12 09:41 - 000113505 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00000d 2017-09-12 09:41 - 2017-09-12 09:41 - 000038894 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00000e 2017-09-12 09:41 - 2017-09-12 09:41 - 000062831 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00000f 2017-09-12 09:41 - 2017-09-12 09:41 - 000040484 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000010 2017-09-12 09:41 - 2017-09-12 09:41 - 000444154 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000011 2017-09-12 09:41 - 2017-09-12 09:41 - 000017492 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000012 2017-09-12 09:41 - 2017-09-12 09:41 - 000018327 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000013 2017-09-12 09:41 - 2017-09-12 09:41 - 000241962 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000014 2017-09-12 09:41 - 2017-09-12 09:41 - 000028513 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000015 2017-09-12 09:41 - 2017-09-12 09:41 - 000023806 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000016 2017-09-12 09:41 - 2017-09-12 09:41 - 000044880 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000017 2017-09-12 09:41 - 2017-09-12 09:41 - 000024748 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000018 2017-09-12 09:41 - 2017-09-12 09:41 - 000020008 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000019 2017-09-12 09:41 - 2017-09-12 09:41 - 000023059 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00001a 2017-09-12 09:41 - 2017-09-12 09:41 - 000088656 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00001b 2017-09-12 09:41 - 2017-09-12 09:41 - 000071101 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00001c 2017-09-12 09:41 - 2017-09-12 09:41 - 000017630 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00001d 2017-09-12 09:41 - 2017-09-12 09:41 - 000074411 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00001e 2017-09-12 09:41 - 2017-09-12 09:41 - 000065324 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00001f 2017-09-12 09:41 - 2017-09-12 09:41 - 000028513 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000020 2017-09-12 09:41 - 2017-09-12 09:41 - 000072442 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000021 2017-09-12 09:41 - 2017-09-12 09:41 - 000084490 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000022 2017-09-12 09:41 - 2017-09-12 09:41 - 000064274 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000023 2017-09-12 09:41 - 2017-09-12 09:41 - 000251824 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000024 2017-09-12 09:41 - 2017-09-12 09:41 - 000112496 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000025 2017-09-12 09:41 - 2017-09-12 09:41 - 000024748 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000026 2017-09-12 09:41 - 2017-09-12 09:41 - 000029642 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000027 2017-09-12 09:41 - 2017-09-12 09:41 - 000114961 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000028 2017-09-12 09:42 - 2017-09-12 09:42 - 000021847 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000029 2017-09-12 09:42 - 2017-09-12 09:42 - 000138866 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00002a 2017-09-12 09:42 - 2017-09-12 09:42 - 000021670 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00002b 2017-09-12 09:42 - 2017-09-12 09:42 - 000038346 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00002c 2017-09-12 09:42 - 2017-09-12 09:42 - 000030028 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00002d 2017-09-12 09:42 - 2017-09-12 09:42 - 000066673 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00002e 2017-09-12 09:42 - 2017-09-12 09:42 - 000056298 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00002f 2017-09-12 09:42 - 2017-09-12 09:42 - 000084458 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000030 2017-09-12 09:42 - 2017-09-12 09:42 - 000016794 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000031 2017-09-12 09:42 - 2017-09-12 09:42 - 000044694 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000032 2017-09-12 09:42 - 2017-09-12 09:42 - 000031288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000033 2017-09-12 09:42 - 2017-09-12 09:42 - 000068786 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000034 2017-09-12 09:42 - 2017-09-12 09:42 - 000425058 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000035 2017-09-12 09:42 - 2017-09-12 09:42 - 000024738 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000036 2017-09-12 09:42 - 2017-09-12 09:42 - 000081515 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000037 2017-09-12 09:42 - 2017-09-12 09:42 - 000115782 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000038 2017-09-12 09:42 - 2017-09-12 09:42 - 000070039 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000039 2017-09-12 09:42 - 2017-09-12 09:42 - 000115440 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00003a 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00003b 2017-09-12 09:42 - 2017-09-12 09:42 - 000067431 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00003c 2017-09-12 09:42 - 2017-09-12 09:42 - 000258066 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00003d 2017-09-12 09:42 - 2017-09-12 09:42 - 000136810 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00003e 2017-09-12 09:42 - 2017-09-12 09:42 - 000048038 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00003f 2017-09-12 09:42 - 2017-09-12 09:42 - 000372658 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000040 2017-09-12 09:42 - 2017-09-12 09:42 - 000739602 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000041 2017-09-12 09:42 - 2017-09-12 09:42 - 000016910 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000042 2017-09-12 09:42 - 2017-09-12 09:42 - 000053476 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000043 2017-09-12 09:42 - 2017-09-12 09:42 - 000111654 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000044 2017-09-12 09:42 - 2017-09-12 09:42 - 000188158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000045 2017-09-12 09:42 - 2017-09-12 09:42 - 000033951 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000046 2017-09-12 09:42 - 2017-09-12 09:42 - 000067948 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000047 2017-09-12 09:42 - 2017-09-12 09:42 - 000023340 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000048 2017-09-12 09:42 - 2017-09-12 09:42 - 000027870 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000049 2017-09-12 09:42 - 2017-09-12 09:42 - 000031544 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00004a 2017-09-12 09:42 - 2017-09-12 09:42 - 000100441 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00004b 2017-09-12 09:42 - 2017-09-12 09:42 - 000085705 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00004c 2017-09-12 09:42 - 2017-09-12 09:42 - 000027462 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00004d 2017-09-12 09:42 - 2017-09-12 09:42 - 000458593 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00004e 2017-09-12 09:42 - 2017-09-12 09:42 - 000095957 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00004f 2017-09-12 09:42 - 2017-09-12 09:42 - 000068786 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000050 2017-09-12 09:42 - 2017-09-12 09:42 - 000127511 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000051 2017-09-12 09:42 - 2017-09-12 09:42 - 000048620 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000052 2017-09-12 09:42 - 2017-09-12 09:42 - 000113505 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000053 2017-09-12 09:42 - 2017-09-12 09:42 - 000019070 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000054 2017-09-12 09:42 - 2017-09-12 09:42 - 000024884 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000055 2017-09-12 09:42 - 2017-09-12 09:42 - 000127511 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000056 2017-09-12 09:42 - 2017-09-12 09:42 - 000031725 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000057 2017-09-12 09:42 - 2017-09-12 09:42 - 000504804 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000058 2017-09-12 09:42 - 2017-09-12 09:42 - 000022488 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000059 2017-09-12 09:42 - 2017-09-12 09:42 - 000022488 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00005a 2017-09-12 09:42 - 2017-09-12 09:42 - 000260663 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00005b 2017-09-12 09:42 - 2017-09-12 09:42 - 000096918 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00005c 2017-09-12 09:42 - 2017-09-12 09:42 - 000241962 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00005d 2017-09-12 09:42 - 2017-09-12 09:42 - 000066804 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00005e 2017-09-12 09:42 - 2017-09-12 09:42 - 000373121 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00005f 2017-09-12 09:42 - 2017-09-12 09:42 - 000101833 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000060 2017-09-12 09:42 - 2017-09-12 09:42 - 000390034 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000061 2017-09-12 09:42 - 2017-09-12 09:42 - 000385076 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000062 2017-09-12 09:42 - 2017-09-12 09:42 - 001048515 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000063 2017-09-12 09:42 - 2017-09-12 09:42 - 000577887 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000064 2017-09-12 09:42 - 2017-09-12 09:42 - 000481446 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000065 2017-09-12 09:42 - 2017-09-12 09:42 - 000372666 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000066 2017-09-12 09:42 - 2017-09-12 09:42 - 000097014 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000067 2017-09-12 09:42 - 2017-09-12 09:42 - 000094184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000068 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000069 2017-09-12 09:42 - 2017-09-12 09:42 - 000016537 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00006a 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00006b 2017-09-12 09:42 - 2017-09-12 09:42 - 000081515 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00006c 2017-09-12 09:42 - 2017-09-12 09:42 - 000521029 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00006d 2017-09-12 09:42 - 2017-09-12 09:42 - 000063750 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00006e 2017-09-12 09:42 - 2017-09-12 09:42 - 000067497 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00006f 2017-09-12 09:42 - 2017-09-12 09:42 - 000077160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000070 2017-09-12 09:42 - 2017-09-12 09:42 - 000081515 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000071 2017-09-12 09:42 - 2017-09-12 09:42 - 000065651 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000072 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000074 2017-09-12 09:42 - 2017-09-12 09:42 - 000046581 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000075 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000076 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000077 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000078 2017-09-12 09:42 - 2017-09-12 09:42 - 000893311 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000079 2017-09-12 09:42 - 2017-09-12 09:42 - 000101449 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00007a 2017-09-12 09:42 - 2017-09-12 09:42 - 000045568 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00007b 2017-09-12 09:42 - 2017-09-12 09:42 - 000030145 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00007c 2017-09-12 09:42 - 2017-09-12 09:42 - 000021268 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00007d 2017-09-12 09:42 - 2017-09-12 09:42 - 000064242 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00007e 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00007f 2017-09-12 09:42 - 2017-09-12 09:42 - 000030145 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000080 2017-09-12 09:42 - 2017-09-12 09:42 - 000046581 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000081 2017-09-12 09:42 - 2017-09-12 09:42 - 000105756 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000082 2017-09-12 09:42 - 2017-09-12 09:42 - 000034363 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000083 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000084 2017-09-12 09:42 - 2017-09-12 09:42 - 000052888 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000085 2017-09-12 09:42 - 2017-09-12 09:42 - 000019092 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000086 2017-09-12 09:42 - 2017-09-12 09:42 - 000018972 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000087 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000088 2017-09-12 09:42 - 2017-09-12 09:42 - 000020524 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000089 2017-09-12 09:42 - 2017-09-12 09:42 - 000018944 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00008a 2017-09-12 09:42 - 2017-09-12 09:42 - 000030145 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00008b 2017-09-12 09:42 - 2017-09-12 09:42 - 000068786 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00008c 2017-09-12 09:42 - 2017-09-12 09:42 - 000034363 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00008d 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00008e 2017-09-12 09:42 - 2017-09-12 09:42 - 000208956 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00008f 2017-09-12 09:42 - 2017-09-12 09:42 - 000046581 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000090 2017-09-12 09:42 - 2017-09-12 09:42 - 000147800 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000091 2017-09-12 09:42 - 2017-09-12 09:42 - 000068786 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000092 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000093 2017-09-12 09:42 - 2017-09-12 09:42 - 000034142 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000094 2017-09-12 09:42 - 2017-09-12 09:42 - 000051888 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000095 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000096 2017-09-12 09:42 - 2017-09-12 09:42 - 000070719 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000097 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000098 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000099 2017-09-12 09:42 - 2017-09-12 09:42 - 000046581 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00009a 2017-09-12 09:42 - 2017-09-12 09:42 - 000085705 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00009b 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00009c 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00009d 2017-09-12 09:42 - 2017-09-12 09:42 - 000046581 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00009e 2017-09-12 09:42 - 2017-09-12 09:42 - 000030145 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00009f 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000a0 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000a1 2017-09-12 09:42 - 2017-09-12 09:42 - 000046581 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000a2 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000a3 2017-09-12 09:42 - 2017-09-12 09:42 - 000017029 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000a4 2017-09-12 09:42 - 2017-09-12 09:42 - 000031943 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000a5 2017-09-12 09:42 - 2017-09-12 09:42 - 000046581 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000a6 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000a7 2017-09-12 09:42 - 2017-09-12 09:42 - 000453478 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000a8 2017-09-12 09:42 - 2017-09-12 09:42 - 000128800 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000a9 2017-09-12 09:42 - 2017-09-12 09:42 - 000017029 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000aa 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000ab 2017-09-12 09:42 - 2017-09-12 09:42 - 000291067 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000ac 2017-09-12 09:42 - 2017-09-12 09:42 - 000062796 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000ad 2017-09-12 09:42 - 2017-09-12 09:42 - 000017942 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000ae 2017-09-12 09:42 - 2017-09-12 09:42 - 000069624 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000af 2017-09-12 09:42 - 2017-09-12 09:42 - 000016537 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000b0 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000b1 2017-09-12 09:42 - 2017-09-12 09:42 - 000068774 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000b3 2017-09-12 09:42 - 2017-09-12 09:42 - 000030145 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000b4 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000b5 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000b6 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000b7 2017-09-12 09:42 - 2017-09-12 09:42 - 000030145 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000b8 2017-09-12 09:42 - 2017-09-12 09:42 - 000030145 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000b9 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000ba 2017-09-12 09:42 - 2017-09-12 09:42 - 000034363 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000bb 2017-09-12 09:42 - 2017-09-12 09:42 - 000030145 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000bc 2017-09-12 09:42 - 2017-09-12 09:42 - 000034363 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000be 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000bf 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000c1 2017-09-12 09:42 - 2017-09-12 09:42 - 000034363 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000c2 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000c3 2017-09-12 09:42 - 2017-09-12 09:42 - 000083640 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000c4 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000c5 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000c6 2017-09-12 09:42 - 2017-09-12 09:42 - 000048804 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000c7 2017-09-12 09:42 - 2017-09-12 09:42 - 000024156 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000c8 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000c9 2017-09-12 09:42 - 2017-09-12 09:42 - 000068786 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000ca 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000cb 2017-09-12 09:42 - 2017-09-12 09:42 - 000096669 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000cc 2017-09-12 09:42 - 2017-09-12 09:42 - 000128788 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000cd 2017-09-12 09:42 - 2017-09-12 09:42 - 000027121 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000ce 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000cf 2017-09-12 09:42 - 2017-09-12 09:42 - 000025600 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000d0 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000d1 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000d2 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000d3 2017-09-12 09:42 - 2017-09-12 09:42 - 000181912 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000d4 2017-09-12 09:42 - 2017-09-12 09:42 - 000096669 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000d5 2017-09-12 09:42 - 2017-09-12 09:42 - 000096669 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000d6 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000d7 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000d8 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000d9 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000da 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000db 2017-09-12 09:42 - 2017-09-12 09:42 - 000027497 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000dc 2017-09-12 09:42 - 2017-09-12 09:42 - 000036400 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000dd 2017-09-12 09:42 - 2017-09-12 09:42 - 000021772 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000de 2017-09-12 09:42 - 2017-09-12 09:42 - 000021360 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000df 2017-09-12 09:42 - 2017-09-12 09:42 - 000021771 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000e0 2017-09-12 09:42 - 2017-09-12 09:42 - 000017184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000e1 2017-09-12 09:42 - 2017-09-12 09:42 - 000025129 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000e2 2017-09-12 09:42 - 2017-09-12 09:42 - 000096669 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000e3 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000e4 2017-09-12 09:42 - 2017-09-12 09:42 - 000588075 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000e5 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000e6 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000e7 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000e8 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000e9 2017-09-12 09:42 - 2017-09-12 09:42 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000ea 2017-09-12 09:43 - 2017-09-12 09:43 - 000021934 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000eb 2017-09-12 09:43 - 2017-09-12 09:43 - 000025178 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000ec 2017-09-12 09:43 - 2017-09-12 09:43 - 000071088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000ed 2017-09-12 09:43 - 2017-09-12 09:43 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000ee 2017-09-12 09:43 - 2017-09-12 09:43 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000ef 2017-09-12 09:43 - 2017-09-12 09:43 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000f0 2017-09-12 09:43 - 2017-09-12 09:43 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000f1 2017-09-12 09:43 - 2017-09-12 09:43 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000f2 2017-09-12 09:43 - 2017-09-12 09:43 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000f3 2017-09-12 09:43 - 2017-09-12 09:43 - 000048620 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000f6 2017-09-12 09:43 - 2017-09-12 09:43 - 000113505 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000f7 2017-09-12 09:43 - 2017-09-12 09:43 - 000241962 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000f8 2017-09-12 09:43 - 2017-09-12 09:43 - 000165836 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000f9 2017-09-12 09:43 - 2017-09-12 09:43 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000fa 2017-09-12 09:43 - 2017-09-12 09:43 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000fb 2017-09-12 09:43 - 2017-09-12 09:43 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000fc 2017-09-12 09:43 - 2017-09-12 09:43 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000fd 2017-09-12 09:43 - 2017-09-12 09:43 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000fe 2017-09-12 09:43 - 2017-09-12 09:43 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_0000ff 2017-09-12 09:43 - 2017-09-12 09:43 - 000025600 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000100 2017-09-12 09:43 - 2017-09-12 09:43 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000101 2017-09-12 09:43 - 2017-09-12 09:43 - 000025600 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000103 2017-09-12 09:43 - 2017-09-12 09:43 - 000048620 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000104 2017-09-12 09:43 - 2017-09-12 09:43 - 000113505 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000105 2017-09-12 09:43 - 2017-09-12 09:43 - 000029159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000106 2017-09-12 09:43 - 2017-09-12 09:43 - 000241962 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000107 2017-09-12 09:43 - 2017-09-12 09:43 - 000032698 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000108 2017-09-12 09:43 - 2017-09-12 09:43 - 000017417 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000109 2017-09-12 09:43 - 2017-09-12 09:43 - 000024817 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00010b 2017-09-12 09:43 - 2017-09-12 09:43 - 000017413 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00010c 2017-09-12 09:43 - 2017-09-12 09:43 - 000025489 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00010d 2017-09-12 09:43 - 2017-09-12 09:43 - 000017414 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00010e 2017-09-12 09:43 - 2017-09-12 09:43 - 000025489 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00010f 2017-09-12 09:43 - 2017-09-12 09:43 - 000025489 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000110 2017-09-12 09:43 - 2017-09-12 09:43 - 000017414 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000111 2017-09-12 09:43 - 2017-09-12 09:43 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000112 2017-09-12 09:43 - 2017-09-12 09:43 - 000021408 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000113 2017-09-12 09:43 - 2017-09-12 09:43 - 000029369 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000114 2017-09-12 09:43 - 2017-09-12 09:43 - 000023117 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000115 2017-09-12 09:43 - 2017-09-12 09:43 - 000016696 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000116 2017-09-12 09:43 - 2017-09-12 09:43 - 000204153 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000117 2017-09-12 09:43 - 2017-09-12 09:43 - 000029556 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000118 2017-09-12 09:43 - 2017-09-12 09:43 - 000066624 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000119 2017-09-12 09:43 - 2017-09-12 09:43 - 000025600 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00011c 2017-09-12 09:43 - 2017-09-12 09:43 - 000025600 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00011d 2017-09-12 09:43 - 2017-09-12 09:43 - 000076512 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000121 2017-09-12 09:43 - 2017-09-12 09:43 - 000141384 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000122 2017-09-12 09:43 - 2017-09-12 09:43 - 000045548 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000123 2017-09-12 09:43 - 2017-09-12 09:43 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000124 2017-09-12 09:43 - 2017-09-12 09:43 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000125 2017-09-12 09:43 - 2017-09-12 09:43 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000126 2017-09-12 09:43 - 2017-09-12 09:43 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000127 2017-09-12 09:43 - 2017-09-12 09:43 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000128 2017-09-12 09:44 - 2017-09-12 09:44 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000129 2017-09-12 09:44 - 2017-09-12 09:44 - 000068786 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00012a 2017-09-12 09:44 - 2017-09-12 09:44 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00012b 2017-09-12 09:44 - 2017-09-12 09:44 - 000034363 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00012c 2017-09-12 09:44 - 2017-09-12 09:44 - 000042436 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00012e 2017-09-12 09:44 - 2017-09-12 09:44 - 000025600 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00012f 2017-09-12 09:44 - 2017-09-12 09:44 - 000025600 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000130 2017-09-12 09:44 - 2017-09-12 09:44 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000131 2017-09-12 09:44 - 2017-09-12 09:44 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000133 2017-09-12 09:44 - 2017-09-12 09:44 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000134 2017-09-12 09:44 - 2017-09-12 09:44 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000135 2017-09-12 09:44 - 2017-09-12 09:44 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000136 2017-09-12 09:44 - 2017-09-12 09:44 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000137 2017-09-12 09:44 - 2017-09-12 09:44 - 000034363 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000138 2017-09-12 09:44 - 2017-09-12 09:44 - 000034363 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_000139 2017-09-12 09:44 - 2017-09-12 09:44 - 000108410 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00013a 2017-09-12 09:44 - 2017-09-12 09:44 - 000030145 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\f_00013b 2017-09-12 09:41 - 2017-09-12 09:41 - 000524656 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\index 2017-09-12 09:41 - 2017-09-12 09:43 - 000131072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Visited Links 2017-09-11 04:19 - 2017-09-11 04:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\databases 2017-09-11 04:19 - 2017-09-11 04:19 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\databases\Databases.db 2017-09-11 04:19 - 2017-09-11 04:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\databases\Databases.db-journal 2017-09-11 04:22 - 2017-09-11 04:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\File System 2017-09-11 04:22 - 2017-09-11 04:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\File System\000 2017-09-11 04:22 - 2017-09-11 04:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\File System\000\t 2017-09-11 04:22 - 2017-09-11 04:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\File System\Origins 2017-09-11 04:22 - 2017-09-11 04:22 - 000000098 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\File System\Origins\000003.log 2017-09-11 04:22 - 2017-09-11 04:22 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\File System\Origins\CURRENT 2017-09-11 04:22 - 2017-09-11 04:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\File System\Origins\LOCK 2017-09-11 04:22 - 2017-09-11 04:22 - 000000128 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\File System\Origins\LOG 2017-09-11 04:22 - 2017-09-11 04:22 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\File System\Origins\MANIFEST-000001 2017-09-12 09:41 - 2017-09-12 09:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\GPUCache 2017-09-12 09:41 - 2017-09-12 09:44 - 000045056 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\GPUCache\data_0 2017-09-12 09:41 - 2017-09-12 09:44 - 000270336 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\GPUCache\data_1 2017-09-12 09:41 - 2017-09-12 09:41 - 000008192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\GPUCache\data_2 2017-09-12 09:41 - 2017-09-12 09:44 - 004202496 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\GPUCache\data_3 2017-09-12 09:41 - 2017-09-12 09:41 - 000262512 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\GPUCache\index 2017-09-11 04:19 - 2017-09-11 04:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\IndexedDB 2017-09-11 04:19 - 2017-09-11 04:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb 2017-09-11 04:19 - 2017-09-11 04:19 - 000000198 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\000003.log 2017-09-11 04:19 - 2017-09-11 04:19 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\CURRENT 2017-09-11 04:19 - 2017-09-11 04:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\LOCK 2017-09-11 04:19 - 2017-09-11 04:19 - 000000167 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\LOG 2017-09-11 04:19 - 2017-09-11 04:19 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 04:16 - 2017-09-12 09:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage 2017-09-11 04:18 - 2017-09-11 04:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 04:18 - 2017-09-11 04:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 04:16 - 2017-09-11 04:17 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 04:16 - 2017-09-11 04:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-12 09:42 - 2017-09-12 09:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_video-static.tunnl.com_0.localstorage 2017-09-12 09:42 - 2017-09-12 09:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_video-static.tunnl.com_0.localstorage-journal 2017-09-11 04:18 - 2017-09-11 04:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 04:18 - 2017-09-11 04:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 04:20 - 2017-09-11 04:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-11 04:20 - 2017-09-11 04:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-11 04:19 - 2017-09-11 04:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-11 04:19 - 2017-09-11 04:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-11 04:18 - 2017-09-11 04:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 04:18 - 2017-09-11 04:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 04:16 - 2017-09-11 04:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_www.jango.com_0.localstorage 2017-09-11 04:16 - 2017-09-11 04:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_www.jango.com_0.localstorage-journal 2017-09-11 04:19 - 2017-09-11 04:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-11 04:19 - 2017-09-11 04:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-11 04:21 - 2017-09-11 04:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_www.today.com_0.localstorage 2017-09-11 04:21 - 2017-09-11 04:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_www.today.com_0.localstorage-journal 2017-09-12 09:42 - 2017-09-12 09:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_www.wordgames.com_0.localstorage 2017-09-12 09:42 - 2017-09-12 09:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\http_www.wordgames.com_0.localstorage-journal 2017-09-11 04:19 - 2017-09-11 04:19 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 04:19 - 2017-09-11 04:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 04:16 - 2017-09-11 04:16 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 04:16 - 2017-09-11 04:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-12 09:42 - 2017-09-12 09:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\https_monkey.tunnl.com_0.localstorage 2017-09-12 09:42 - 2017-09-12 09:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\https_monkey.tunnl.com_0.localstorage-journal 2017-09-11 04:16 - 2017-09-11 04:17 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 04:16 - 2017-09-11 04:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 04:16 - 2017-09-11 04:16 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 04:16 - 2017-09-11 04:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-12 09:42 - 2017-09-12 09:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\https_www.cosmedix.com_0.localstorage 2017-09-12 09:42 - 2017-09-12 09:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\https_www.cosmedix.com_0.localstorage-journal 2017-09-11 04:16 - 2017-09-11 04:17 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\https_www.forcesofnaturemedicine.com_0.localstorage 2017-09-11 04:16 - 2017-09-11 04:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\https_www.forcesofnaturemedicine.com_0.localstorage-journal 2017-09-11 04:16 - 2017-09-12 09:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\https_www.youtube.com_0.localstorage 2017-09-11 04:16 - 2017-09-12 09:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-11 04:16 - 2017-09-11 04:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data 2017-09-11 04:16 - 2017-09-12 09:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash 2017-09-11 04:16 - 2017-09-11 04:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 04:16 - 2017-09-11 04:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 04:16 - 2017-09-11 04:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\F52PC6A7 2017-09-11 04:16 - 2017-09-11 04:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 04:16 - 2017-09-11 04:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 04:16 - 2017-09-11 04:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM 2017-09-11 04:17 - 2017-09-12 09:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\cdn.stickyadstv.com 2017-09-11 04:16 - 2017-09-11 04:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\cdncache-a.akamaihd.net 2017-09-11 04:16 - 2017-09-11 04:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\cdncache-a.akamaihd.net\items 2017-09-11 04:16 - 2017-09-11 04:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 04:16 - 2017-09-11 04:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 04:16 - 2017-09-11 04:22 - 000000476 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 04:16 - 2017-09-12 09:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\eereader.com 2017-09-11 04:18 - 2017-09-12 09:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\efreader.com 2017-09-11 04:22 - 2017-09-11 04:23 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\efreader.com\analytics.sol 2017-09-11 04:16 - 2017-09-12 09:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\egreader.com 2017-09-11 04:16 - 2017-09-11 04:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\macromedia.com 2017-09-11 04:16 - 2017-09-11 04:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\macromedia.com\support 2017-09-11 04:16 - 2017-09-11 04:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\macromedia.com\support\flashplayer 2017-09-11 04:16 - 2017-09-11 04:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\macromedia.com\support\flashplayer\sys 2017-09-11 04:16 - 2017-09-11 04:18 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 04:17 - 2017-09-11 04:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 04:17 - 2017-09-11 04:17 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 04:16 - 2017-09-11 04:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 04:16 - 2017-09-11 04:16 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 04:16 - 2017-09-11 04:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 04:16 - 2017-09-11 04:16 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 04:18 - 2017-09-11 04:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 04:18 - 2017-09-11 04:18 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 04:16 - 2017-09-11 04:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 04:16 - 2017-09-11 04:16 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data627\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PRXBDCTM\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 18:16 - 2017-09-12 09:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628 2017-09-11 18:16 - 2017-09-12 09:33 - 000318464 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Cookies 2017-09-11 18:16 - 2017-09-12 09:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Cookies-journal 2017-09-12 03:10 - 2017-09-12 03:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\databases 2017-09-12 03:10 - 2017-09-12 03:10 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\databases\Databases.db 2017-09-12 03:10 - 2017-09-12 03:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\databases\Databases.db-journal 2017-09-11 18:19 - 2017-09-12 09:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System 2017-09-11 18:19 - 2017-09-11 18:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\000 2017-09-11 18:19 - 2017-09-12 03:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\000\t 2017-09-12 03:10 - 2017-09-12 03:10 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\000\t\.usage 2017-09-12 03:10 - 2017-09-12 03:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\000\t\Paths 2017-09-12 03:10 - 2017-09-12 03:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\000\t\Paths\000003.log 2017-09-12 03:10 - 2017-09-12 03:10 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\000\t\Paths\CURRENT 2017-09-12 03:10 - 2017-09-12 03:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\000\t\Paths\LOCK 2017-09-12 03:10 - 2017-09-12 03:10 - 000000131 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\000\t\Paths\LOG 2017-09-12 03:10 - 2017-09-12 03:10 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\000\t\Paths\MANIFEST-000001 2017-09-12 03:10 - 2017-09-12 03:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\001 2017-09-12 03:10 - 2017-09-12 03:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\001\t 2017-09-12 03:10 - 2017-09-12 03:10 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\001\t\.usage 2017-09-12 03:10 - 2017-09-12 03:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\001\t\Paths 2017-09-12 03:10 - 2017-09-12 03:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\001\t\Paths\000003.log 2017-09-12 03:10 - 2017-09-12 03:10 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\001\t\Paths\CURRENT 2017-09-12 03:10 - 2017-09-12 03:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\001\t\Paths\LOCK 2017-09-12 03:10 - 2017-09-12 03:10 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\001\t\Paths\LOG 2017-09-12 03:10 - 2017-09-12 03:10 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\001\t\Paths\MANIFEST-000001 2017-09-12 03:15 - 2017-09-12 03:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\002 2017-09-12 03:15 - 2017-09-12 03:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\002\t 2017-09-12 09:25 - 2017-09-12 09:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\003 2017-09-12 09:25 - 2017-09-12 09:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\003\t 2017-09-12 09:31 - 2017-09-12 09:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\004 2017-09-12 09:31 - 2017-09-12 09:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\004\t 2017-09-12 09:32 - 2017-09-12 09:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\005 2017-09-12 09:32 - 2017-09-12 09:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\005\t 2017-09-11 18:19 - 2017-09-12 09:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\Origins 2017-09-11 18:19 - 2017-09-12 09:34 - 000000438 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\Origins\000003.log 2017-09-11 18:19 - 2017-09-11 18:19 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\Origins\CURRENT 2017-09-11 18:19 - 2017-09-11 18:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\Origins\LOCK 2017-09-11 18:19 - 2017-09-12 09:32 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\Origins\LOG 2017-09-11 18:19 - 2017-09-12 09:32 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\Origins\LOG.old 2017-09-11 18:19 - 2017-09-11 18:19 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\File System\Origins\MANIFEST-000001 2017-09-12 03:10 - 2017-09-12 03:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\IndexedDB 2017-09-12 03:15 - 2017-09-12 03:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb 2017-09-12 03:15 - 2017-09-12 03:15 - 000000186 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb\000003.log 2017-09-12 03:15 - 2017-09-12 03:15 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb\CURRENT 2017-09-12 03:15 - 2017-09-12 03:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb\LOCK 2017-09-12 03:15 - 2017-09-12 03:15 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb\LOG 2017-09-12 03:15 - 2017-09-12 03:15 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 03:10 - 2017-09-12 03:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\IndexedDB\https_www.prevention.com_0.indexeddb.leveldb 2017-09-12 03:10 - 2017-09-12 03:10 - 000000196 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\IndexedDB\https_www.prevention.com_0.indexeddb.leveldb\000003.log 2017-09-12 03:10 - 2017-09-12 03:10 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\IndexedDB\https_www.prevention.com_0.indexeddb.leveldb\CURRENT 2017-09-12 03:10 - 2017-09-12 03:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\IndexedDB\https_www.prevention.com_0.indexeddb.leveldb\LOCK 2017-09-12 03:10 - 2017-09-12 03:10 - 000000162 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\IndexedDB\https_www.prevention.com_0.indexeddb.leveldb\LOG 2017-09-12 03:10 - 2017-09-12 03:10 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\IndexedDB\https_www.prevention.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 18:16 - 2017-09-12 09:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage 2017-09-12 03:16 - 2017-09-12 09:32 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_allrecipes.com_0.localstorage 2017-09-12 03:16 - 2017-09-12 09:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-11 18:18 - 2017-09-11 18:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 18:18 - 2017-09-11 18:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-12 09:25 - 2017-09-12 09:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-12 09:25 - 2017-09-12 09:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-12 09:27 - 2017-09-12 09:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_connexity.net_0.localstorage 2017-09-12 09:27 - 2017-09-12 09:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 18:22 - 2017-09-11 18:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_jobs.mashable.com_0.localstorage 2017-09-11 18:22 - 2017-09-11 18:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_jobs.mashable.com_0.localstorage-journal 2017-09-11 18:16 - 2017-09-11 18:16 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 18:16 - 2017-09-11 18:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-12 09:25 - 2017-09-12 09:26 - 000012288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.bhg.com_0.localstorage 2017-09-12 09:25 - 2017-09-12 09:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.bhg.com_0.localstorage-journal 2017-09-12 03:15 - 2017-09-12 09:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-12 03:15 - 2017-09-12 09:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-11 18:21 - 2017-09-11 18:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.bounty.com_0.localstorage 2017-09-11 18:21 - 2017-09-11 18:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.bounty.com_0.localstorage-journal 2017-09-12 03:10 - 2017-09-12 03:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.cabelas.com_0.localstorage 2017-09-12 03:10 - 2017-09-12 03:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.cabelas.com_0.localstorage-journal 2017-09-11 18:18 - 2017-09-11 18:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 18:18 - 2017-09-11 18:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-12 09:30 - 2017-09-12 09:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.daytondailynews.com_0.localstorage 2017-09-12 09:30 - 2017-09-12 09:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.daytondailynews.com_0.localstorage-journal 2017-09-12 03:14 - 2017-09-12 03:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-12 03:14 - 2017-09-12 03:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-11 18:20 - 2017-09-11 18:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.finecooking.com_0.localstorage 2017-09-11 18:20 - 2017-09-11 18:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.finecooking.com_0.localstorage-journal 2017-09-12 09:28 - 2017-09-12 09:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-12 09:28 - 2017-09-12 09:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-11 18:16 - 2017-09-11 18:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.homeforexchange.com_0.localstorage 2017-09-11 18:16 - 2017-09-11 18:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.homeforexchange.com_0.localstorage-journal 2017-09-11 18:18 - 2017-09-12 03:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 18:18 - 2017-09-12 03:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 18:19 - 2017-09-11 18:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.islandpacket.com_0.localstorage 2017-09-11 18:19 - 2017-09-11 18:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.islandpacket.com_0.localstorage-journal 2017-09-12 09:28 - 2017-09-12 09:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-12 09:28 - 2017-09-12 09:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-11 18:16 - 2017-09-11 18:17 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.lemonde.fr_0.localstorage 2017-09-11 18:16 - 2017-09-11 18:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.lemonde.fr_0.localstorage-journal 2017-09-12 03:13 - 2017-09-12 03:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-12 03:13 - 2017-09-12 03:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-12 03:12 - 2017-09-12 03:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.nfl.com_0.localstorage 2017-09-12 03:12 - 2017-09-12 03:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 18:19 - 2017-09-12 09:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.parents.com_0.localstorage 2017-09-11 18:19 - 2017-09-12 09:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-12 03:17 - 2017-09-12 03:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.vh1.com_0.localstorage 2017-09-12 03:17 - 2017-09-12 03:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\http_www.vh1.com_0.localstorage-journal 2017-09-12 03:10 - 2017-09-12 03:12 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\https_assets.bounceexchange.com_0.localstorage 2017-09-12 03:10 - 2017-09-12 03:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\https_assets.bounceexchange.com_0.localstorage-journal 2017-09-11 18:20 - 2017-09-11 18:20 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 18:20 - 2017-09-11 18:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-12 03:10 - 2017-09-12 03:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\https_cdn.krxd.net_0.localstorage 2017-09-12 03:10 - 2017-09-12 03:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\https_cdn.krxd.net_0.localstorage-journal 2017-09-12 09:27 - 2017-09-12 09:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\https_connexity.net_0.localstorage 2017-09-12 09:27 - 2017-09-12 09:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-12 09:25 - 2017-09-12 09:25 - 000242688 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\https_guessbymarciano.guess.com_0.localstorage 2017-09-12 09:25 - 2017-09-12 09:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\https_guessbymarciano.guess.com_0.localstorage-journal 2017-09-12 09:25 - 2017-09-12 09:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\https_sb.monetate.net_0.localstorage 2017-09-12 09:25 - 2017-09-12 09:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\https_sb.monetate.net_0.localstorage-journal 2017-09-11 18:16 - 2017-09-11 18:16 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 18:16 - 2017-09-11 18:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-12 03:10 - 2017-09-12 03:12 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\https_www.prevention.com_0.localstorage 2017-09-12 03:10 - 2017-09-12 03:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Local Storage\https_www.prevention.com_0.localstorage-journal 2017-09-11 18:16 - 2017-09-11 18:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data 2017-09-11 18:16 - 2017-09-12 09:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash 2017-09-11 18:16 - 2017-09-11 18:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 18:16 - 2017-09-11 18:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 18:16 - 2017-09-11 18:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\5V4ZJF7N 2017-09-11 18:16 - 2017-09-11 18:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 18:16 - 2017-09-11 18:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 18:16 - 2017-09-11 18:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4 2017-09-11 18:17 - 2017-09-12 09:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\cdn.stickyadstv.com 2017-09-11 18:16 - 2017-09-11 18:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\cdncache-a.akamaihd.net 2017-09-11 18:16 - 2017-09-11 18:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\cdncache-a.akamaihd.net\items 2017-09-11 18:16 - 2017-09-11 18:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 18:16 - 2017-09-11 18:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 18:16 - 2017-09-11 18:20 - 000000416 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 18:16 - 2017-09-12 09:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\eereader.com 2017-09-11 18:18 - 2017-09-12 09:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\efreader.com 2017-09-12 03:17 - 2017-09-12 09:34 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\efreader.com\analytics.sol 2017-09-11 18:16 - 2017-09-12 09:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\egreader.com 2017-09-11 18:16 - 2017-09-11 18:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\macromedia.com 2017-09-11 18:16 - 2017-09-11 18:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\macromedia.com\support 2017-09-11 18:16 - 2017-09-11 18:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\macromedia.com\support\flashplayer 2017-09-11 18:16 - 2017-09-11 18:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\macromedia.com\support\flashplayer\sys 2017-09-11 18:16 - 2017-09-11 18:19 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 18:17 - 2017-09-11 18:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 18:17 - 2017-09-11 18:17 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 18:16 - 2017-09-11 18:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 18:16 - 2017-09-11 18:16 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 18:16 - 2017-09-11 18:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 18:16 - 2017-09-11 18:16 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 18:18 - 2017-09-11 18:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 18:18 - 2017-09-11 18:18 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 18:16 - 2017-09-11 18:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 18:16 - 2017-09-11 18:16 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data628\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\T9GGH8V4\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 18:10 - 2017-09-12 09:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629 2017-09-10 18:10 - 2017-09-12 08:11 - 000358400 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Cookies 2017-09-10 18:10 - 2017-09-12 08:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Cookies-journal 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\databases 2017-09-10 18:10 - 2017-09-10 18:10 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\databases\Databases.db 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\databases\Databases.db-journal 2017-09-10 18:10 - 2017-09-12 08:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System 2017-09-11 00:50 - 2017-09-11 00:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System\005 2017-09-11 00:50 - 2017-09-11 00:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System\005\t 2017-09-11 00:47 - 2017-09-11 00:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System\006 2017-09-11 00:47 - 2017-09-11 00:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System\006\t 2017-09-11 00:52 - 2017-09-11 00:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System\007 2017-09-11 00:52 - 2017-09-11 00:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System\007\t 2017-09-11 03:12 - 2017-09-11 03:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System\008 2017-09-11 03:12 - 2017-09-11 03:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System\008\t 2017-09-12 08:06 - 2017-09-12 08:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System\009 2017-09-12 08:06 - 2017-09-12 08:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System\009\t 2017-09-12 08:10 - 2017-09-12 08:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System\010 2017-09-12 08:10 - 2017-09-12 08:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System\010\t 2017-09-10 18:10 - 2017-09-12 08:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System\Origins 2017-09-10 18:10 - 2017-09-12 08:11 - 000000815 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System\Origins\000003.log 2017-09-10 18:10 - 2017-09-10 18:10 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System\Origins\CURRENT 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System\Origins\LOCK 2017-09-10 18:10 - 2017-09-12 08:10 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System\Origins\LOG 2017-09-10 18:10 - 2017-09-12 08:07 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System\Origins\LOG.old 2017-09-10 18:10 - 2017-09-10 18:10 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System\Origins\MANIFEST-000001 2017-09-10 18:13 - 2017-09-10 18:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\File System\Origins\lost 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\IndexedDB 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb 2017-09-10 18:10 - 2017-09-10 18:10 - 000000206 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\000003.log 2017-09-10 18:10 - 2017-09-10 18:10 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\CURRENT 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\LOCK 2017-09-10 18:10 - 2017-09-10 18:10 - 000000166 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\LOG 2017-09-10 18:10 - 2017-09-10 18:10 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 18:10 - 2017-09-12 08:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage 2017-09-10 18:16 - 2017-09-10 18:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_allrecipes.com_0.localstorage 2017-09-10 18:16 - 2017-09-10 18:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-11 00:51 - 2017-09-11 03:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-11 00:51 - 2017-09-11 03:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-10 18:15 - 2017-09-10 18:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 18:15 - 2017-09-10 18:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-12 08:07 - 2017-09-12 08:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_connexity.net_0.localstorage 2017-09-12 08:07 - 2017-09-12 08:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 00:50 - 2017-09-11 00:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_jp.reuters.com_0.localstorage 2017-09-11 00:50 - 2017-09-11 00:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_jp.reuters.com_0.localstorage-journal 2017-09-12 08:05 - 2017-09-12 08:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_nflfilms.nfl.com_0.localstorage 2017-09-12 08:05 - 2017-09-12 08:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_nflfilms.nfl.com_0.localstorage-journal 2017-09-11 03:16 - 2017-09-11 03:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_ottawacitizen.com_0.localstorage 2017-09-11 03:16 - 2017-09-11 03:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_ottawacitizen.com_0.localstorage-journal 2017-09-10 18:10 - 2017-09-10 18:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-11 00:44 - 2017-09-11 00:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 00:44 - 2017-09-11 00:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 00:48 - 2017-09-11 00:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-11 00:48 - 2017-09-11 00:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-11 00:49 - 2017-09-11 00:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_webassign.net_0.localstorage 2017-09-11 00:49 - 2017-09-11 00:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_webassign.net_0.localstorage-journal 2017-09-10 18:15 - 2017-09-10 18:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.aetv.com_0.localstorage 2017-09-10 18:15 - 2017-09-10 18:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.aetv.com_0.localstorage-journal 2017-09-12 08:08 - 2017-09-12 08:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.blessyouboys.com_0.localstorage 2017-09-12 08:08 - 2017-09-12 08:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.blessyouboys.com_0.localstorage-journal 2017-09-11 00:46 - 2017-09-11 00:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 00:46 - 2017-09-11 00:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-12 08:04 - 2017-09-12 08:05 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.columbia.com_0.localstorage 2017-09-12 08:04 - 2017-09-12 08:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.columbia.com_0.localstorage-journal 2017-09-10 18:15 - 2017-09-10 18:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.complex.com_0.localstorage 2017-09-10 18:15 - 2017-09-10 18:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-11 00:48 - 2017-09-11 03:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-11 00:48 - 2017-09-11 03:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-10 18:14 - 2017-09-10 18:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.foxnews.com_0.localstorage 2017-09-10 18:14 - 2017-09-10 18:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.foxnews.com_0.localstorage-journal 2017-09-11 00:44 - 2017-09-11 00:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.futbolecuador.com_0.localstorage 2017-09-11 00:44 - 2017-09-11 00:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.futbolecuador.com_0.localstorage-journal 2017-09-12 08:07 - 2017-09-12 08:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.instyle.com_0.localstorage 2017-09-12 08:07 - 2017-09-12 08:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-10 18:12 - 2017-09-10 18:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 18:12 - 2017-09-10 18:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 00:48 - 2017-09-11 00:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.latimes.com_0.localstorage 2017-09-11 00:48 - 2017-09-11 00:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-11 03:13 - 2017-09-11 03:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-11 03:13 - 2017-09-11 03:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-12 08:09 - 2017-09-12 08:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.lifeandstylemag.com_0.localstorage 2017-09-12 08:09 - 2017-09-12 08:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.lifeandstylemag.com_0.localstorage-journal 2017-09-12 08:10 - 2017-09-12 08:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.macworld.com_0.localstorage 2017-09-12 08:10 - 2017-09-12 08:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-11 00:47 - 2017-09-11 00:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.mylifetime.com_0.localstorage 2017-09-11 00:47 - 2017-09-11 00:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.mylifetime.com_0.localstorage-journal 2017-09-10 18:13 - 2017-09-10 18:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.nbcconnecticut.com_0.localstorage 2017-09-10 18:13 - 2017-09-10 18:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.nbcconnecticut.com_0.localstorage-journal 2017-09-12 08:09 - 2017-09-12 08:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.nfl.com_0.localstorage 2017-09-12 08:09 - 2017-09-12 08:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-12 08:07 - 2017-09-12 08:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-12 08:07 - 2017-09-12 08:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-11 03:11 - 2017-09-11 03:11 - 000012288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_a2972860641.cdn.optimizely.com_0.localstorage 2017-09-11 03:11 - 2017-09-11 03:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_a2972860641.cdn.optimizely.com_0.localstorage-journal 2017-09-11 00:48 - 2017-09-11 00:48 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 00:48 - 2017-09-11 00:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 18:10 - 2017-09-10 18:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_cdn.krxd.net_0.localstorage 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_cdn.krxd.net_0.localstorage-journal 2017-09-12 08:08 - 2017-09-12 08:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_connexity.net_0.localstorage 2017-09-12 08:08 - 2017-09-12 08:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 18:10 - 2017-09-11 03:11 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 18:10 - 2017-09-11 03:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 18:10 - 2017-09-11 03:11 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 18:10 - 2017-09-11 03:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-12 08:04 - 2017-09-12 08:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_s.salecycle.com_0.localstorage 2017-09-12 08:04 - 2017-09-12 08:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_s.salecycle.com_0.localstorage-journal 2017-09-10 18:10 - 2017-09-10 18:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_sb.monetate.net_0.localstorage 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_sb.monetate.net_0.localstorage-journal 2017-09-10 18:10 - 2017-09-10 18:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_sdk.azureedge.net_0.localstorage 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_sdk.azureedge.net_0.localstorage-journal 2017-09-10 18:10 - 2017-09-11 03:10 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 18:10 - 2017-09-11 03:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 00:44 - 2017-09-11 00:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_w.soundcloud.com_0.localstorage 2017-09-11 00:44 - 2017-09-11 00:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_w.soundcloud.com_0.localstorage-journal 2017-09-11 00:44 - 2017-09-11 00:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_www.cosmedix.com_0.localstorage 2017-09-11 00:44 - 2017-09-11 00:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_www.cosmedix.com_0.localstorage-journal 2017-09-10 18:10 - 2017-09-10 18:11 - 000012288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_www.fitnessmagazine.com_0.localstorage 2017-09-10 18:10 - 2017-09-10 18:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_www.fitnessmagazine.com_0.localstorage-journal 2017-09-11 03:10 - 2017-09-11 03:12 - 000105472 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_www.ibm.com_0.localstorage 2017-09-11 03:10 - 2017-09-11 03:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_www.ibm.com_0.localstorage-journal 2017-09-11 03:10 - 2017-09-11 03:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_www.self.com_0.localstorage 2017-09-11 03:10 - 2017-09-11 03:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_www.self.com_0.localstorage-journal 2017-09-10 18:10 - 2017-09-10 18:11 - 000025600 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_www.strongspices.com_0.localstorage 2017-09-10 18:10 - 2017-09-10 18:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_www.strongspices.com_0.localstorage-journal 2017-09-11 00:46 - 2017-09-11 00:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_www.youtube.com_0.localstorage 2017-09-11 00:46 - 2017-09-11 00:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data 2017-09-10 18:10 - 2017-09-12 08:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\A6SP7RRN 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 18:10 - 2017-09-11 00:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5 2017-09-10 18:16 - 2017-09-10 18:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\cdn.dashbid.io 2017-09-10 18:16 - 2017-09-10 18:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\cdn.dashbid.io\prod 2017-09-10 18:16 - 2017-09-11 03:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-10 18:16 - 2017-09-11 03:15 - 000000069 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-10 18:10 - 2017-09-12 08:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\cdn.stickyadstv.com 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\cdncache-a.akamaihd.net 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\cdncache-a.akamaihd.net\items 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 18:10 - 2017-09-11 03:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 18:10 - 2017-09-11 03:14 - 000000592 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 18:10 - 2017-09-12 08:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\eereader.com 2017-09-10 18:11 - 2017-09-12 08:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\efreader.com 2017-09-10 18:19 - 2017-09-11 03:17 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\efreader.com\analytics.sol 2017-09-10 18:12 - 2017-09-12 08:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\egreader.com 2017-09-11 00:47 - 2017-09-11 00:47 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\egreader.com\analytics.sol 2017-09-11 00:44 - 2017-09-11 00:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\es-netsonic.cdn.videoplaza.tv 2017-09-11 00:44 - 2017-09-11 00:45 - 000000122 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\es-netsonic.cdn.videoplaza.tv\com.videoplaza.bootloader.sol 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com\support 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com\support\flashplayer 2017-09-10 18:10 - 2017-09-11 00:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com\support\flashplayer\sys 2017-09-10 18:10 - 2017-09-11 00:46 - 000000569 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 18:16 - 2017-09-10 18:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-10 18:16 - 2017-09-10 18:16 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 18:10 - 2017-09-10 18:10 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 18:10 - 2017-09-10 18:10 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 18:10 - 2017-09-10 18:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 18:10 - 2017-09-10 18:10 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 18:11 - 2017-09-10 18:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 18:11 - 2017-09-10 18:11 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 18:12 - 2017-09-10 18:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 18:12 - 2017-09-10 18:12 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 00:44 - 2017-09-11 00:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com\support\flashplayer\sys\#es-netsonic.cdn.videoplaza.tv 2017-09-11 00:44 - 2017-09-11 00:44 - 000000099 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com\support\flashplayer\sys\#es-netsonic.cdn.videoplaza.tv\settings.sol 2017-09-11 00:46 - 2017-09-11 00:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com 2017-09-11 00:46 - 2017-09-11 00:46 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com\settings.sol 2017-09-11 00:46 - 2017-09-11 00:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\objects.tremormedia.com 2017-09-11 00:46 - 2017-09-11 00:46 - 000000073 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data629\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US7XBM5\objects.tremormedia.com\com.quantserve.sol 2017-09-11 08:59 - 2017-09-12 02:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630 2017-09-11 08:59 - 2017-09-12 01:25 - 000290816 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Cookies 2017-09-11 08:59 - 2017-09-12 01:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Cookies-journal 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\databases 2017-09-11 09:00 - 2017-09-11 09:00 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\databases\Databases.db 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\databases\Databases.db-journal 2017-09-11 09:05 - 2017-09-12 01:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\File System 2017-09-11 09:05 - 2017-09-12 01:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\File System\Origins 2017-09-11 09:05 - 2017-09-12 01:22 - 000000309 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\File System\Origins\000003.log 2017-09-12 01:23 - 2017-09-12 01:23 - 000000263 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\File System\Origins\000004.ldb 2017-09-12 01:23 - 2017-09-12 01:23 - 000000263 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\File System\Origins\000005.ldb 2017-09-11 09:05 - 2017-09-11 09:05 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\File System\Origins\CURRENT 2017-09-11 09:05 - 2017-09-11 09:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\File System\Origins\LOCK 2017-09-11 09:05 - 2017-09-12 01:23 - 000000736 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\File System\Origins\LOG 2017-09-11 09:05 - 2017-09-12 01:20 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\File System\Origins\LOG.old 2017-09-11 09:05 - 2017-09-11 09:05 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\File System\Origins\MANIFEST-000001 2017-09-11 21:33 - 2017-09-11 21:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\File System\Origins\lost 2017-09-11 09:00 - 2017-09-12 01:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB 2017-09-11 09:04 - 2017-09-11 09:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.bounty.com_0.indexeddb.leveldb 2017-09-11 09:04 - 2017-09-11 09:04 - 000000178 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.bounty.com_0.indexeddb.leveldb\000003.log 2017-09-11 09:04 - 2017-09-11 09:04 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.bounty.com_0.indexeddb.leveldb\CURRENT 2017-09-11 09:04 - 2017-09-11 09:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.bounty.com_0.indexeddb.leveldb\LOCK 2017-09-11 09:04 - 2017-09-11 09:04 - 000000157 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.bounty.com_0.indexeddb.leveldb\LOG 2017-09-11 09:04 - 2017-09-11 09:04 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.bounty.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 01:17 - 2017-09-12 01:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.countryliving.com_0.indexeddb.leveldb 2017-09-12 01:17 - 2017-09-12 01:17 - 000000192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.countryliving.com_0.indexeddb.leveldb\000003.log 2017-09-12 01:17 - 2017-09-12 01:17 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.countryliving.com_0.indexeddb.leveldb\CURRENT 2017-09-12 01:17 - 2017-09-12 01:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.countryliving.com_0.indexeddb.leveldb\LOCK 2017-09-12 01:17 - 2017-09-12 01:17 - 000000164 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.countryliving.com_0.indexeddb.leveldb\LOG 2017-09-12 01:17 - 2017-09-12 01:17 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.countryliving.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 01:23 - 2017-09-12 01:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.detroitlions.com_0.indexeddb.leveldb 2017-09-12 01:23 - 2017-09-12 01:23 - 000000190 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.detroitlions.com_0.indexeddb.leveldb\000003.log 2017-09-12 01:23 - 2017-09-12 01:23 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.detroitlions.com_0.indexeddb.leveldb\CURRENT 2017-09-12 01:23 - 2017-09-12 01:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.detroitlions.com_0.indexeddb.leveldb\LOCK 2017-09-12 01:23 - 2017-09-12 01:23 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.detroitlions.com_0.indexeddb.leveldb\LOG 2017-09-12 01:23 - 2017-09-12 01:23 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.detroitlions.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.msnbc.com_0.indexeddb.leveldb 2017-09-11 09:00 - 2017-09-11 09:00 - 000000176 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.msnbc.com_0.indexeddb.leveldb\000003.log 2017-09-11 09:00 - 2017-09-11 09:00 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.msnbc.com_0.indexeddb.leveldb\CURRENT 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.msnbc.com_0.indexeddb.leveldb\LOCK 2017-09-11 09:00 - 2017-09-11 09:00 - 000000156 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.msnbc.com_0.indexeddb.leveldb\LOG 2017-09-11 09:00 - 2017-09-11 09:00 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\IndexedDB\http_www.msnbc.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 09:00 - 2017-09-12 01:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage 2017-09-11 09:05 - 2017-09-11 09:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_allrecipes.com_0.localstorage 2017-09-11 09:05 - 2017-09-11 09:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-12 01:24 - 2017-09-12 01:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-12 01:24 - 2017-09-12 01:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-11 09:01 - 2017-09-11 09:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 09:01 - 2017-09-11 09:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 09:00 - 2017-09-11 09:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-11 21:30 - 2017-09-11 21:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 21:30 - 2017-09-11 21:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-12 01:21 - 2017-09-12 01:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-12 01:21 - 2017-09-12 01:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-12 01:17 - 2017-09-12 01:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.bidz.com_0.localstorage 2017-09-12 01:17 - 2017-09-12 01:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.bidz.com_0.localstorage-journal 2017-09-11 09:04 - 2017-09-11 09:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.bounty.com_0.localstorage 2017-09-11 09:04 - 2017-09-11 09:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.bounty.com_0.localstorage-journal 2017-09-11 09:06 - 2017-09-11 09:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.cartoonnetworkasia.com_0.localstorage 2017-09-11 09:06 - 2017-09-11 09:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.cartoonnetworkasia.com_0.localstorage-journal 2017-09-11 09:02 - 2017-09-11 09:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 09:02 - 2017-09-11 09:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-12 01:17 - 2017-09-12 01:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.countryliving.com_0.localstorage 2017-09-12 01:17 - 2017-09-12 01:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.countryliving.com_0.localstorage-journal 2017-09-12 01:22 - 2017-09-12 01:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.detroitlions.com_0.localstorage 2017-09-12 01:22 - 2017-09-12 01:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.detroitlions.com_0.localstorage-journal 2017-09-12 01:21 - 2017-09-12 01:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.food.com_0.localstorage 2017-09-12 01:21 - 2017-09-12 01:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-11 09:03 - 2017-09-11 09:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.instyle.com_0.localstorage 2017-09-11 09:03 - 2017-09-11 09:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 09:00 - 2017-09-11 09:01 - 000008192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.msnbc.com_0.localstorage 2017-09-11 09:00 - 2017-09-11 09:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.msnbc.com_0.localstorage-journal 2017-09-11 09:02 - 2017-09-11 09:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.mylifetime.com_0.localstorage 2017-09-11 09:02 - 2017-09-11 09:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.mylifetime.com_0.localstorage-journal 2017-09-11 21:32 - 2017-09-11 21:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 21:32 - 2017-09-11 21:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 21:33 - 2017-09-11 21:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-11 21:33 - 2017-09-11 21:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-11 21:30 - 2017-09-11 21:31 - 000014336 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.riverfallsjournal.com_0.localstorage 2017-09-11 21:30 - 2017-09-11 21:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.riverfallsjournal.com_0.localstorage-journal 2017-09-11 21:30 - 2017-09-11 21:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.wards.com_0.localstorage 2017-09-11 21:30 - 2017-09-11 21:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\http_www.wards.com_0.localstorage-journal 2017-09-11 09:00 - 2017-09-11 09:00 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 09:00 - 2017-09-11 09:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 09:00 - 2017-09-11 21:30 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 09:00 - 2017-09-11 21:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 09:00 - 2017-09-11 09:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\https_www.pepperjamnetwork.com_0.localstorage 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Local Storage\https_www.pepperjamnetwork.com_0.localstorage-journal 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data 2017-09-11 09:00 - 2017-09-12 01:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\SY5TBEHC 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 09:00 - 2017-09-11 21:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY 2017-09-11 21:31 - 2017-09-11 21:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\cdn.dashbid.io 2017-09-11 21:31 - 2017-09-11 21:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\cdn.dashbid.io\prod 2017-09-11 21:31 - 2017-09-11 21:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-11 21:31 - 2017-09-11 21:31 - 000000069 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-11 09:00 - 2017-09-12 01:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\cdn.stickyadstv.com 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\cdncache-a.akamaihd.net 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\cdncache-a.akamaihd.net\items 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 09:00 - 2017-09-11 21:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 09:00 - 2017-09-11 21:33 - 000000490 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 09:00 - 2017-09-12 01:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\eereader.com 2017-09-11 09:01 - 2017-09-12 01:22 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\eereader.com\analytics.sol 2017-09-11 09:01 - 2017-09-12 01:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\efreader.com 2017-09-11 09:05 - 2017-09-12 01:24 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\efreader.com\analytics.sol 2017-09-11 09:00 - 2017-09-12 01:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\egreader.com 2017-09-12 01:19 - 2017-09-12 01:24 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\egreader.com\analytics.sol 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\entitlement.auth.adobe.com 2017-09-11 09:00 - 2017-09-11 09:00 - 000000061 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\entitlement.auth.adobe.com\authorization_access.sol 2017-09-11 09:00 - 2017-09-11 09:00 - 000000048 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\entitlement.auth.adobe.com\social_data.sol 2017-09-11 09:05 - 2017-09-11 09:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\inread.anyclip.com 2017-09-11 09:05 - 2017-09-11 09:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\inread.anyclip.com\ac# 2017-09-11 09:05 - 2017-09-11 09:05 - 000000481 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com\support 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com\support\flashplayer 2017-09-11 09:00 - 2017-09-11 21:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com\support\flashplayer\sys 2017-09-11 09:00 - 2017-09-11 21:33 - 000000561 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 21:31 - 2017-09-11 21:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-11 21:31 - 2017-09-11 21:31 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 09:00 - 2017-09-11 09:00 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 09:00 - 2017-09-11 09:00 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 09:00 - 2017-09-11 09:00 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 09:01 - 2017-09-11 09:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 09:01 - 2017-09-11 09:01 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 09:00 - 2017-09-11 09:00 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 09:00 - 2017-09-11 09:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com\support\flashplayer\sys\#entitlement.auth.adobe.com 2017-09-11 09:00 - 2017-09-11 09:00 - 000000096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com\support\flashplayer\sys\#entitlement.auth.adobe.com\settings.sol 2017-09-11 09:05 - 2017-09-11 09:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 09:05 - 2017-09-11 09:05 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data630\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MFJ3K4VY\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-10 11:35 - 2017-09-10 15:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631 2017-09-10 11:35 - 2017-09-10 14:25 - 000228352 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Cookies 2017-09-10 11:35 - 2017-09-10 14:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Cookies-journal 2017-09-10 11:41 - 2017-09-10 12:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\databases 2017-09-10 11:41 - 2017-09-10 12:06 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\databases\Databases.db 2017-09-10 11:41 - 2017-09-10 12:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\databases\Databases.db-journal 2017-09-10 12:06 - 2017-09-10 12:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\databases\https_bbybrandie.com_0 2017-09-10 12:06 - 2017-09-10 12:06 - 000020480 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\databases\https_bbybrandie.com_0\1 2017-09-10 11:38 - 2017-09-10 14:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System 2017-09-10 11:38 - 2017-09-10 11:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\000 2017-09-10 11:38 - 2017-09-10 11:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\000\t 2017-09-10 11:41 - 2017-09-10 11:42 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\000\t\.usage 2017-09-10 11:41 - 2017-09-10 11:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\000\t\Paths 2017-09-10 11:41 - 2017-09-10 11:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\000\t\Paths\000003.log 2017-09-10 11:41 - 2017-09-10 11:41 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\000\t\Paths\CURRENT 2017-09-10 11:41 - 2017-09-10 11:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\000\t\Paths\LOCK 2017-09-10 11:41 - 2017-09-10 11:42 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\000\t\Paths\LOG 2017-09-10 11:41 - 2017-09-10 11:41 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\000\t\Paths\MANIFEST-000001 2017-09-10 11:43 - 2017-09-10 11:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\001 2017-09-10 11:43 - 2017-09-10 12:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\001\t 2017-09-10 12:06 - 2017-09-10 12:06 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\001\t\.usage 2017-09-10 12:06 - 2017-09-10 12:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\001\t\Paths 2017-09-10 12:06 - 2017-09-10 12:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\001\t\Paths\000003.log 2017-09-10 12:06 - 2017-09-10 12:06 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\001\t\Paths\CURRENT 2017-09-10 12:06 - 2017-09-10 12:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\001\t\Paths\LOCK 2017-09-10 12:06 - 2017-09-10 12:06 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\001\t\Paths\LOG 2017-09-10 12:06 - 2017-09-10 12:06 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\001\t\Paths\MANIFEST-000001 2017-09-10 12:13 - 2017-09-10 12:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\002 2017-09-10 12:13 - 2017-09-10 14:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\002\t 2017-09-10 14:16 - 2017-09-10 14:16 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\002\t\.usage 2017-09-10 14:16 - 2017-09-10 14:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\002\t\Paths 2017-09-10 14:16 - 2017-09-10 14:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\002\t\Paths\000003.log 2017-09-10 14:16 - 2017-09-10 14:16 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\002\t\Paths\CURRENT 2017-09-10 14:16 - 2017-09-10 14:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\002\t\Paths\LOCK 2017-09-10 14:16 - 2017-09-10 14:16 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\002\t\Paths\LOG 2017-09-10 14:16 - 2017-09-10 14:16 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\002\t\Paths\MANIFEST-000001 2017-09-10 14:23 - 2017-09-10 14:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\003 2017-09-10 14:23 - 2017-09-10 14:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\003\t 2017-09-10 11:38 - 2017-09-10 14:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\Origins 2017-09-10 11:38 - 2017-09-10 14:24 - 000000309 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\Origins\000003.log 2017-09-10 11:38 - 2017-09-10 11:38 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\Origins\CURRENT 2017-09-10 11:38 - 2017-09-10 11:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\Origins\LOCK 2017-09-10 11:38 - 2017-09-10 14:24 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\Origins\LOG 2017-09-10 11:38 - 2017-09-10 14:23 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\Origins\LOG.old 2017-09-10 11:38 - 2017-09-10 11:38 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\File System\Origins\MANIFEST-000001 2017-09-10 11:41 - 2017-09-10 14:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\IndexedDB 2017-09-10 11:41 - 2017-09-10 11:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\IndexedDB\http_af.reuters.com_0.indexeddb.leveldb 2017-09-10 11:41 - 2017-09-10 11:41 - 000000178 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\IndexedDB\http_af.reuters.com_0.indexeddb.leveldb\000003.log 2017-09-10 11:41 - 2017-09-10 11:41 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\IndexedDB\http_af.reuters.com_0.indexeddb.leveldb\CURRENT 2017-09-10 11:41 - 2017-09-10 11:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\IndexedDB\http_af.reuters.com_0.indexeddb.leveldb\LOCK 2017-09-10 11:41 - 2017-09-10 11:42 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\IndexedDB\http_af.reuters.com_0.indexeddb.leveldb\LOG 2017-09-10 11:41 - 2017-09-10 11:41 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\IndexedDB\http_af.reuters.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 14:16 - 2017-09-10 14:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\IndexedDB\http_tpc.googlesyndication.com_0.indexeddb.leveldb 2017-09-10 14:16 - 2017-09-10 14:16 - 000000200 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\IndexedDB\http_tpc.googlesyndication.com_0.indexeddb.leveldb\000003.log 2017-09-10 14:16 - 2017-09-10 14:16 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\IndexedDB\http_tpc.googlesyndication.com_0.indexeddb.leveldb\CURRENT 2017-09-10 14:16 - 2017-09-10 14:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\IndexedDB\http_tpc.googlesyndication.com_0.indexeddb.leveldb\LOCK 2017-09-10 14:16 - 2017-09-10 14:16 - 000000169 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\IndexedDB\http_tpc.googlesyndication.com_0.indexeddb.leveldb\LOG 2017-09-10 14:16 - 2017-09-10 14:16 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\IndexedDB\http_tpc.googlesyndication.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 12:06 - 2017-09-10 12:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\IndexedDB\https_bbybrandie.com_0.indexeddb.leveldb 2017-09-10 12:06 - 2017-09-10 12:06 - 000000714 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\IndexedDB\https_bbybrandie.com_0.indexeddb.leveldb\000003.log 2017-09-10 12:06 - 2017-09-10 12:06 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\IndexedDB\https_bbybrandie.com_0.indexeddb.leveldb\CURRENT 2017-09-10 12:06 - 2017-09-10 12:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\IndexedDB\https_bbybrandie.com_0.indexeddb.leveldb\LOCK 2017-09-10 12:06 - 2017-09-10 12:06 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\IndexedDB\https_bbybrandie.com_0.indexeddb.leveldb\LOG 2017-09-10 12:06 - 2017-09-10 12:06 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\IndexedDB\https_bbybrandie.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 11:35 - 2017-09-10 14:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage 2017-09-10 14:22 - 2017-09-10 14:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_allrecipes.com_0.localstorage 2017-09-10 14:22 - 2017-09-10 14:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-10 11:43 - 2017-09-10 11:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-10 11:43 - 2017-09-10 11:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-10 12:11 - 2017-09-10 12:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 12:11 - 2017-09-10 12:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 12:06 - 2017-09-10 12:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 12:06 - 2017-09-10 12:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 12:08 - 2017-09-10 12:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_connexity.net_0.localstorage 2017-09-10 12:08 - 2017-09-10 12:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 12:12 - 2017-09-10 12:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_mashable.com_0.localstorage 2017-09-10 12:12 - 2017-09-10 12:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_mashable.com_0.localstorage-journal 2017-09-10 12:11 - 2017-09-10 12:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-10 12:11 - 2017-09-10 12:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-10 14:21 - 2017-09-10 14:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_thetop.tv_0.localstorage 2017-09-10 14:21 - 2017-09-10 14:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_thetop.tv_0.localstorage-journal 2017-09-10 14:16 - 2017-09-10 14:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_video-static.tunnl.com_0.localstorage 2017-09-10 14:16 - 2017-09-10 14:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_video-static.tunnl.com_0.localstorage-journal 2017-09-10 12:06 - 2017-09-10 12:07 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_wwmt.com_0.localstorage 2017-09-10 12:06 - 2017-09-10 12:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_wwmt.com_0.localstorage-journal 2017-09-10 11:41 - 2017-09-10 11:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.6play.fr_0.localstorage 2017-09-10 11:41 - 2017-09-10 11:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.6play.fr_0.localstorage-journal 2017-09-10 14:21 - 2017-09-10 14:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-10 14:21 - 2017-09-10 14:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-10 11:41 - 2017-09-10 11:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-10 11:41 - 2017-09-10 11:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-10 11:38 - 2017-09-10 12:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 11:38 - 2017-09-10 12:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 11:39 - 2017-09-10 11:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.crash.net_0.localstorage 2017-09-10 11:39 - 2017-09-10 11:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-10 14:20 - 2017-09-10 14:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-10 14:20 - 2017-09-10 14:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-10 12:10 - 2017-09-10 12:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-10 12:10 - 2017-09-10 12:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-10 11:37 - 2017-09-10 11:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 11:37 - 2017-09-10 11:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 12:12 - 2017-09-10 12:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.investors.com_0.localstorage 2017-09-10 12:12 - 2017-09-10 12:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.investors.com_0.localstorage-journal 2017-09-10 12:10 - 2017-09-10 12:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.latimes.com_0.localstorage 2017-09-10 12:10 - 2017-09-10 12:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-10 11:36 - 2017-09-10 11:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.livescore.com_0.localstorage 2017-09-10 11:36 - 2017-09-10 11:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.livescore.com_0.localstorage-journal 2017-09-10 12:10 - 2017-09-10 12:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-10 12:10 - 2017-09-10 12:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-10 11:38 - 2017-09-10 14:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 11:38 - 2017-09-10 14:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 11:39 - 2017-09-10 11:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.parents.com_0.localstorage 2017-09-10 11:39 - 2017-09-10 11:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-10 14:19 - 2017-09-10 14:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-10 14:19 - 2017-09-10 14:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-10 11:36 - 2017-09-10 11:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.tallmenshoes.com_0.localstorage 2017-09-10 11:36 - 2017-09-10 11:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.tallmenshoes.com_0.localstorage-journal 2017-09-10 14:16 - 2017-09-10 14:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.wordgames.com_0.localstorage 2017-09-10 14:16 - 2017-09-10 14:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\http_www.wordgames.com_0.localstorage-journal 2017-09-10 12:06 - 2017-09-10 12:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\https_bbybrandie.com_0.localstorage 2017-09-10 12:06 - 2017-09-10 12:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\https_bbybrandie.com_0.localstorage-journal 2017-09-10 11:42 - 2017-09-10 11:42 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 11:42 - 2017-09-10 11:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 12:08 - 2017-09-10 12:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\https_connexity.net_0.localstorage 2017-09-10 12:08 - 2017-09-10 12:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 14:16 - 2017-09-10 14:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\https_monkey.tunnl.com_0.localstorage 2017-09-10 14:16 - 2017-09-10 14:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Local Storage\https_monkey.tunnl.com_0.localstorage-journal 2017-09-10 11:35 - 2017-09-10 11:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data 2017-09-10 11:35 - 2017-09-10 14:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash 2017-09-10 11:35 - 2017-09-10 11:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 11:35 - 2017-09-10 11:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 11:35 - 2017-09-10 11:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\WKRHPJRS 2017-09-10 11:35 - 2017-09-10 11:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 11:35 - 2017-09-10 11:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 11:35 - 2017-09-10 11:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52 2017-09-10 11:36 - 2017-09-10 14:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52\cdn.stickyadstv.com 2017-09-10 11:35 - 2017-09-10 14:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52\eereader.com 2017-09-10 14:22 - 2017-09-10 14:22 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52\eereader.com\analytics.sol 2017-09-10 11:37 - 2017-09-10 14:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52\efreader.com 2017-09-10 11:45 - 2017-09-10 14:26 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52\efreader.com\analytics.sol 2017-09-10 11:36 - 2017-09-10 14:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52\egreader.com 2017-09-10 11:39 - 2017-09-10 11:39 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52\egreader.com\analytics.sol 2017-09-10 11:35 - 2017-09-10 11:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52\macromedia.com 2017-09-10 11:35 - 2017-09-10 11:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52\macromedia.com\support 2017-09-10 11:35 - 2017-09-10 11:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52\macromedia.com\support\flashplayer 2017-09-10 11:35 - 2017-09-10 11:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52\macromedia.com\support\flashplayer\sys 2017-09-10 11:35 - 2017-09-10 11:37 - 000000464 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 11:36 - 2017-09-10 11:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 11:36 - 2017-09-10 11:36 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 11:35 - 2017-09-10 11:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 11:35 - 2017-09-10 11:35 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 11:37 - 2017-09-10 11:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 11:37 - 2017-09-10 11:37 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 11:36 - 2017-09-10 11:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 11:36 - 2017-09-10 11:36 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data631\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\2KM49E52\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 15:28 - 2017-09-11 21:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632 2017-09-10 15:29 - 2017-09-11 17:13 - 000333824 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Cookies 2017-09-10 15:29 - 2017-09-11 17:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Cookies-journal 2017-09-10 16:49 - 2017-09-10 16:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\databases 2017-09-10 16:49 - 2017-09-10 16:49 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\databases\Databases.db 2017-09-10 16:49 - 2017-09-10 16:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\databases\Databases.db-journal 2017-09-10 16:49 - 2017-09-10 16:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\databases\http_www.medtargetsystem.com_0 2017-09-10 16:49 - 2017-09-10 16:49 - 000016384 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\databases\http_www.medtargetsystem.com_0\1 2017-09-10 15:29 - 2017-09-11 17:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\File System 2017-09-10 15:29 - 2017-09-11 17:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\File System\Origins 2017-09-10 15:29 - 2017-09-11 10:57 - 000000380 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\File System\Origins\000003.log 2017-09-11 17:05 - 2017-09-11 17:05 - 000000287 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\File System\Origins\000004.ldb 2017-09-11 17:05 - 2017-09-11 17:05 - 000000287 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\File System\Origins\000005.ldb 2017-09-11 17:05 - 2017-09-11 17:05 - 000000287 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\File System\Origins\000006.ldb 2017-09-11 17:05 - 2017-09-11 17:05 - 000000287 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\File System\Origins\000007.ldb 2017-09-10 15:29 - 2017-09-10 15:29 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\File System\Origins\CURRENT 2017-09-10 15:29 - 2017-09-10 15:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\File System\Origins\LOCK 2017-09-10 15:29 - 2017-09-11 17:05 - 000000852 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\File System\Origins\LOG 2017-09-10 15:29 - 2017-09-11 11:01 - 000000393 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\File System\Origins\LOG.old 2017-09-10 15:29 - 2017-09-10 15:29 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\File System\Origins\MANIFEST-000001 2017-09-10 16:49 - 2017-09-10 16:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\File System\Origins\lost 2017-09-10 16:54 - 2017-09-11 10:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB 2017-09-10 16:54 - 2017-09-10 16:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_iad-usadmm.dotomi.com_0.indexeddb.leveldb 2017-09-10 16:54 - 2017-09-10 16:54 - 000000192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_iad-usadmm.dotomi.com_0.indexeddb.leveldb\000003.log 2017-09-10 16:54 - 2017-09-10 16:54 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_iad-usadmm.dotomi.com_0.indexeddb.leveldb\CURRENT 2017-09-10 16:54 - 2017-09-10 16:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_iad-usadmm.dotomi.com_0.indexeddb.leveldb\LOCK 2017-09-10 16:54 - 2017-09-10 16:54 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_iad-usadmm.dotomi.com_0.indexeddb.leveldb\LOG 2017-09-10 16:54 - 2017-09-10 16:54 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_iad-usadmm.dotomi.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 10:57 - 2017-09-11 10:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_www.complex.com_0.indexeddb.leveldb 2017-09-11 10:57 - 2017-09-11 10:57 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_www.complex.com_0.indexeddb.leveldb\000003.log 2017-09-11 10:57 - 2017-09-11 10:57 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_www.complex.com_0.indexeddb.leveldb\CURRENT 2017-09-11 10:57 - 2017-09-11 10:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_www.complex.com_0.indexeddb.leveldb\LOCK 2017-09-11 10:57 - 2017-09-11 10:57 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_www.complex.com_0.indexeddb.leveldb\LOG 2017-09-11 10:57 - 2017-09-11 10:57 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_www.complex.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 08:05 - 2017-09-11 08:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_www.food.com_0.indexeddb.leveldb 2017-09-11 08:05 - 2017-09-11 08:05 - 000000174 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_www.food.com_0.indexeddb.leveldb\000003.log 2017-09-11 08:05 - 2017-09-11 08:05 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_www.food.com_0.indexeddb.leveldb\CURRENT 2017-09-11 08:05 - 2017-09-11 08:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_www.food.com_0.indexeddb.leveldb\LOCK 2017-09-11 08:05 - 2017-09-11 08:06 - 000000352 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_www.food.com_0.indexeddb.leveldb\LOG 2017-09-11 08:05 - 2017-09-11 08:05 - 000000155 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_www.food.com_0.indexeddb.leveldb\LOG.old 2017-09-11 08:05 - 2017-09-11 08:05 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_www.food.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 10:54 - 2017-09-11 10:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb 2017-09-11 10:54 - 2017-09-11 10:54 - 000000172 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\000003.log 2017-09-11 10:54 - 2017-09-11 10:54 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\CURRENT 2017-09-11 10:54 - 2017-09-11 10:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOCK 2017-09-11 10:54 - 2017-09-11 10:54 - 000000155 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOG 2017-09-11 10:54 - 2017-09-11 10:54 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 15:29 - 2017-09-11 17:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage 2017-09-11 08:05 - 2017-09-11 08:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_ad.afy11.net_0.localstorage 2017-09-11 08:05 - 2017-09-11 08:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_ad.afy11.net_0.localstorage-journal 2017-09-11 17:10 - 2017-09-11 17:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_allrecipes.com_0.localstorage 2017-09-11 17:10 - 2017-09-11 17:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-10 16:51 - 2017-09-10 16:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 16:51 - 2017-09-10 16:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 16:50 - 2017-09-10 16:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 16:50 - 2017-09-10 16:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 15:35 - 2017-09-10 15:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_connexity.net_0.localstorage 2017-09-10 15:35 - 2017-09-10 15:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 10:54 - 2017-09-11 10:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_nflfilms.nfl.com_0.localstorage 2017-09-11 10:54 - 2017-09-11 10:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_nflfilms.nfl.com_0.localstorage-journal 2017-09-10 15:29 - 2017-09-10 15:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 15:29 - 2017-09-10 15:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 15:29 - 2017-09-10 15:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 15:29 - 2017-09-10 15:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 08:05 - 2017-09-11 08:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-11 08:05 - 2017-09-11 08:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-10 16:54 - 2017-09-10 16:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.blabbermouth.net_0.localstorage 2017-09-10 16:54 - 2017-09-10 16:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.blabbermouth.net_0.localstorage-journal 2017-09-10 15:29 - 2017-09-10 15:30 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.cbs.com_0.localstorage 2017-09-10 15:29 - 2017-09-10 15:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.cbs.com_0.localstorage-journal 2017-09-10 16:52 - 2017-09-10 16:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 16:52 - 2017-09-10 16:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 08:06 - 2017-09-11 08:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.complex.com_0.localstorage 2017-09-11 08:06 - 2017-09-11 08:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-11 08:02 - 2017-09-11 08:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.dhr.com_0.localstorage 2017-09-11 08:02 - 2017-09-11 08:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.dhr.com_0.localstorage-journal 2017-09-10 16:53 - 2017-09-10 16:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-10 16:53 - 2017-09-10 16:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-11 08:05 - 2017-09-11 08:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.food.com_0.localstorage 2017-09-11 08:05 - 2017-09-11 08:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-11 10:56 - 2017-09-11 10:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-11 10:56 - 2017-09-11 10:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-10 16:49 - 2017-09-10 16:51 - 000008192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.healthline.com_0.localstorage 2017-09-10 16:49 - 2017-09-10 16:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.healthline.com_0.localstorage-journal 2017-09-10 16:53 - 2017-09-10 16:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-10 16:53 - 2017-09-10 16:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-10 16:52 - 2017-09-10 16:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 16:52 - 2017-09-10 16:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 10:56 - 2017-09-11 10:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-11 10:56 - 2017-09-11 10:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-10 16:52 - 2017-09-10 16:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-10 16:52 - 2017-09-10 16:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-10 16:55 - 2017-09-11 10:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 16:55 - 2017-09-11 10:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 10:56 - 2017-09-11 10:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.parents.com_0.localstorage 2017-09-11 10:56 - 2017-09-11 10:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-10 16:50 - 2017-09-10 16:51 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.pimsleur.com_0.localstorage 2017-09-10 16:50 - 2017-09-10 16:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.pimsleur.com_0.localstorage-journal 2017-09-10 16:55 - 2017-09-10 16:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.reuters.com_0.localstorage 2017-09-10 16:55 - 2017-09-10 16:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-11 17:04 - 2017-09-11 17:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.southernliving.com_0.localstorage 2017-09-11 17:04 - 2017-09-11 17:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.southernliving.com_0.localstorage-journal 2017-09-11 10:58 - 2017-09-11 10:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.torontosun.com_0.localstorage 2017-09-11 10:58 - 2017-09-11 10:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.torontosun.com_0.localstorage-journal 2017-09-11 10:53 - 2017-09-11 10:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.wowhead.com_0.localstorage 2017-09-11 10:53 - 2017-09-11 10:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.wowhead.com_0.localstorage-journal 2017-09-11 17:05 - 2017-09-11 17:06 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.zappos.com_0.localstorage 2017-09-11 17:05 - 2017-09-11 17:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\http_www.zappos.com_0.localstorage-journal 2017-09-11 08:03 - 2017-09-11 08:03 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 08:03 - 2017-09-11 08:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 15:35 - 2017-09-10 15:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\https_connexity.net_0.localstorage 2017-09-10 15:35 - 2017-09-10 15:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 16:50 - 2017-09-11 08:02 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 16:50 - 2017-09-11 08:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 08:01 - 2017-09-11 08:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\https_disqus.com_0.localstorage 2017-09-11 08:01 - 2017-09-11 08:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\https_disqus.com_0.localstorage-journal 2017-09-11 08:01 - 2017-09-11 08:02 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 08:01 - 2017-09-11 08:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 15:29 - 2017-09-11 17:06 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 15:29 - 2017-09-11 17:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 08:01 - 2017-09-11 08:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\https_www.qzzr.com_0.localstorage 2017-09-11 08:01 - 2017-09-11 08:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\https_www.qzzr.com_0.localstorage-journal 2017-09-11 08:01 - 2017-09-11 08:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\https_www.thisisanfield.com_0.localstorage 2017-09-11 08:01 - 2017-09-11 08:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\https_www.thisisanfield.com_0.localstorage-journal 2017-09-11 10:53 - 2017-09-11 10:54 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\https_www.vayama.com_0.localstorage 2017-09-11 10:53 - 2017-09-11 10:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\https_www.vayama.com_0.localstorage-journal 2017-09-11 17:05 - 2017-09-11 17:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\https_www.zappos.com_0.localstorage 2017-09-11 17:05 - 2017-09-11 17:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Local Storage\https_www.zappos.com_0.localstorage-journal 2017-09-10 15:29 - 2017-09-10 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data 2017-09-10 15:29 - 2017-09-11 17:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash 2017-09-11 17:04 - 2017-09-11 17:04 - 000003794 ____T () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\25BA.tmp 2017-09-11 17:05 - 2017-09-11 17:05 - 000004096 ____T () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\75D0.tmp 2017-09-11 17:05 - 2017-09-11 17:05 - 000004096 ____T () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\75D1.tmp 2017-09-11 17:05 - 2017-09-11 17:05 - 000004096 ____T () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\8032.tmp 2017-09-10 15:29 - 2017-09-10 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 15:29 - 2017-09-10 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 15:29 - 2017-09-10 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\QMARYC54 2017-09-10 15:29 - 2017-09-10 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 15:29 - 2017-09-10 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 15:29 - 2017-09-11 10:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG 2017-09-10 16:55 - 2017-09-10 16:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\cdn.dashbid.io 2017-09-10 16:55 - 2017-09-10 16:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\cdn.dashbid.io\prod 2017-09-10 16:55 - 2017-09-10 16:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-10 16:55 - 2017-09-10 16:55 - 000000069 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-10 15:29 - 2017-09-11 17:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\cdn.stickyadstv.com 2017-09-10 15:29 - 2017-09-10 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\cdncache-a.akamaihd.net 2017-09-10 15:29 - 2017-09-10 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\cdncache-a.akamaihd.net\items 2017-09-10 15:29 - 2017-09-10 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 15:29 - 2017-09-11 17:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 15:29 - 2017-09-11 17:05 - 000000622 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 15:29 - 2017-09-11 17:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\eereader.com 2017-09-10 16:51 - 2017-09-11 11:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\efreader.com 2017-09-11 08:08 - 2017-09-11 11:02 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\efreader.com\analytics.sol 2017-09-10 15:29 - 2017-09-11 17:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\egreader.com 2017-09-11 10:57 - 2017-09-11 10:57 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\egreader.com\analytics.sol 2017-09-11 10:58 - 2017-09-11 10:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\inread.anyclip.com 2017-09-11 10:58 - 2017-09-11 10:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\inread.anyclip.com\ac# 2017-09-11 10:58 - 2017-09-11 10:58 - 000000441 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-10 15:29 - 2017-09-10 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com 2017-09-10 15:29 - 2017-09-10 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com\support 2017-09-10 15:29 - 2017-09-10 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com\support\flashplayer 2017-09-10 15:29 - 2017-09-11 10:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com\support\flashplayer\sys 2017-09-10 15:29 - 2017-09-11 10:58 - 000000558 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 16:55 - 2017-09-10 16:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-10 16:55 - 2017-09-10 16:55 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-10 15:29 - 2017-09-10 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 15:29 - 2017-09-10 15:29 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 15:29 - 2017-09-10 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 15:29 - 2017-09-10 15:29 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 15:29 - 2017-09-10 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 15:29 - 2017-09-10 15:29 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 16:51 - 2017-09-10 16:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 16:51 - 2017-09-10 16:51 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 15:29 - 2017-09-10 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 15:29 - 2017-09-10 15:29 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 10:58 - 2017-09-11 10:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 10:58 - 2017-09-11 10:58 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-10 16:51 - 2017-09-10 16:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com\support\flashplayer\sys\#www.medtargetsystem.com 2017-09-10 16:51 - 2017-09-10 16:51 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\macromedia.com\support\flashplayer\sys\#www.medtargetsystem.com\settings.sol 2017-09-10 16:51 - 2017-09-10 16:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EY87HZKG\www.medtargetsystem.com 2017-09-11 10:53 - 2017-09-11 10:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data632\Service Worker 2017-09-11 01:45 - 2017-09-11 03:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634 2017-09-11 01:45 - 2017-09-11 01:53 - 000195584 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Cookies 2017-09-11 01:45 - 2017-09-11 01:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Cookies-journal 2017-09-11 01:51 - 2017-09-11 01:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\databases 2017-09-11 01:51 - 2017-09-11 01:51 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\databases\Databases.db 2017-09-11 01:51 - 2017-09-11 01:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\databases\Databases.db-journal 2017-09-11 01:47 - 2017-09-11 01:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System 2017-09-11 01:47 - 2017-09-11 01:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\000 2017-09-11 01:47 - 2017-09-11 01:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\000\t 2017-09-11 01:51 - 2017-09-11 01:51 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\000\t\.usage 2017-09-11 01:51 - 2017-09-11 01:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\000\t\Paths 2017-09-11 01:51 - 2017-09-11 01:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\000\t\Paths\000003.log 2017-09-11 01:51 - 2017-09-11 01:51 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\000\t\Paths\CURRENT 2017-09-11 01:51 - 2017-09-11 01:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\000\t\Paths\LOCK 2017-09-11 01:51 - 2017-09-11 01:51 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\000\t\Paths\LOG 2017-09-11 01:51 - 2017-09-11 01:51 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\000\t\Paths\MANIFEST-000001 2017-09-11 01:49 - 2017-09-11 01:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\001 2017-09-11 01:49 - 2017-09-11 01:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\001\t 2017-09-11 01:51 - 2017-09-11 01:51 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\001\t\.usage 2017-09-11 01:51 - 2017-09-11 01:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\001\t\Paths 2017-09-11 01:51 - 2017-09-11 01:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\001\t\Paths\000003.log 2017-09-11 01:51 - 2017-09-11 01:51 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\001\t\Paths\CURRENT 2017-09-11 01:51 - 2017-09-11 01:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\001\t\Paths\LOCK 2017-09-11 01:51 - 2017-09-11 01:51 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\001\t\Paths\LOG 2017-09-11 01:51 - 2017-09-11 01:51 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\001\t\Paths\MANIFEST-000001 2017-09-11 01:47 - 2017-09-11 01:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\Origins 2017-09-11 01:47 - 2017-09-11 01:50 - 000000171 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\Origins\000003.log 2017-09-11 01:47 - 2017-09-11 01:47 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\Origins\CURRENT 2017-09-11 01:47 - 2017-09-11 01:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\Origins\LOCK 2017-09-11 01:47 - 2017-09-11 01:51 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\Origins\LOG 2017-09-11 01:47 - 2017-09-11 01:50 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\Origins\LOG.old 2017-09-11 01:47 - 2017-09-11 01:47 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\File System\Origins\MANIFEST-000001 2017-09-11 01:51 - 2017-09-11 01:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\IndexedDB 2017-09-11 01:51 - 2017-09-11 01:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb 2017-09-11 01:51 - 2017-09-11 01:51 - 000000178 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\000003.log 2017-09-11 01:51 - 2017-09-11 01:51 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\CURRENT 2017-09-11 01:51 - 2017-09-11 01:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\LOCK 2017-09-11 01:51 - 2017-09-11 01:51 - 000000157 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\LOG 2017-09-11 01:51 - 2017-09-11 01:51 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 01:45 - 2017-09-11 01:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage 2017-09-11 01:47 - 2017-09-11 01:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 01:47 - 2017-09-11 01:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 01:47 - 2017-09-11 01:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 01:47 - 2017-09-11 01:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-11 01:45 - 2017-09-11 01:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 01:45 - 2017-09-11 01:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 01:50 - 2017-09-11 01:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\http_www.amc.com_0.localstorage 2017-09-11 01:50 - 2017-09-11 01:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\http_www.amc.com_0.localstorage-journal 2017-09-11 01:50 - 2017-09-11 01:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\http_www.blessyouboys.com_0.localstorage 2017-09-11 01:50 - 2017-09-11 01:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\http_www.blessyouboys.com_0.localstorage-journal 2017-09-11 01:48 - 2017-09-11 01:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 01:48 - 2017-09-11 01:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 01:45 - 2017-09-11 01:47 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\http_www.express.co.uk_0.localstorage 2017-09-11 01:45 - 2017-09-11 01:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\http_www.express.co.uk_0.localstorage-journal 2017-09-11 01:49 - 2017-09-11 01:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\http_www.finecooking.com_0.localstorage 2017-09-11 01:49 - 2017-09-11 01:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\http_www.finecooking.com_0.localstorage-journal 2017-09-11 01:49 - 2017-09-11 01:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-11 01:49 - 2017-09-11 01:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-11 01:47 - 2017-09-11 01:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 01:47 - 2017-09-11 01:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 01:47 - 2017-09-11 01:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-11 01:47 - 2017-09-11 01:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-11 01:46 - 2017-09-11 01:47 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 01:46 - 2017-09-11 01:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 01:46 - 2017-09-11 01:46 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 01:46 - 2017-09-11 01:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 01:45 - 2017-09-11 01:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\https_widgets.outbrain.com_0.localstorage 2017-09-11 01:45 - 2017-09-11 01:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\https_widgets.outbrain.com_0.localstorage-journal 2017-09-11 01:46 - 2017-09-11 01:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\https_www.hollywoodmegastore.com_0.localstorage 2017-09-11 01:46 - 2017-09-11 01:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Local Storage\https_www.hollywoodmegastore.com_0.localstorage-journal 2017-09-11 01:45 - 2017-09-11 01:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data 2017-09-11 01:45 - 2017-09-11 01:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash 2017-09-11 01:45 - 2017-09-11 01:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 01:45 - 2017-09-11 01:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 01:45 - 2017-09-11 01:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\BSKUCBM9 2017-09-11 01:45 - 2017-09-11 01:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 01:45 - 2017-09-11 01:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 01:45 - 2017-09-11 01:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33 2017-09-11 01:46 - 2017-09-11 01:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\cdn.stickyadstv.com 2017-09-11 01:45 - 2017-09-11 01:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\cdncache-a.akamaihd.net 2017-09-11 01:45 - 2017-09-11 01:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\cdncache-a.akamaihd.net\items 2017-09-11 01:45 - 2017-09-11 01:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 01:45 - 2017-09-11 01:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 01:45 - 2017-09-11 01:51 - 000000476 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 01:45 - 2017-09-11 01:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\eereader.com 2017-09-11 01:47 - 2017-09-11 01:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\efreader.com 2017-09-11 01:46 - 2017-09-11 01:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\egreader.com 2017-09-11 01:48 - 2017-09-11 01:50 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\egreader.com\analytics.sol 2017-09-11 01:45 - 2017-09-11 01:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\macromedia.com 2017-09-11 01:45 - 2017-09-11 01:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\macromedia.com\support 2017-09-11 01:45 - 2017-09-11 01:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\macromedia.com\support\flashplayer 2017-09-11 01:45 - 2017-09-11 01:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\macromedia.com\support\flashplayer\sys 2017-09-11 01:45 - 2017-09-11 01:47 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 01:46 - 2017-09-11 01:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 01:46 - 2017-09-11 01:46 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 01:45 - 2017-09-11 01:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 01:45 - 2017-09-11 01:45 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 01:45 - 2017-09-11 01:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 01:45 - 2017-09-11 01:45 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 01:47 - 2017-09-11 01:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 01:47 - 2017-09-11 01:47 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 01:46 - 2017-09-11 01:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 01:46 - 2017-09-11 01:46 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data634\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\7NTDDL33\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 00:14 - 2017-09-12 07:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635 2017-09-10 00:14 - 2017-09-12 06:50 - 000281600 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Cookies 2017-09-10 00:14 - 2017-09-12 06:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Cookies-journal 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\databases 2017-09-10 00:14 - 2017-09-10 00:14 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\databases\Databases.db 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\databases\Databases.db-journal 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\databases\https_www.gaiam.com_0 2017-09-10 00:14 - 2017-09-10 00:14 - 000020480 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\databases\https_www.gaiam.com_0\1 2017-09-10 00:14 - 2017-09-12 06:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System 2017-09-11 00:56 - 2017-09-11 00:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\002 2017-09-11 00:56 - 2017-09-11 00:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\002\t 2017-09-11 00:59 - 2017-09-11 00:59 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\002\t\.usage 2017-09-11 00:59 - 2017-09-11 00:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\002\t\Paths 2017-09-11 00:59 - 2017-09-11 00:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\002\t\Paths\000003.log 2017-09-11 00:59 - 2017-09-11 00:59 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\002\t\Paths\CURRENT 2017-09-11 00:59 - 2017-09-11 00:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\002\t\Paths\LOCK 2017-09-11 00:59 - 2017-09-11 00:59 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\002\t\Paths\LOG 2017-09-11 00:59 - 2017-09-11 00:59 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\002\t\Paths\MANIFEST-000001 2017-09-10 00:22 - 2017-09-10 00:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\003 2017-09-10 00:22 - 2017-09-11 00:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\003\t 2017-09-11 00:54 - 2017-09-11 00:54 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\003\t\.usage 2017-09-11 00:54 - 2017-09-11 00:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\003\t\Paths 2017-09-11 00:54 - 2017-09-11 00:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\003\t\Paths\000003.log 2017-09-11 00:54 - 2017-09-11 00:54 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\003\t\Paths\CURRENT 2017-09-11 00:54 - 2017-09-11 00:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\003\t\Paths\LOCK 2017-09-11 00:54 - 2017-09-11 00:54 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\003\t\Paths\LOG 2017-09-11 00:54 - 2017-09-11 00:54 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\003\t\Paths\MANIFEST-000001 2017-09-12 06:46 - 2017-09-12 06:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\004 2017-09-12 06:46 - 2017-09-12 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\004\t 2017-09-12 06:47 - 2017-09-12 06:47 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\004\t\.usage 2017-09-12 06:47 - 2017-09-12 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\004\t\Paths 2017-09-12 06:47 - 2017-09-12 06:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\004\t\Paths\000003.log 2017-09-12 06:47 - 2017-09-12 06:47 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\004\t\Paths\CURRENT 2017-09-12 06:47 - 2017-09-12 06:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\004\t\Paths\LOCK 2017-09-12 06:47 - 2017-09-12 06:47 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\004\t\Paths\LOG 2017-09-12 06:47 - 2017-09-12 06:47 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\004\t\Paths\MANIFEST-000001 2017-09-10 00:14 - 2017-09-12 06:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\Origins 2017-09-10 00:14 - 2017-09-12 06:47 - 000000372 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\Origins\000003.log 2017-09-10 00:14 - 2017-09-10 00:14 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\Origins\CURRENT 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\Origins\LOCK 2017-09-10 00:14 - 2017-09-12 06:50 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\Origins\LOG 2017-09-10 00:14 - 2017-09-12 06:49 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\Origins\LOG.old 2017-09-10 00:14 - 2017-09-10 00:14 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\Origins\MANIFEST-000001 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\File System\Origins\lost 2017-09-11 00:54 - 2017-09-12 06:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB 2017-09-12 06:49 - 2017-09-12 06:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb 2017-09-12 06:49 - 2017-09-12 06:49 - 000000178 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\000003.log 2017-09-12 06:49 - 2017-09-12 06:49 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\CURRENT 2017-09-12 06:49 - 2017-09-12 06:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\LOCK 2017-09-12 06:49 - 2017-09-12 06:49 - 000000157 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\LOG 2017-09-12 06:49 - 2017-09-12 06:49 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 00:59 - 2017-09-11 00:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb 2017-09-11 00:59 - 2017-09-11 00:59 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\000003.log 2017-09-11 00:59 - 2017-09-11 00:59 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\CURRENT 2017-09-11 00:59 - 2017-09-11 00:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\LOCK 2017-09-11 00:59 - 2017-09-11 00:59 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\LOG 2017-09-11 00:59 - 2017-09-11 00:59 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 00:54 - 2017-09-11 00:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_be.godaddy.com_0.indexeddb.leveldb 2017-09-11 00:54 - 2017-09-11 00:54 - 000000382 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_be.godaddy.com_0.indexeddb.leveldb\000003.log 2017-09-11 00:54 - 2017-09-11 00:54 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_be.godaddy.com_0.indexeddb.leveldb\CURRENT 2017-09-11 00:54 - 2017-09-11 00:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_be.godaddy.com_0.indexeddb.leveldb\LOCK 2017-09-11 00:54 - 2017-09-11 00:55 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_be.godaddy.com_0.indexeddb.leveldb\LOG 2017-09-11 00:54 - 2017-09-11 00:54 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_be.godaddy.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 06:47 - 2017-09-12 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb 2017-09-12 06:47 - 2017-09-12 06:47 - 000000196 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\000003.log 2017-09-12 06:47 - 2017-09-12 06:47 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\CURRENT 2017-09-12 06:47 - 2017-09-12 06:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOCK 2017-09-12 06:47 - 2017-09-12 06:47 - 000000166 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOG 2017-09-12 06:47 - 2017-09-12 06:47 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 00:54 - 2017-09-11 00:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb 2017-09-11 00:54 - 2017-09-11 00:54 - 000002334 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\000003.log 2017-09-11 00:54 - 2017-09-11 00:54 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\CURRENT 2017-09-11 00:54 - 2017-09-11 00:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOCK 2017-09-11 00:54 - 2017-09-11 00:54 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOG 2017-09-11 00:54 - 2017-09-11 00:54 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 00:54 - 2017-09-11 00:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_www.godaddy.com_0.indexeddb.leveldb 2017-09-11 00:54 - 2017-09-11 00:54 - 000000384 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_www.godaddy.com_0.indexeddb.leveldb\000003.log 2017-09-11 00:54 - 2017-09-11 00:54 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_www.godaddy.com_0.indexeddb.leveldb\CURRENT 2017-09-11 00:54 - 2017-09-11 00:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_www.godaddy.com_0.indexeddb.leveldb\LOCK 2017-09-11 00:54 - 2017-09-11 00:54 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_www.godaddy.com_0.indexeddb.leveldb\LOG 2017-09-11 00:54 - 2017-09-11 00:54 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\IndexedDB\https_www.godaddy.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 00:14 - 2017-09-12 06:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage 2017-09-11 01:00 - 2017-09-12 06:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_allrecipes.com_0.localstorage 2017-09-11 01:00 - 2017-09-12 06:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-10 00:14 - 2017-09-10 00:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 00:17 - 2017-09-10 00:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_connexity.net_0.localstorage 2017-09-10 00:17 - 2017-09-10 00:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 00:16 - 2017-09-10 00:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_myfox8.com_0.localstorage 2017-09-10 00:16 - 2017-09-10 00:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_myfox8.com_0.localstorage-journal 2017-09-11 00:54 - 2017-09-11 00:55 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 00:54 - 2017-09-11 00:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 00:55 - 2017-09-11 00:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_video-static.tunnl.com_0.localstorage 2017-09-11 00:55 - 2017-09-11 00:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_video-static.tunnl.com_0.localstorage-journal 2017-09-11 00:59 - 2017-09-11 00:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-11 00:59 - 2017-09-11 00:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-12 06:42 - 2017-09-12 06:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.bitlanders.com_0.localstorage 2017-09-12 06:42 - 2017-09-12 06:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.bitlanders.com_0.localstorage-journal 2017-09-12 06:47 - 2017-09-12 06:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.blessyouboys.com_0.localstorage 2017-09-12 06:47 - 2017-09-12 06:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.blessyouboys.com_0.localstorage-journal 2017-09-11 00:56 - 2017-09-12 06:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 00:56 - 2017-09-12 06:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 00:18 - 2017-09-10 00:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.complex.com_0.localstorage 2017-09-10 00:18 - 2017-09-10 00:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-10 00:18 - 2017-09-10 00:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.crash.net_0.localstorage 2017-09-10 00:18 - 2017-09-10 00:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-10 00:19 - 2017-09-10 00:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.diariocordoba.com_0.localstorage 2017-09-10 00:19 - 2017-09-10 00:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.diariocordoba.com_0.localstorage-journal 2017-09-10 00:14 - 2017-09-10 00:16 - 000013312 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-10 00:14 - 2017-09-10 00:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-11 00:58 - 2017-09-12 06:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.food.com_0.localstorage 2017-09-11 00:58 - 2017-09-12 06:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-12 06:46 - 2017-09-12 06:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-12 06:46 - 2017-09-12 06:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 00:17 - 2017-09-10 00:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.islandpacket.com_0.localstorage 2017-09-10 00:17 - 2017-09-10 00:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.islandpacket.com_0.localstorage-journal 2017-09-11 00:57 - 2017-09-11 00:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.latimes.com_0.localstorage 2017-09-11 00:57 - 2017-09-11 00:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-12 06:48 - 2017-09-12 06:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.lifeandstylemag.com_0.localstorage 2017-09-12 06:48 - 2017-09-12 06:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.lifeandstylemag.com_0.localstorage-journal 2017-09-12 06:45 - 2017-09-12 06:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.macworld.com_0.localstorage 2017-09-12 06:45 - 2017-09-12 06:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-10 00:17 - 2017-09-10 00:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-10 00:17 - 2017-09-10 00:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-10 00:16 - 2017-09-12 06:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 00:16 - 2017-09-12 06:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 00:57 - 2017-09-11 00:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.reuters.com_0.localstorage 2017-09-11 00:57 - 2017-09-11 00:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-11 00:54 - 2017-09-11 00:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.wordgames.com_0.localstorage 2017-09-11 00:54 - 2017-09-11 00:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\http_www.wordgames.com_0.localstorage-journal 2017-09-11 00:54 - 2017-09-11 00:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_be.godaddy.com_0.localstorage 2017-09-11 00:54 - 2017-09-11 00:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_be.godaddy.com_0.localstorage-journal 2017-09-10 00:17 - 2017-09-10 00:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_connexity.net_0.localstorage 2017-09-10 00:17 - 2017-09-10 00:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 00:55 - 2017-09-11 00:55 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 00:55 - 2017-09-11 00:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 00:18 - 2017-09-10 00:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-10 00:18 - 2017-09-10 00:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-10 00:14 - 2017-09-10 00:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_edge.personalizer.io_0.localstorage 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_edge.personalizer.io_0.localstorage-journal 2017-09-11 00:54 - 2017-09-11 00:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_hades.srvtrck.com_0.localstorage 2017-09-11 00:54 - 2017-09-11 00:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_hades.srvtrck.com_0.localstorage-journal 2017-09-11 00:55 - 2017-09-11 00:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_monkey.tunnl.com_0.localstorage 2017-09-11 00:55 - 2017-09-11 00:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_monkey.tunnl.com_0.localstorage-journal 2017-09-10 00:14 - 2017-09-10 00:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_photos.pixlee.com_0.localstorage 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_photos.pixlee.com_0.localstorage-journal 2017-09-11 00:54 - 2017-09-11 00:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 00:54 - 2017-09-11 00:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 00:14 - 2017-09-10 00:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_sb.monetate.net_0.localstorage 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_sb.monetate.net_0.localstorage-journal 2017-09-11 00:54 - 2017-09-11 00:55 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 00:54 - 2017-09-11 00:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 00:14 - 2017-09-10 00:16 - 000052224 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_www.gaiam.com_0.localstorage 2017-09-10 00:14 - 2017-09-10 00:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_www.gaiam.com_0.localstorage-journal 2017-09-11 00:54 - 2017-09-11 00:56 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_www.godaddy.com_0.localstorage 2017-09-11 00:54 - 2017-09-11 00:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_www.godaddy.com_0.localstorage-journal 2017-09-12 06:43 - 2017-09-12 06:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_www.inspiredshades.com_0.localstorage 2017-09-12 06:43 - 2017-09-12 06:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_www.inspiredshades.com_0.localstorage-journal 2017-09-11 00:55 - 2017-09-11 00:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_www.youtube.com_0.localstorage 2017-09-11 00:55 - 2017-09-11 00:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data 2017-09-10 00:14 - 2017-09-12 06:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\XP4WZN8G 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 00:14 - 2017-09-12 06:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW 2017-09-11 00:56 - 2017-09-11 00:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\cdn.dashbid.io 2017-09-11 00:56 - 2017-09-11 00:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\cdn.dashbid.io\prod 2017-09-11 00:56 - 2017-09-11 00:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-11 00:56 - 2017-09-11 00:56 - 000000069 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-10 00:15 - 2017-09-12 06:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\cdn.stickyadstv.com 2017-09-11 00:54 - 2017-09-11 00:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\cdncache-a.akamaihd.net 2017-09-11 00:54 - 2017-09-11 00:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\cdncache-a.akamaihd.net\items 2017-09-11 00:54 - 2017-09-11 00:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 00:54 - 2017-09-11 00:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 00:54 - 2017-09-11 00:58 - 000000475 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 00:14 - 2017-09-12 06:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\eereader.com 2017-09-10 00:16 - 2017-09-12 06:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\efreader.com 2017-09-10 00:21 - 2017-09-12 06:52 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\efreader.com\analytics.sol 2017-09-10 00:14 - 2017-09-12 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\egreader.com 2017-09-10 00:21 - 2017-09-12 06:45 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\egreader.com\analytics.sol 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer 2017-09-10 00:14 - 2017-09-12 06:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer\sys 2017-09-10 00:14 - 2017-09-12 06:42 - 000000561 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 00:56 - 2017-09-11 00:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-11 00:56 - 2017-09-11 00:56 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-10 00:15 - 2017-09-10 00:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 00:15 - 2017-09-10 00:15 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 00:54 - 2017-09-11 00:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 00:54 - 2017-09-11 00:54 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 00:14 - 2017-09-10 00:14 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 00:16 - 2017-09-10 00:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 00:16 - 2017-09-10 00:16 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 00:14 - 2017-09-10 00:14 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer\sys\#mpsnare.iesnare.com 2017-09-10 00:14 - 2017-09-10 00:14 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer\sys\#mpsnare.iesnare.com\settings.sol 2017-09-11 00:56 - 2017-09-11 00:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com 2017-09-11 00:56 - 2017-09-11 00:56 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com\settings.sol 2017-09-12 06:42 - 2017-09-12 06:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer\sys\#static.bitlanders.com 2017-09-12 06:42 - 2017-09-12 06:42 - 000000091 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\macromedia.com\support\flashplayer\sys\#static.bitlanders.com\settings.sol 2017-09-10 00:14 - 2017-09-10 00:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\mpsnare.iesnare.com 2017-09-10 00:14 - 2017-09-10 00:14 - 000000079 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\mpsnare.iesnare.com\stm.sol 2017-09-11 00:56 - 2017-09-11 00:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\objects.tremormedia.com 2017-09-11 00:56 - 2017-09-11 00:56 - 000000072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\objects.tremormedia.com\com.quantserve.sol 2017-09-12 06:42 - 2017-09-12 06:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data635\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\KF78QJQW\static.bitlanders.com 2017-09-12 06:32 - 2017-09-12 07:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636 2017-09-12 06:32 - 2017-09-12 06:41 - 000243712 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Cookies 2017-09-12 06:32 - 2017-09-12 06:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Cookies-journal 2017-09-12 06:33 - 2017-09-12 06:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\databases 2017-09-12 06:33 - 2017-09-12 06:33 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\databases\Databases.db 2017-09-12 06:33 - 2017-09-12 06:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\databases\Databases.db-journal 2017-09-12 06:32 - 2017-09-12 06:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System 2017-09-12 06:32 - 2017-09-12 06:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\000 2017-09-12 06:32 - 2017-09-12 06:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\000\t 2017-09-12 06:33 - 2017-09-12 06:33 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\000\t\.usage 2017-09-12 06:33 - 2017-09-12 06:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\000\t\Paths 2017-09-12 06:33 - 2017-09-12 06:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\000\t\Paths\000003.log 2017-09-12 06:33 - 2017-09-12 06:33 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\000\t\Paths\CURRENT 2017-09-12 06:33 - 2017-09-12 06:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\000\t\Paths\LOCK 2017-09-12 06:33 - 2017-09-12 06:33 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\000\t\Paths\LOG 2017-09-12 06:33 - 2017-09-12 06:33 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\000\t\Paths\MANIFEST-000001 2017-09-12 06:35 - 2017-09-12 06:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\001 2017-09-12 06:35 - 2017-09-12 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\001\t 2017-09-12 06:36 - 2017-09-12 06:36 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\001\t\.usage 2017-09-12 06:36 - 2017-09-12 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\001\t\Paths 2017-09-12 06:36 - 2017-09-12 06:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\001\t\Paths\000003.log 2017-09-12 06:36 - 2017-09-12 06:36 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\001\t\Paths\CURRENT 2017-09-12 06:36 - 2017-09-12 06:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\001\t\Paths\LOCK 2017-09-12 06:36 - 2017-09-12 06:36 - 000000131 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\001\t\Paths\LOG 2017-09-12 06:36 - 2017-09-12 06:36 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\001\t\Paths\MANIFEST-000001 2017-09-12 06:32 - 2017-09-12 06:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\Origins 2017-09-12 06:32 - 2017-09-12 06:36 - 000000181 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\Origins\000003.log 2017-09-12 06:32 - 2017-09-12 06:32 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\Origins\CURRENT 2017-09-12 06:32 - 2017-09-12 06:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\Origins\LOCK 2017-09-12 06:32 - 2017-09-12 06:35 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\Origins\LOG 2017-09-12 06:32 - 2017-09-12 06:32 - 000000128 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\Origins\LOG.old 2017-09-12 06:32 - 2017-09-12 06:32 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\File System\Origins\MANIFEST-000001 2017-09-12 06:33 - 2017-09-12 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\IndexedDB 2017-09-12 06:36 - 2017-09-12 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\IndexedDB\http_www.macworld.com_0.indexeddb.leveldb 2017-09-12 06:36 - 2017-09-12 06:36 - 000000182 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\IndexedDB\http_www.macworld.com_0.indexeddb.leveldb\000003.log 2017-09-12 06:36 - 2017-09-12 06:36 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\IndexedDB\http_www.macworld.com_0.indexeddb.leveldb\CURRENT 2017-09-12 06:36 - 2017-09-12 06:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\IndexedDB\http_www.macworld.com_0.indexeddb.leveldb\LOCK 2017-09-12 06:36 - 2017-09-12 06:36 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\IndexedDB\http_www.macworld.com_0.indexeddb.leveldb\LOG 2017-09-12 06:36 - 2017-09-12 06:36 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\IndexedDB\http_www.macworld.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 06:33 - 2017-09-12 06:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\IndexedDB\http_www.yummytummyaarthi.com_0.indexeddb.leveldb 2017-09-12 06:33 - 2017-09-12 06:33 - 000000198 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\IndexedDB\http_www.yummytummyaarthi.com_0.indexeddb.leveldb\000003.log 2017-09-12 06:33 - 2017-09-12 06:33 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\IndexedDB\http_www.yummytummyaarthi.com_0.indexeddb.leveldb\CURRENT 2017-09-12 06:33 - 2017-09-12 06:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\IndexedDB\http_www.yummytummyaarthi.com_0.indexeddb.leveldb\LOCK 2017-09-12 06:33 - 2017-09-12 06:33 - 000000376 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\IndexedDB\http_www.yummytummyaarthi.com_0.indexeddb.leveldb\LOG 2017-09-12 06:33 - 2017-09-12 06:33 - 000000167 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\IndexedDB\http_www.yummytummyaarthi.com_0.indexeddb.leveldb\LOG.old 2017-09-12 06:33 - 2017-09-12 06:33 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\IndexedDB\http_www.yummytummyaarthi.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 06:32 - 2017-09-12 06:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage 2017-09-12 06:33 - 2017-09-12 06:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\http_connexity.net_0.localstorage 2017-09-12 06:33 - 2017-09-12 06:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-12 06:34 - 2017-09-12 06:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-12 06:34 - 2017-09-12 06:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-12 06:37 - 2017-09-12 06:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\http_www.crash.net_0.localstorage 2017-09-12 06:37 - 2017-09-12 06:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-12 06:38 - 2017-09-12 06:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-12 06:38 - 2017-09-12 06:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-12 06:35 - 2017-09-12 06:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\http_www.islandpacket.com_0.localstorage 2017-09-12 06:35 - 2017-09-12 06:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\http_www.islandpacket.com_0.localstorage-journal 2017-09-12 06:35 - 2017-09-12 06:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\http_www.macworld.com_0.localstorage 2017-09-12 06:35 - 2017-09-12 06:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-12 06:34 - 2017-09-12 06:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\http_www.nfl.com_0.localstorage 2017-09-12 06:34 - 2017-09-12 06:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-12 06:32 - 2017-09-12 06:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\http_www.stonewallkitchen.com_0.localstorage 2017-09-12 06:32 - 2017-09-12 06:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\http_www.stonewallkitchen.com_0.localstorage-journal 2017-09-12 06:32 - 2017-09-12 06:34 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\http_www.yummytummyaarthi.com_0.localstorage 2017-09-12 06:32 - 2017-09-12 06:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\http_www.yummytummyaarthi.com_0.localstorage-journal 2017-09-12 06:33 - 2017-09-12 06:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\https_connexity.net_0.localstorage 2017-09-12 06:33 - 2017-09-12 06:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-12 06:32 - 2017-09-12 06:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\https_www.youtube.com_0.localstorage 2017-09-12 06:32 - 2017-09-12 06:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-12 06:32 - 2017-09-12 06:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data 2017-09-12 06:32 - 2017-09-12 06:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash 2017-09-12 06:32 - 2017-09-12 06:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-12 06:32 - 2017-09-12 06:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-12 06:32 - 2017-09-12 06:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\SKD5UMF8 2017-09-12 06:32 - 2017-09-12 06:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot 2017-09-12 06:32 - 2017-09-12 06:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-12 06:32 - 2017-09-12 06:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\A3GHHPU7 2017-09-12 06:32 - 2017-09-12 06:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\A3GHHPU7\cdn.stickyadstv.com 2017-09-12 06:32 - 2017-09-12 06:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\A3GHHPU7\eereader.com 2017-09-12 06:34 - 2017-09-12 06:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\A3GHHPU7\efreader.com 2017-09-12 06:40 - 2017-09-12 06:40 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\A3GHHPU7\efreader.com\analytics.sol 2017-09-12 06:32 - 2017-09-12 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\A3GHHPU7\egreader.com 2017-09-12 06:32 - 2017-09-12 06:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\A3GHHPU7\macromedia.com 2017-09-12 06:32 - 2017-09-12 06:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\A3GHHPU7\macromedia.com\support 2017-09-12 06:32 - 2017-09-12 06:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\A3GHHPU7\macromedia.com\support\flashplayer 2017-09-12 06:32 - 2017-09-12 06:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\A3GHHPU7\macromedia.com\support\flashplayer\sys 2017-09-12 06:32 - 2017-09-12 06:34 - 000000464 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\A3GHHPU7\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-12 06:32 - 2017-09-12 06:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\A3GHHPU7\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-12 06:32 - 2017-09-12 06:32 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\A3GHHPU7\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-12 06:32 - 2017-09-12 06:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\A3GHHPU7\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-12 06:32 - 2017-09-12 06:32 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\A3GHHPU7\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-12 06:34 - 2017-09-12 06:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\A3GHHPU7\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-12 06:34 - 2017-09-12 06:34 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\A3GHHPU7\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-12 06:32 - 2017-09-12 06:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\A3GHHPU7\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-12 06:32 - 2017-09-12 06:32 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data636\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\A3GHHPU7\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-09 22:56 - 2017-09-12 00:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637 2017-09-09 22:56 - 2017-09-11 23:35 - 000294912 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Cookies 2017-09-09 22:56 - 2017-09-11 23:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Cookies-journal 2017-09-11 06:15 - 2017-09-11 06:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\databases 2017-09-11 06:15 - 2017-09-11 06:15 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\databases\Databases.db 2017-09-11 06:15 - 2017-09-11 06:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\databases\Databases.db-journal 2017-09-09 22:56 - 2017-09-11 23:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\File System 2017-09-11 23:28 - 2017-09-11 23:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\File System\002 2017-09-11 23:28 - 2017-09-11 23:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\File System\002\t 2017-09-11 23:28 - 2017-09-11 23:28 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\File System\002\t\.usage 2017-09-11 23:28 - 2017-09-11 23:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\File System\002\t\Paths 2017-09-11 23:28 - 2017-09-11 23:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\File System\002\t\Paths\000003.log 2017-09-11 23:28 - 2017-09-11 23:28 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\File System\002\t\Paths\CURRENT 2017-09-11 23:28 - 2017-09-11 23:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\File System\002\t\Paths\LOCK 2017-09-11 23:28 - 2017-09-11 23:28 - 000000131 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\File System\002\t\Paths\LOG 2017-09-11 23:28 - 2017-09-11 23:28 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\File System\002\t\Paths\MANIFEST-000001 2017-09-09 22:56 - 2017-09-11 23:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\File System\Origins 2017-09-09 22:56 - 2017-09-11 23:29 - 000000245 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\File System\Origins\000003.log 2017-09-09 22:56 - 2017-09-09 22:56 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\File System\Origins\CURRENT 2017-09-09 22:56 - 2017-09-09 22:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\File System\Origins\LOCK 2017-09-09 22:56 - 2017-09-11 23:28 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\File System\Origins\LOG 2017-09-09 22:56 - 2017-09-11 06:15 - 000000393 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\File System\Origins\LOG.old 2017-09-09 22:56 - 2017-09-09 22:56 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\File System\Origins\MANIFEST-000001 2017-09-09 23:00 - 2017-09-09 23:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\File System\Origins\lost 2017-09-11 06:15 - 2017-09-11 23:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\IndexedDB 2017-09-11 23:28 - 2017-09-11 23:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\IndexedDB\https_www.esmarttax.com_0.indexeddb.leveldb 2017-09-11 23:28 - 2017-09-11 23:28 - 000000194 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\IndexedDB\https_www.esmarttax.com_0.indexeddb.leveldb\000003.log 2017-09-11 23:28 - 2017-09-11 23:28 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\IndexedDB\https_www.esmarttax.com_0.indexeddb.leveldb\CURRENT 2017-09-11 23:28 - 2017-09-11 23:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\IndexedDB\https_www.esmarttax.com_0.indexeddb.leveldb\LOCK 2017-09-11 23:28 - 2017-09-11 23:28 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\IndexedDB\https_www.esmarttax.com_0.indexeddb.leveldb\LOG 2017-09-11 23:28 - 2017-09-11 23:28 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\IndexedDB\https_www.esmarttax.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 06:15 - 2017-09-11 06:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\IndexedDB\https_www.upwork.com_0.indexeddb.leveldb 2017-09-11 06:15 - 2017-09-11 06:15 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\IndexedDB\https_www.upwork.com_0.indexeddb.leveldb\000003.log 2017-09-11 06:15 - 2017-09-11 06:15 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\IndexedDB\https_www.upwork.com_0.indexeddb.leveldb\CURRENT 2017-09-11 06:15 - 2017-09-11 06:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\IndexedDB\https_www.upwork.com_0.indexeddb.leveldb\LOCK 2017-09-11 06:15 - 2017-09-11 06:15 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\IndexedDB\https_www.upwork.com_0.indexeddb.leveldb\LOG 2017-09-11 06:15 - 2017-09-11 06:15 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\IndexedDB\https_www.upwork.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-09 22:56 - 2017-09-11 23:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage 2017-09-11 06:16 - 2017-09-11 06:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 06:16 - 2017-09-11 06:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-09 23:01 - 2017-09-11 23:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-09 23:01 - 2017-09-11 23:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-09 23:01 - 2017-09-09 23:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_keepvid.com_0.localstorage 2017-09-09 23:01 - 2017-09-09 23:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_keepvid.com_0.localstorage-journal 2017-09-11 06:14 - 2017-09-11 06:15 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 06:14 - 2017-09-11 06:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-09 23:01 - 2017-09-09 23:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_tpc.googlesyndication.com_0.localstorage 2017-09-09 23:01 - 2017-09-09 23:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_tpc.googlesyndication.com_0.localstorage-journal 2017-09-11 23:34 - 2017-09-11 23:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.aetv.com_0.localstorage 2017-09-11 23:34 - 2017-09-11 23:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.aetv.com_0.localstorage-journal 2017-09-09 23:01 - 2017-09-09 23:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-09 23:01 - 2017-09-09 23:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-11 06:19 - 2017-09-11 06:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.bendbulletin.com_0.localstorage 2017-09-11 06:19 - 2017-09-11 06:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.bendbulletin.com_0.localstorage-journal 2017-09-11 23:32 - 2017-09-11 23:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.bounty.com_0.localstorage 2017-09-11 23:32 - 2017-09-11 23:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.bounty.com_0.localstorage-journal 2017-09-11 06:17 - 2017-09-11 06:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.businessinsider.com_0.localstorage 2017-09-11 06:17 - 2017-09-11 06:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.businessinsider.com_0.localstorage-journal 2017-09-09 22:58 - 2017-09-09 22:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-09 22:58 - 2017-09-09 22:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 06:18 - 2017-09-11 06:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.courant.com_0.localstorage 2017-09-11 06:18 - 2017-09-11 06:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-11 06:21 - 2017-09-11 06:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.detroitlions.com_0.localstorage 2017-09-11 06:21 - 2017-09-11 06:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.detroitlions.com_0.localstorage-journal 2017-09-11 23:34 - 2017-09-11 23:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-11 23:34 - 2017-09-11 23:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-11 06:14 - 2017-09-11 06:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.filmon.com_0.localstorage 2017-09-11 06:14 - 2017-09-11 06:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.filmon.com_0.localstorage-journal 2017-09-09 23:00 - 2017-09-09 23:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-09 23:00 - 2017-09-09 23:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-09 23:00 - 2017-09-09 23:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.instyle.com_0.localstorage 2017-09-09 23:00 - 2017-09-09 23:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 06:18 - 2017-09-11 23:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 06:18 - 2017-09-11 23:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-09 22:56 - 2017-09-09 22:57 - 000009216 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-09 22:56 - 2017-09-09 22:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-09 23:02 - 2017-09-09 23:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.nfl.com_0.localstorage 2017-09-09 23:02 - 2017-09-09 23:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-09 22:59 - 2017-09-09 22:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.parents.com_0.localstorage 2017-09-09 22:59 - 2017-09-09 22:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-11 06:17 - 2017-09-11 23:32 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-11 06:17 - 2017-09-11 23:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-11 23:28 - 2017-09-11 23:29 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.worldlifestyle.com_0.localstorage 2017-09-11 23:28 - 2017-09-11 23:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\http_www.worldlifestyle.com_0.localstorage-journal 2017-09-11 06:14 - 2017-09-11 06:14 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_a183139605.cdn.optimizely.com_0.localstorage 2017-09-11 06:14 - 2017-09-11 06:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_a183139605.cdn.optimizely.com_0.localstorage-journal 2017-09-11 23:28 - 2017-09-11 23:29 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_assets.bounceexchange.com_0.localstorage 2017-09-11 23:28 - 2017-09-11 23:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_assets.bounceexchange.com_0.localstorage-journal 2017-09-09 23:00 - 2017-09-09 23:00 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_c.betrad.com_0.localstorage 2017-09-09 23:00 - 2017-09-09 23:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 23:28 - 2017-09-11 23:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_connexity.net_0.localstorage 2017-09-11 23:28 - 2017-09-11 23:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 06:15 - 2017-09-11 06:15 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 06:15 - 2017-09-11 06:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-09 22:56 - 2017-09-09 22:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_direct.adsrvr.org_0.localstorage 2017-09-09 22:56 - 2017-09-09 22:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_direct.adsrvr.org_0.localstorage-journal 2017-09-11 06:15 - 2017-09-11 06:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 06:15 - 2017-09-11 06:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 06:14 - 2017-09-11 06:15 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 06:14 - 2017-09-11 06:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 23:28 - 2017-09-11 23:29 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_www.esmarttax.com_0.localstorage 2017-09-11 23:28 - 2017-09-11 23:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_www.esmarttax.com_0.localstorage-journal 2017-09-09 22:56 - 2017-09-09 22:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_www.lemystere.com_0.localstorage 2017-09-09 22:56 - 2017-09-09 22:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_www.lemystere.com_0.localstorage-journal 2017-09-11 06:14 - 2017-09-11 06:16 - 000013312 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_www.upwork.com_0.localstorage 2017-09-11 06:14 - 2017-09-11 06:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Local Storage\https_www.upwork.com_0.localstorage-journal 2017-09-09 22:56 - 2017-09-09 22:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data 2017-09-09 22:56 - 2017-09-11 23:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash 2017-09-09 22:56 - 2017-09-09 22:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-09 22:56 - 2017-09-09 22:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-09 22:56 - 2017-09-09 22:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\R8M7HM5R 2017-09-09 22:56 - 2017-09-09 22:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot 2017-09-09 22:56 - 2017-09-09 22:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-09 22:56 - 2017-09-11 23:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL 2017-09-11 23:29 - 2017-09-11 23:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\cdn.dashbid.io 2017-09-11 23:29 - 2017-09-11 23:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\cdn.dashbid.io\prod 2017-09-11 23:29 - 2017-09-11 23:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-11 23:29 - 2017-09-11 23:29 - 000000069 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-09 22:56 - 2017-09-11 23:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\cdn.stickyadstv.com 2017-09-11 06:14 - 2017-09-11 06:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\cdncache-a.akamaihd.net 2017-09-11 06:14 - 2017-09-11 06:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\cdncache-a.akamaihd.net\items 2017-09-11 06:14 - 2017-09-11 06:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 06:14 - 2017-09-11 06:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 06:14 - 2017-09-11 06:20 - 000000337 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-09 22:56 - 2017-09-11 23:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\eereader.com 2017-09-09 22:57 - 2017-09-11 23:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\efreader.com 2017-09-09 22:56 - 2017-09-11 23:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\egreader.com 2017-09-09 22:56 - 2017-09-09 22:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\macromedia.com 2017-09-09 22:56 - 2017-09-09 22:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\macromedia.com\support 2017-09-09 22:56 - 2017-09-09 22:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\macromedia.com\support\flashplayer 2017-09-09 22:56 - 2017-09-11 23:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\macromedia.com\support\flashplayer\sys 2017-09-09 22:56 - 2017-09-11 23:29 - 000000509 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 23:29 - 2017-09-11 23:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-11 23:29 - 2017-09-11 23:29 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-09 22:56 - 2017-09-09 22:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-09 22:56 - 2017-09-09 22:56 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 06:14 - 2017-09-11 06:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 06:14 - 2017-09-11 06:14 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-09 22:56 - 2017-09-09 22:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-09 22:56 - 2017-09-09 22:56 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-09 22:57 - 2017-09-09 22:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-09 22:57 - 2017-09-09 22:57 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-09 22:56 - 2017-09-09 22:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-09 22:56 - 2017-09-09 22:56 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data637\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GVJZVYPL\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 13:36 - 2017-09-12 02:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638 2017-09-10 13:36 - 2017-09-12 02:16 - 000283648 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Cookies 2017-09-10 13:36 - 2017-09-12 02:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Cookies-journal 2017-09-11 03:58 - 2017-09-11 03:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\databases 2017-09-11 03:58 - 2017-09-11 03:58 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\databases\Databases.db 2017-09-11 03:58 - 2017-09-11 03:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\databases\Databases.db-journal 2017-09-10 13:37 - 2017-09-11 20:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\File System 2017-09-10 13:37 - 2017-09-12 02:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\File System\Origins 2017-09-10 13:37 - 2017-09-11 03:56 - 000000369 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\File System\Origins\000003.log 2017-09-10 13:37 - 2017-09-10 13:37 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\File System\Origins\CURRENT 2017-09-10 13:37 - 2017-09-10 13:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\File System\Origins\LOCK 2017-09-10 13:37 - 2017-09-12 02:08 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\File System\Origins\LOG 2017-09-10 13:37 - 2017-09-11 20:54 - 000000393 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\File System\Origins\LOG.old 2017-09-10 13:37 - 2017-09-10 13:37 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\File System\Origins\MANIFEST-000001 2017-09-11 03:54 - 2017-09-11 03:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\File System\Origins\lost 2017-09-11 03:58 - 2017-09-12 02:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\IndexedDB 2017-09-11 20:54 - 2017-09-11 20:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\IndexedDB\http_de.reuters.com_0.indexeddb.leveldb 2017-09-11 20:54 - 2017-09-11 20:54 - 000000178 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\IndexedDB\http_de.reuters.com_0.indexeddb.leveldb\000003.log 2017-09-11 20:54 - 2017-09-11 20:54 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\IndexedDB\http_de.reuters.com_0.indexeddb.leveldb\CURRENT 2017-09-11 20:54 - 2017-09-11 20:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\IndexedDB\http_de.reuters.com_0.indexeddb.leveldb\LOCK 2017-09-11 20:54 - 2017-09-11 20:54 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\IndexedDB\http_de.reuters.com_0.indexeddb.leveldb\LOG 2017-09-11 20:54 - 2017-09-11 20:54 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\IndexedDB\http_de.reuters.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 02:08 - 2017-09-12 02:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb 2017-09-12 02:08 - 2017-09-12 02:08 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb\000003.log 2017-09-12 02:08 - 2017-09-12 02:08 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb\CURRENT 2017-09-12 02:08 - 2017-09-12 02:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb\LOCK 2017-09-12 02:08 - 2017-09-12 02:08 - 000000160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb\LOG 2017-09-12 02:08 - 2017-09-12 02:08 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 03:58 - 2017-09-11 03:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb 2017-09-11 03:58 - 2017-09-11 03:58 - 000000196 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\000003.log 2017-09-11 03:58 - 2017-09-11 03:58 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\CURRENT 2017-09-11 03:58 - 2017-09-11 03:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOCK 2017-09-11 03:58 - 2017-09-11 03:58 - 000000166 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOG 2017-09-11 03:58 - 2017-09-11 03:58 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 13:36 - 2017-09-12 02:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage 2017-09-10 13:38 - 2017-09-10 13:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 13:38 - 2017-09-10 13:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-12 02:08 - 2017-09-12 02:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_ca.puma.com_0.localstorage 2017-09-12 02:08 - 2017-09-12 02:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_ca.puma.com_0.localstorage-journal 2017-09-11 20:48 - 2017-09-11 20:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 20:48 - 2017-09-11 20:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-12 02:08 - 2017-09-12 02:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_cdn-gl.imrworldwide.com_0.localstorage 2017-09-12 02:08 - 2017-09-12 02:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_cdn-gl.imrworldwide.com_0.localstorage-journal 2017-09-11 20:51 - 2017-09-11 20:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_connexity.net_0.localstorage 2017-09-11 20:51 - 2017-09-11 20:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 20:53 - 2017-09-11 20:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_de.reuters.com_0.localstorage 2017-09-11 20:53 - 2017-09-11 20:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_de.reuters.com_0.localstorage-journal 2017-09-10 13:42 - 2017-09-10 13:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_jobs.mashable.com_0.localstorage 2017-09-10 13:42 - 2017-09-10 13:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_jobs.mashable.com_0.localstorage-journal 2017-09-11 20:51 - 2017-09-11 20:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-11 20:51 - 2017-09-11 20:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-12 02:13 - 2017-09-12 02:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_sync.graph.bluecava.com_0.localstorage 2017-09-12 02:13 - 2017-09-12 02:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_sync.graph.bluecava.com_0.localstorage-journal 2017-09-12 02:13 - 2017-09-12 02:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-12 02:13 - 2017-09-12 02:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-11 20:52 - 2017-09-11 20:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_washingtonmonthly.com_0.localstorage 2017-09-11 20:52 - 2017-09-11 20:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_washingtonmonthly.com_0.localstorage-journal 2017-09-11 20:53 - 2017-09-11 20:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.accuweather.com_0.localstorage 2017-09-11 20:53 - 2017-09-11 20:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.accuweather.com_0.localstorage-journal 2017-09-10 13:40 - 2017-09-10 13:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-10 13:40 - 2017-09-10 13:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-11 20:48 - 2017-09-11 20:49 - 000009216 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.billboard.com_0.localstorage 2017-09-11 20:48 - 2017-09-11 20:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.billboard.com_0.localstorage-journal 2017-09-11 03:55 - 2017-09-11 03:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.bounty.com_0.localstorage 2017-09-11 03:55 - 2017-09-11 03:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.bounty.com_0.localstorage-journal 2017-09-11 20:50 - 2017-09-11 20:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.businessinsider.com_0.localstorage 2017-09-11 20:50 - 2017-09-11 20:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.businessinsider.com_0.localstorage-journal 2017-09-10 13:38 - 2017-09-10 13:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 13:38 - 2017-09-10 13:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 20:51 - 2017-09-11 20:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-11 20:51 - 2017-09-11 20:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-12 02:12 - 2017-09-12 02:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.finecooking.com_0.localstorage 2017-09-12 02:12 - 2017-09-12 02:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.finecooking.com_0.localstorage-journal 2017-09-11 03:56 - 2017-09-11 03:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.food.com_0.localstorage 2017-09-11 03:56 - 2017-09-11 03:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-10 13:41 - 2017-09-10 13:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-10 13:41 - 2017-09-10 13:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-11 03:51 - 2017-09-11 03:52 - 000168960 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.goodhousekeeping.com_0.localstorage 2017-09-11 03:51 - 2017-09-11 03:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.goodhousekeeping.com_0.localstorage-journal 2017-09-12 02:08 - 2017-09-12 02:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.hollywood.com_0.localstorage 2017-09-12 02:08 - 2017-09-12 02:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.hollywood.com_0.localstorage-journal 2017-09-12 02:11 - 2017-09-12 02:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.insideedition.com_0.localstorage 2017-09-12 02:11 - 2017-09-12 02:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.insideedition.com_0.localstorage-journal 2017-09-11 03:53 - 2017-09-11 20:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 03:53 - 2017-09-11 20:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 13:39 - 2017-09-11 03:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.latimes.com_0.localstorage 2017-09-10 13:39 - 2017-09-11 03:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-12 02:11 - 2017-09-12 02:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-12 02:11 - 2017-09-12 02:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-12 02:13 - 2017-09-12 02:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.lifeandstylemag.com_0.localstorage 2017-09-12 02:13 - 2017-09-12 02:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.lifeandstylemag.com_0.localstorage-journal 2017-09-10 13:41 - 2017-09-10 13:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.newsru.com_0.localstorage 2017-09-10 13:41 - 2017-09-10 13:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.newsru.com_0.localstorage-journal 2017-09-10 13:39 - 2017-09-10 13:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 13:39 - 2017-09-10 13:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 13:39 - 2017-09-11 20:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.parents.com_0.localstorage 2017-09-10 13:39 - 2017-09-11 20:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-11 03:53 - 2017-09-11 03:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.reuters.com_0.localstorage 2017-09-11 03:53 - 2017-09-11 03:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-10 13:36 - 2017-09-10 13:37 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.worldlifestyle.com_0.localstorage 2017-09-10 13:36 - 2017-09-10 13:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\http_www.worldlifestyle.com_0.localstorage-journal 2017-09-10 13:36 - 2017-09-10 13:37 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\https_assets.bounceexchange.com_0.localstorage 2017-09-10 13:36 - 2017-09-10 13:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\https_assets.bounceexchange.com_0.localstorage-journal 2017-09-10 13:36 - 2017-09-10 13:36 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 13:36 - 2017-09-10 13:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 20:51 - 2017-09-11 20:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\https_connexity.net_0.localstorage 2017-09-11 20:51 - 2017-09-11 20:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 20:48 - 2017-09-11 20:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\https_disqus.com_0.localstorage 2017-09-11 20:48 - 2017-09-11 20:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\https_disqus.com_0.localstorage-journal 2017-09-10 13:36 - 2017-09-10 13:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\https_rumble.com_0.localstorage 2017-09-10 13:36 - 2017-09-10 13:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Local Storage\https_rumble.com_0.localstorage-journal 2017-09-10 13:36 - 2017-09-10 13:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data 2017-09-10 13:36 - 2017-09-12 02:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash 2017-09-10 13:36 - 2017-09-10 13:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 13:36 - 2017-09-10 13:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 13:36 - 2017-09-10 13:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\6FHRSWML 2017-09-10 13:36 - 2017-09-10 13:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 13:36 - 2017-09-10 13:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 13:36 - 2017-09-11 03:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ 2017-09-10 13:36 - 2017-09-12 02:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\cdn.stickyadstv.com 2017-09-11 03:52 - 2017-09-11 03:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\cdncache-a.akamaihd.net 2017-09-11 03:52 - 2017-09-11 03:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\cdncache-a.akamaihd.net\items 2017-09-11 03:52 - 2017-09-11 03:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 03:52 - 2017-09-11 20:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 03:52 - 2017-09-11 20:53 - 000000375 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 13:36 - 2017-09-12 02:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\eereader.com 2017-09-10 13:37 - 2017-09-10 13:37 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\eereader.com\analytics.sol 2017-09-10 13:37 - 2017-09-12 02:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\efreader.com 2017-09-10 13:39 - 2017-09-11 03:59 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\efreader.com\analytics.sol 2017-09-10 13:36 - 2017-09-12 02:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\egreader.com 2017-09-10 13:37 - 2017-09-11 03:55 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\egreader.com\analytics.sol 2017-09-10 13:36 - 2017-09-10 13:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\macromedia.com 2017-09-10 13:36 - 2017-09-10 13:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\macromedia.com\support 2017-09-10 13:36 - 2017-09-10 13:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\macromedia.com\support\flashplayer 2017-09-10 13:36 - 2017-09-11 03:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\macromedia.com\support\flashplayer\sys 2017-09-10 13:36 - 2017-09-11 03:52 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 13:36 - 2017-09-10 13:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 13:36 - 2017-09-10 13:36 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 03:52 - 2017-09-11 03:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 03:52 - 2017-09-11 03:52 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 13:36 - 2017-09-10 13:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 13:36 - 2017-09-10 13:36 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 13:37 - 2017-09-10 13:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 13:37 - 2017-09-10 13:37 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 13:36 - 2017-09-10 13:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 13:36 - 2017-09-10 13:36 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data638\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\LM8JZLWQ\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-09 23:24 - 2017-09-12 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639 2017-09-09 23:24 - 2017-09-12 04:49 - 000313344 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Cookies 2017-09-09 23:24 - 2017-09-12 04:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Cookies-journal 2017-09-10 00:55 - 2017-09-10 00:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\databases 2017-09-10 00:55 - 2017-09-10 00:55 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\databases\Databases.db 2017-09-10 00:55 - 2017-09-10 00:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\databases\Databases.db-journal 2017-09-09 23:26 - 2017-09-12 04:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\File System 2017-09-09 23:26 - 2017-09-12 04:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\File System\Origins 2017-09-09 23:26 - 2017-09-10 01:04 - 000000656 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\File System\Origins\000003.log 2017-09-12 04:48 - 2017-09-12 04:48 - 000000396 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\File System\Origins\000004.ldb 2017-09-12 04:48 - 2017-09-12 04:48 - 000000396 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\File System\Origins\000005.ldb 2017-09-12 04:48 - 2017-09-12 04:48 - 000000396 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\File System\Origins\000006.ldb 2017-09-12 04:48 - 2017-09-12 04:48 - 000000396 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\File System\Origins\000007.ldb 2017-09-09 23:26 - 2017-09-09 23:26 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\File System\Origins\CURRENT 2017-09-09 23:26 - 2017-09-09 23:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\File System\Origins\LOCK 2017-09-09 23:26 - 2017-09-12 04:48 - 000000852 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\File System\Origins\LOG 2017-09-09 23:26 - 2017-09-10 01:03 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\File System\Origins\LOG.old 2017-09-09 23:26 - 2017-09-09 23:26 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\File System\Origins\MANIFEST-000001 2017-09-10 00:58 - 2017-09-10 00:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\File System\Origins\lost 2017-09-10 00:55 - 2017-09-10 00:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\IndexedDB 2017-09-10 00:55 - 2017-09-10 00:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\IndexedDB\https_83170087.va.cobrowse.liveperson.net_0.indexeddb.leveldb 2017-09-10 00:55 - 2017-09-10 00:55 - 000000587 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\IndexedDB\https_83170087.va.cobrowse.liveperson.net_0.indexeddb.leveldb\000003.log 2017-09-10 00:55 - 2017-09-10 00:55 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\IndexedDB\https_83170087.va.cobrowse.liveperson.net_0.indexeddb.leveldb\CURRENT 2017-09-10 00:55 - 2017-09-10 00:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\IndexedDB\https_83170087.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOCK 2017-09-10 00:55 - 2017-09-10 00:55 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\IndexedDB\https_83170087.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOG 2017-09-10 00:55 - 2017-09-10 00:55 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\IndexedDB\https_83170087.va.cobrowse.liveperson.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 00:55 - 2017-09-10 00:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb 2017-09-10 00:55 - 2017-09-10 00:55 - 000001338 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\000003.log 2017-09-10 00:55 - 2017-09-10 00:55 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\CURRENT 2017-09-10 00:55 - 2017-09-10 00:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOCK 2017-09-10 00:55 - 2017-09-10 00:55 - 000000164 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOG 2017-09-10 00:55 - 2017-09-10 00:55 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-09 23:24 - 2017-09-12 04:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage 2017-09-09 23:30 - 2017-09-09 23:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_allrecipes.com_0.localstorage 2017-09-09 23:30 - 2017-09-09 23:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-09 23:26 - 2017-09-12 04:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-09 23:26 - 2017-09-12 04:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-09 23:27 - 2017-09-09 23:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-09 23:27 - 2017-09-09 23:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-12 04:43 - 2017-09-12 04:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_connexity.net_0.localstorage 2017-09-12 04:43 - 2017-09-12 04:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-12 04:41 - 2017-09-12 04:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_secure-us.imrworldwide.com_0.localstorage 2017-09-12 04:41 - 2017-09-12 04:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_secure-us.imrworldwide.com_0.localstorage-journal 2017-09-10 01:00 - 2017-09-10 01:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-10 01:00 - 2017-09-10 01:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-09 23:27 - 2017-09-09 23:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_tpc.googlesyndication.com_0.localstorage 2017-09-09 23:27 - 2017-09-09 23:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_tpc.googlesyndication.com_0.localstorage-journal 2017-09-12 04:42 - 2017-09-12 04:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_universal.iperceptions.com_0.localstorage 2017-09-12 04:42 - 2017-09-12 04:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_universal.iperceptions.com_0.localstorage-journal 2017-09-09 23:24 - 2017-09-09 23:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_video-static.tunnl.com_0.localstorage 2017-09-09 23:24 - 2017-09-09 23:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_video-static.tunnl.com_0.localstorage-journal 2017-09-09 23:28 - 2017-09-09 23:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.blessyouboys.com_0.localstorage 2017-09-09 23:28 - 2017-09-09 23:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.blessyouboys.com_0.localstorage-journal 2017-09-09 23:26 - 2017-09-12 04:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-09 23:26 - 2017-09-12 04:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 00:59 - 2017-09-10 00:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.courant.com_0.localstorage 2017-09-10 00:59 - 2017-09-10 00:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-12 04:46 - 2017-09-12 04:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-12 04:46 - 2017-09-12 04:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-09 23:28 - 2017-09-09 23:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.foxnews.com_0.localstorage 2017-09-09 23:28 - 2017-09-09 23:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.foxnews.com_0.localstorage-journal 2017-09-12 04:41 - 2017-09-12 04:42 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.foxsports.com_0.localstorage 2017-09-12 04:41 - 2017-09-12 04:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.foxsports.com_0.localstorage-journal 2017-09-10 00:55 - 2017-09-10 00:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.hugoboss.com_0.localstorage 2017-09-10 00:55 - 2017-09-10 00:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.hugoboss.com_0.localstorage-journal 2017-09-10 00:57 - 2017-09-10 00:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 00:57 - 2017-09-10 00:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-09 23:27 - 2017-09-09 23:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.islandpacket.com_0.localstorage 2017-09-09 23:27 - 2017-09-09 23:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.islandpacket.com_0.localstorage-journal 2017-09-10 01:01 - 2017-09-12 04:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.macworld.com_0.localstorage 2017-09-10 01:01 - 2017-09-12 04:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-09 23:29 - 2017-09-09 23:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.msnbc.com_0.localstorage 2017-09-09 23:29 - 2017-09-09 23:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.msnbc.com_0.localstorage-journal 2017-09-09 23:27 - 2017-09-09 23:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-09 23:27 - 2017-09-09 23:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-09 23:27 - 2017-09-09 23:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.nfl.com_0.localstorage 2017-09-09 23:27 - 2017-09-09 23:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 00:58 - 2017-09-12 04:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-10 00:58 - 2017-09-12 04:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-12 04:46 - 2017-09-12 04:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.teenvogue.com_0.localstorage 2017-09-12 04:46 - 2017-09-12 04:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.teenvogue.com_0.localstorage-journal 2017-09-10 01:00 - 2017-09-10 01:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.torontosun.com_0.localstorage 2017-09-10 01:00 - 2017-09-10 01:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.torontosun.com_0.localstorage-journal 2017-09-12 04:41 - 2017-09-12 04:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.vw.com_0.localstorage 2017-09-12 04:41 - 2017-09-12 04:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.vw.com_0.localstorage-journal 2017-09-09 23:24 - 2017-09-09 23:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.wordgames.com_0.localstorage 2017-09-09 23:24 - 2017-09-09 23:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\http_www.wordgames.com_0.localstorage-journal 2017-09-10 00:55 - 2017-09-10 00:55 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\https_assets.bounceexchange.com_0.localstorage 2017-09-10 00:55 - 2017-09-10 00:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\https_assets.bounceexchange.com_0.localstorage-journal 2017-09-10 00:58 - 2017-09-10 00:58 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 00:58 - 2017-09-10 00:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-12 04:43 - 2017-09-12 04:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\https_connexity.net_0.localstorage 2017-09-12 04:43 - 2017-09-12 04:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-09 23:24 - 2017-09-09 23:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\https_monkey.tunnl.com_0.localstorage 2017-09-09 23:24 - 2017-09-09 23:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\https_monkey.tunnl.com_0.localstorage-journal 2017-09-12 04:41 - 2017-09-12 04:41 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\https_volkswagenvwcom.mpeasylink.com_0.localstorage 2017-09-12 04:41 - 2017-09-12 04:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\https_volkswagenvwcom.mpeasylink.com_0.localstorage-journal 2017-09-09 23:24 - 2017-09-09 23:25 - 000210944 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\https_www.hallmarkecards.com_0.localstorage 2017-09-09 23:24 - 2017-09-09 23:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Local Storage\https_www.hallmarkecards.com_0.localstorage-journal 2017-09-09 23:24 - 2017-09-09 23:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data 2017-09-09 23:24 - 2017-09-12 04:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash 2017-09-09 23:24 - 2017-09-09 23:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-09 23:24 - 2017-09-09 23:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-09 23:24 - 2017-09-09 23:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\ZQE2YWZC 2017-09-09 23:24 - 2017-09-09 23:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot 2017-09-09 23:24 - 2017-09-09 23:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-09 23:24 - 2017-09-09 23:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3 2017-09-09 23:24 - 2017-09-12 04:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\cdn.stickyadstv.com 2017-09-09 23:24 - 2017-09-12 04:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\eereader.com 2017-09-10 01:00 - 2017-09-10 01:00 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\eereader.com\analytics.sol 2017-09-09 23:25 - 2017-09-12 04:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\efreader.com 2017-09-09 23:27 - 2017-09-12 04:48 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\efreader.com\analytics.sol 2017-09-09 23:24 - 2017-09-12 04:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\egreader.com 2017-09-09 23:29 - 2017-09-10 01:00 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\egreader.com\analytics.sol 2017-09-09 23:25 - 2017-09-09 23:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\games.coolgames.com 2017-09-09 23:29 - 2017-09-09 23:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\inread.anyclip.com 2017-09-09 23:29 - 2017-09-09 23:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\inread.anyclip.com\ac# 2017-09-09 23:29 - 2017-09-09 23:29 - 000000443 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-09 23:24 - 2017-09-09 23:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\macromedia.com 2017-09-09 23:24 - 2017-09-09 23:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\macromedia.com\support 2017-09-09 23:24 - 2017-09-09 23:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\macromedia.com\support\flashplayer 2017-09-09 23:24 - 2017-09-09 23:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\macromedia.com\support\flashplayer\sys 2017-09-09 23:24 - 2017-09-09 23:29 - 000000536 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-09 23:24 - 2017-09-09 23:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-09 23:24 - 2017-09-09 23:24 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-09 23:24 - 2017-09-09 23:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-09 23:24 - 2017-09-09 23:24 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-09 23:25 - 2017-09-09 23:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-09 23:25 - 2017-09-09 23:25 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-09 23:24 - 2017-09-09 23:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-09 23:24 - 2017-09-09 23:24 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-09 23:25 - 2017-09-09 23:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\macromedia.com\support\flashplayer\sys\#games.coolgames.com 2017-09-09 23:25 - 2017-09-09 23:25 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\macromedia.com\support\flashplayer\sys\#games.coolgames.com\settings.sol 2017-09-09 23:29 - 2017-09-09 23:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-09 23:29 - 2017-09-09 23:29 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-09 23:26 - 2017-09-09 23:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com 2017-09-09 23:26 - 2017-09-09 23:26 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com\settings.sol 2017-09-09 23:26 - 2017-09-09 23:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\objects.tremormedia.com 2017-09-09 23:26 - 2017-09-09 23:26 - 000000072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data639\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VF7UBYA3\objects.tremormedia.com\com.quantserve.sol 2017-09-10 14:57 - 2017-09-12 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640 2017-09-10 14:57 - 2017-09-12 05:00 - 000377856 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Cookies 2017-09-10 14:57 - 2017-09-12 05:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Cookies-journal 2017-09-10 15:00 - 2017-09-10 15:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\databases 2017-09-10 15:00 - 2017-09-10 15:00 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\databases\Databases.db 2017-09-10 15:00 - 2017-09-10 15:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\databases\Databases.db-journal 2017-09-10 14:57 - 2017-09-12 04:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System 2017-09-12 04:59 - 2017-09-12 04:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\002 2017-09-12 04:59 - 2017-09-12 04:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\002\t 2017-09-10 23:28 - 2017-09-10 23:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\003 2017-09-10 23:28 - 2017-09-11 02:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\003\t 2017-09-11 02:10 - 2017-09-11 02:10 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\003\t\.usage 2017-09-11 02:08 - 2017-09-11 02:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\003\t\Paths 2017-09-11 02:08 - 2017-09-11 02:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\003\t\Paths\000003.log 2017-09-11 02:08 - 2017-09-11 02:08 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\003\t\Paths\CURRENT 2017-09-11 02:08 - 2017-09-11 02:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\003\t\Paths\LOCK 2017-09-11 02:08 - 2017-09-11 02:11 - 000000307 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\003\t\Paths\LOG 2017-09-11 02:08 - 2017-09-11 02:08 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\003\t\Paths\LOG.old 2017-09-11 02:08 - 2017-09-11 02:08 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\003\t\Paths\MANIFEST-000001 2017-09-12 02:01 - 2017-09-12 02:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\004 2017-09-12 02:01 - 2017-09-12 04:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\004\t 2017-09-12 04:54 - 2017-09-12 04:54 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\004\t\.usage 2017-09-12 04:54 - 2017-09-12 04:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\004\t\Paths 2017-09-12 04:54 - 2017-09-12 04:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\004\t\Paths\000003.log 2017-09-12 04:54 - 2017-09-12 04:54 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\004\t\Paths\CURRENT 2017-09-12 04:54 - 2017-09-12 04:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\004\t\Paths\LOCK 2017-09-12 04:54 - 2017-09-12 04:54 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\004\t\Paths\LOG 2017-09-12 04:54 - 2017-09-12 04:54 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\004\t\Paths\MANIFEST-000001 2017-09-12 04:54 - 2017-09-12 04:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\005 2017-09-12 04:54 - 2017-09-12 04:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\005\t 2017-09-12 04:54 - 2017-09-12 04:54 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\005\t\.usage 2017-09-12 04:54 - 2017-09-12 04:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\005\t\Paths 2017-09-12 04:54 - 2017-09-12 04:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\005\t\Paths\000003.log 2017-09-12 04:54 - 2017-09-12 04:54 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\005\t\Paths\CURRENT 2017-09-12 04:54 - 2017-09-12 04:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\005\t\Paths\LOCK 2017-09-12 04:54 - 2017-09-12 04:54 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\005\t\Paths\LOG 2017-09-12 04:54 - 2017-09-12 04:54 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\005\t\Paths\MANIFEST-000001 2017-09-10 14:57 - 2017-09-12 04:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\Origins 2017-09-10 14:57 - 2017-09-12 04:55 - 000000448 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\Origins\000003.log 2017-09-10 14:57 - 2017-09-10 14:57 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\Origins\CURRENT 2017-09-10 14:57 - 2017-09-10 14:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\Origins\LOCK 2017-09-10 14:57 - 2017-09-12 04:59 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\Origins\LOG 2017-09-10 14:57 - 2017-09-12 04:57 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\Origins\LOG.old 2017-09-10 14:57 - 2017-09-10 14:57 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\Origins\MANIFEST-000001 2017-09-10 23:27 - 2017-09-10 23:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\File System\Origins\lost 2017-09-10 15:00 - 2017-09-12 04:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB 2017-09-10 23:27 - 2017-09-10 23:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_thedroidguy.com_0.indexeddb.leveldb 2017-09-10 23:27 - 2017-09-10 23:27 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_thedroidguy.com_0.indexeddb.leveldb\000003.log 2017-09-10 23:27 - 2017-09-10 23:27 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_thedroidguy.com_0.indexeddb.leveldb\CURRENT 2017-09-10 23:27 - 2017-09-10 23:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_thedroidguy.com_0.indexeddb.leveldb\LOCK 2017-09-10 23:27 - 2017-09-10 23:27 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_thedroidguy.com_0.indexeddb.leveldb\LOG 2017-09-10 23:27 - 2017-09-10 23:27 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_thedroidguy.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 02:10 - 2017-09-11 02:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.insurancejournal.tv_0.indexeddb.leveldb 2017-09-11 02:10 - 2017-09-11 02:10 - 000000196 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.insurancejournal.tv_0.indexeddb.leveldb\000003.log 2017-09-11 02:10 - 2017-09-11 02:10 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.insurancejournal.tv_0.indexeddb.leveldb\CURRENT 2017-09-11 02:10 - 2017-09-11 02:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.insurancejournal.tv_0.indexeddb.leveldb\LOCK 2017-09-11 02:10 - 2017-09-11 02:10 - 000000166 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.insurancejournal.tv_0.indexeddb.leveldb\LOG 2017-09-11 02:10 - 2017-09-11 02:10 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.insurancejournal.tv_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 15:00 - 2017-09-10 15:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb 2017-09-10 15:00 - 2017-09-10 15:00 - 000000190 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb\000003.log 2017-09-10 15:00 - 2017-09-10 15:00 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb\CURRENT 2017-09-10 15:00 - 2017-09-10 15:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb\LOCK 2017-09-10 15:00 - 2017-09-10 15:00 - 000000164 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb\LOG 2017-09-10 15:00 - 2017-09-10 15:00 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 23:26 - 2017-09-10 23:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.jamieoliver.com_0.indexeddb.leveldb 2017-09-10 23:26 - 2017-09-10 23:26 - 000000188 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.jamieoliver.com_0.indexeddb.leveldb\000003.log 2017-09-10 23:26 - 2017-09-10 23:26 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.jamieoliver.com_0.indexeddb.leveldb\CURRENT 2017-09-10 23:26 - 2017-09-10 23:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.jamieoliver.com_0.indexeddb.leveldb\LOCK 2017-09-10 23:26 - 2017-09-10 23:26 - 000000162 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.jamieoliver.com_0.indexeddb.leveldb\LOG 2017-09-10 23:26 - 2017-09-10 23:26 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.jamieoliver.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 23:25 - 2017-09-11 02:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb 2017-09-10 23:25 - 2017-09-10 23:25 - 000000172 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\000003.log 2017-09-10 23:25 - 2017-09-10 23:25 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\CURRENT 2017-09-10 23:25 - 2017-09-10 23:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOCK 2017-09-10 23:25 - 2017-09-11 02:08 - 000000350 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOG 2017-09-10 23:25 - 2017-09-10 23:25 - 000000154 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOG.old 2017-09-10 23:25 - 2017-09-10 23:25 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 04:54 - 2017-09-12 04:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb 2017-09-12 04:54 - 2017-09-12 04:54 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb\000003.log 2017-09-12 04:54 - 2017-09-12 04:54 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb\CURRENT 2017-09-12 04:54 - 2017-09-12 04:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb\LOCK 2017-09-12 04:54 - 2017-09-12 04:54 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb\LOG 2017-09-12 04:54 - 2017-09-12 04:54 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 23:23 - 2017-09-10 23:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\https_www.irishtimes.com_0.indexeddb.leveldb 2017-09-10 23:23 - 2017-09-10 23:23 - 000000188 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\https_www.irishtimes.com_0.indexeddb.leveldb\000003.log 2017-09-10 23:23 - 2017-09-10 23:23 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\https_www.irishtimes.com_0.indexeddb.leveldb\CURRENT 2017-09-10 23:23 - 2017-09-10 23:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\https_www.irishtimes.com_0.indexeddb.leveldb\LOCK 2017-09-10 23:23 - 2017-09-10 23:24 - 000000162 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\https_www.irishtimes.com_0.indexeddb.leveldb\LOG 2017-09-10 23:23 - 2017-09-10 23:23 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\IndexedDB\https_www.irishtimes.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 14:57 - 2017-09-12 05:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage 2017-09-10 15:02 - 2017-09-11 02:13 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_allrecipes.com_0.localstorage 2017-09-10 15:02 - 2017-09-11 02:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-12 02:05 - 2017-09-12 02:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-12 02:05 - 2017-09-12 02:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-10 14:59 - 2017-09-10 14:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 14:59 - 2017-09-10 14:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 14:59 - 2017-09-10 14:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_connexity.net_0.localstorage 2017-09-10 14:59 - 2017-09-10 14:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-12 04:57 - 2017-09-12 04:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_jp.reuters.com_0.localstorage 2017-09-12 04:57 - 2017-09-12 04:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_jp.reuters.com_0.localstorage-journal 2017-09-12 04:53 - 2017-09-12 04:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_nflfilms.nfl.com_0.localstorage 2017-09-12 04:53 - 2017-09-12 04:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_nflfilms.nfl.com_0.localstorage-journal 2017-09-11 02:06 - 2017-09-11 02:07 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 02:06 - 2017-09-11 02:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 23:27 - 2017-09-10 23:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-10 23:27 - 2017-09-10 23:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-12 04:56 - 2017-09-12 04:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_variety.com_0.localstorage 2017-09-12 04:56 - 2017-09-12 04:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_variety.com_0.localstorage-journal 2017-09-11 02:10 - 2017-09-11 02:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_washingtonmonthly.com_0.localstorage 2017-09-11 02:10 - 2017-09-11 02:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_washingtonmonthly.com_0.localstorage-journal 2017-09-10 23:28 - 2017-09-10 23:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.accuweather.com_0.localstorage 2017-09-10 23:28 - 2017-09-10 23:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.accuweather.com_0.localstorage-journal 2017-09-10 15:03 - 2017-09-10 15:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.belloflostsouls.net_0.localstorage 2017-09-10 15:03 - 2017-09-10 15:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.belloflostsouls.net_0.localstorage-journal 2017-09-12 04:56 - 2017-09-12 04:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-12 04:56 - 2017-09-12 04:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-12 02:02 - 2017-09-12 02:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.blessyouboys.com_0.localstorage 2017-09-12 02:02 - 2017-09-12 02:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.blessyouboys.com_0.localstorage-journal 2017-09-10 14:59 - 2017-09-10 15:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 14:59 - 2017-09-10 15:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 15:00 - 2017-09-11 02:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-10 15:00 - 2017-09-11 02:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-12 01:58 - 2017-09-12 01:59 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.express.co.uk_0.localstorage 2017-09-12 01:58 - 2017-09-12 01:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.express.co.uk_0.localstorage-journal 2017-09-10 23:27 - 2017-09-10 23:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.finecooking.com_0.localstorage 2017-09-10 23:27 - 2017-09-10 23:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.finecooking.com_0.localstorage-journal 2017-09-12 02:01 - 2017-09-12 02:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-12 02:01 - 2017-09-12 02:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-10 15:00 - 2017-09-10 15:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-10 15:00 - 2017-09-10 15:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-12 04:55 - 2017-09-12 04:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.instyle.com_0.localstorage 2017-09-12 04:55 - 2017-09-12 04:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 02:09 - 2017-09-11 02:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.insurancejournal.tv_0.localstorage 2017-09-11 02:09 - 2017-09-11 02:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.insurancejournal.tv_0.localstorage-journal 2017-09-10 14:59 - 2017-09-10 14:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 14:59 - 2017-09-10 14:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 23:26 - 2017-09-10 23:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-10 23:26 - 2017-09-10 23:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-11 02:11 - 2017-09-11 02:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.latimes.com_0.localstorage 2017-09-11 02:11 - 2017-09-11 02:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-10 23:26 - 2017-09-10 23:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-10 23:26 - 2017-09-10 23:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-11 02:06 - 2017-09-11 02:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.livescore.com_0.localstorage 2017-09-11 02:06 - 2017-09-11 02:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.livescore.com_0.localstorage-journal 2017-09-10 15:04 - 2017-09-10 15:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 15:04 - 2017-09-10 15:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 02:09 - 2017-09-11 02:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.parents.com_0.localstorage 2017-09-11 02:09 - 2017-09-11 02:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-10 15:00 - 2017-09-10 15:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-10 15:00 - 2017-09-10 15:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-12 02:01 - 2017-09-12 04:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.reuters.com_0.localstorage 2017-09-12 02:01 - 2017-09-12 04:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-12 02:03 - 2017-09-12 02:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.slice.ca_0.localstorage 2017-09-12 02:03 - 2017-09-12 02:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.slice.ca_0.localstorage-journal 2017-09-10 14:57 - 2017-09-10 14:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.yummytummyaarthi.com_0.localstorage 2017-09-10 14:57 - 2017-09-10 14:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\http_www.yummytummyaarthi.com_0.localstorage-journal 2017-09-10 14:59 - 2017-09-10 14:59 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 14:59 - 2017-09-10 14:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 23:23 - 2017-09-10 23:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_cdn.krxd.net_0.localstorage 2017-09-10 23:23 - 2017-09-10 23:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_cdn.krxd.net_0.localstorage-journal 2017-09-10 14:59 - 2017-09-10 14:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_connexity.net_0.localstorage 2017-09-10 14:59 - 2017-09-10 14:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 23:23 - 2017-09-11 02:06 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 23:23 - 2017-09-11 02:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 15:01 - 2017-09-10 15:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-10 15:01 - 2017-09-10 15:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-10 14:57 - 2017-09-10 14:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_googleads.g.doubleclick.net_0.localstorage 2017-09-10 14:57 - 2017-09-10 14:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_googleads.g.doubleclick.net_0.localstorage-journal 2017-09-10 23:23 - 2017-09-10 23:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_hades.srvtrck.com_0.localstorage 2017-09-10 23:23 - 2017-09-10 23:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_hades.srvtrck.com_0.localstorage-journal 2017-09-10 23:23 - 2017-09-10 23:24 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 23:23 - 2017-09-10 23:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 23:23 - 2017-09-11 02:06 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 23:23 - 2017-09-11 02:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 02:06 - 2017-09-11 02:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_www.brownies.com_0.localstorage 2017-09-11 02:06 - 2017-09-11 02:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_www.brownies.com_0.localstorage-journal 2017-09-12 01:58 - 2017-09-12 01:59 - 000009216 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_www.citrix.com_0.localstorage 2017-09-12 01:58 - 2017-09-12 01:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_www.citrix.com_0.localstorage-journal 2017-09-10 23:23 - 2017-09-10 23:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_www.irishtimes.com_0.localstorage 2017-09-10 23:23 - 2017-09-10 23:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_www.irishtimes.com_0.localstorage-journal 2017-09-10 23:23 - 2017-09-10 23:24 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_www.onlynaturalpet.com_0.localstorage 2017-09-10 23:23 - 2017-09-10 23:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Local Storage\https_www.onlynaturalpet.com_0.localstorage-journal 2017-09-10 14:57 - 2017-09-10 14:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data 2017-09-10 14:57 - 2017-09-12 04:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash 2017-09-10 14:57 - 2017-09-10 14:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 14:57 - 2017-09-10 14:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 14:57 - 2017-09-10 14:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\3LZXFDCV 2017-09-10 14:57 - 2017-09-10 14:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 14:57 - 2017-09-10 14:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 14:57 - 2017-09-10 23:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD 2017-09-10 14:57 - 2017-09-12 04:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\cdn.stickyadstv.com 2017-09-10 23:23 - 2017-09-10 23:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\cdncache-a.akamaihd.net 2017-09-10 23:23 - 2017-09-10 23:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\cdncache-a.akamaihd.net\items 2017-09-10 23:23 - 2017-09-10 23:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 23:23 - 2017-09-11 02:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 23:23 - 2017-09-11 02:11 - 000000416 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 14:57 - 2017-09-12 04:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\eereader.com 2017-09-10 14:58 - 2017-09-10 15:02 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\eereader.com\analytics.sol 2017-09-10 14:58 - 2017-09-12 05:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\efreader.com 2017-09-10 15:02 - 2017-09-12 05:01 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\efreader.com\analytics.sol 2017-09-10 14:57 - 2017-09-12 04:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\egreader.com 2017-09-10 14:57 - 2017-09-10 14:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\macromedia.com 2017-09-10 14:57 - 2017-09-10 14:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\macromedia.com\support 2017-09-10 14:57 - 2017-09-10 14:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\macromedia.com\support\flashplayer 2017-09-10 14:57 - 2017-09-10 23:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\macromedia.com\support\flashplayer\sys 2017-09-10 14:57 - 2017-09-10 23:23 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 14:57 - 2017-09-10 14:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 14:57 - 2017-09-10 14:57 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 23:23 - 2017-09-10 23:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 23:23 - 2017-09-10 23:23 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 14:57 - 2017-09-10 14:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 14:57 - 2017-09-10 14:57 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 14:58 - 2017-09-10 14:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 14:58 - 2017-09-10 14:58 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 14:57 - 2017-09-10 14:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 14:57 - 2017-09-10 14:57 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data640\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59DTQ6HD\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 10:03 - 2017-09-11 10:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641 2017-09-11 10:03 - 2017-09-11 10:10 - 000203776 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Cookies 2017-09-11 10:03 - 2017-09-11 10:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Cookies-journal 2017-09-11 10:06 - 2017-09-11 10:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\databases 2017-09-11 10:06 - 2017-09-11 10:06 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\databases\Databases.db 2017-09-11 10:06 - 2017-09-11 10:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\databases\Databases.db-journal 2017-09-11 10:03 - 2017-09-11 10:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\File System 2017-09-11 10:03 - 2017-09-11 10:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\File System\000 2017-09-11 10:03 - 2017-09-11 10:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\File System\000\t 2017-09-11 10:06 - 2017-09-11 10:06 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\File System\000\t\.usage 2017-09-11 10:06 - 2017-09-11 10:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\File System\000\t\Paths 2017-09-11 10:06 - 2017-09-11 10:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\File System\000\t\Paths\000003.log 2017-09-11 10:06 - 2017-09-11 10:06 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\File System\000\t\Paths\CURRENT 2017-09-11 10:06 - 2017-09-11 10:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\File System\000\t\Paths\LOCK 2017-09-11 10:06 - 2017-09-11 10:06 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\File System\000\t\Paths\LOG 2017-09-11 10:06 - 2017-09-11 10:06 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\File System\000\t\Paths\MANIFEST-000001 2017-09-11 10:06 - 2017-09-11 10:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\File System\001 2017-09-11 10:06 - 2017-09-11 10:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\File System\001\t 2017-09-11 10:03 - 2017-09-11 10:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\File System\Origins 2017-09-11 10:03 - 2017-09-11 10:06 - 000000182 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\File System\Origins\000003.log 2017-09-11 10:03 - 2017-09-11 10:03 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\File System\Origins\CURRENT 2017-09-11 10:03 - 2017-09-11 10:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\File System\Origins\LOCK 2017-09-11 10:03 - 2017-09-11 10:06 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\File System\Origins\LOG 2017-09-11 10:03 - 2017-09-11 10:03 - 000000128 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\File System\Origins\LOG.old 2017-09-11 10:03 - 2017-09-11 10:03 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\File System\Origins\MANIFEST-000001 2017-09-11 10:06 - 2017-09-11 10:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\IndexedDB 2017-09-11 10:06 - 2017-09-11 10:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\IndexedDB\http_www.innerself.com_0.indexeddb.leveldb 2017-09-11 10:06 - 2017-09-11 10:06 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\IndexedDB\http_www.innerself.com_0.indexeddb.leveldb\000003.log 2017-09-11 10:06 - 2017-09-11 10:06 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\IndexedDB\http_www.innerself.com_0.indexeddb.leveldb\CURRENT 2017-09-11 10:06 - 2017-09-11 10:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\IndexedDB\http_www.innerself.com_0.indexeddb.leveldb\LOCK 2017-09-11 10:06 - 2017-09-11 10:06 - 000000160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\IndexedDB\http_www.innerself.com_0.indexeddb.leveldb\LOG 2017-09-11 10:06 - 2017-09-11 10:06 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\IndexedDB\http_www.innerself.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 10:03 - 2017-09-11 10:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage 2017-09-11 10:03 - 2017-09-11 10:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 10:03 - 2017-09-11 10:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 10:07 - 2017-09-11 10:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-11 10:07 - 2017-09-11 10:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-11 10:05 - 2017-09-11 10:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 10:05 - 2017-09-11 10:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 10:06 - 2017-09-11 10:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-11 10:06 - 2017-09-11 10:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-11 10:06 - 2017-09-11 10:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\http_www.innerself.com_0.localstorage 2017-09-11 10:06 - 2017-09-11 10:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\http_www.innerself.com_0.localstorage-journal 2017-09-11 10:03 - 2017-09-11 10:04 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\http_www.lillianvernon.com_0.localstorage 2017-09-11 10:03 - 2017-09-11 10:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\http_www.lillianvernon.com_0.localstorage-journal 2017-09-11 10:08 - 2017-09-11 10:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\http_www.motherearthliving.com_0.localstorage 2017-09-11 10:08 - 2017-09-11 10:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\http_www.motherearthliving.com_0.localstorage-journal 2017-09-11 10:04 - 2017-09-11 10:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 10:04 - 2017-09-11 10:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 10:05 - 2017-09-11 10:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-11 10:05 - 2017-09-11 10:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-11 10:03 - 2017-09-11 10:04 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\http_www.yummytummyaarthi.com_0.localstorage 2017-09-11 10:03 - 2017-09-11 10:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\http_www.yummytummyaarthi.com_0.localstorage-journal 2017-09-11 10:04 - 2017-09-11 10:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-11 10:04 - 2017-09-11 10:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-11 10:03 - 2017-09-11 10:04 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 10:03 - 2017-09-11 10:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 10:03 - 2017-09-11 10:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data 2017-09-11 10:03 - 2017-09-11 10:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash 2017-09-11 10:03 - 2017-09-11 10:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 10:03 - 2017-09-11 10:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 10:03 - 2017-09-11 10:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\L2NB7SCK 2017-09-11 10:03 - 2017-09-11 10:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 10:03 - 2017-09-11 10:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 10:03 - 2017-09-11 10:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6 2017-09-11 10:03 - 2017-09-11 10:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\cdn.stickyadstv.com 2017-09-11 10:03 - 2017-09-11 10:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\cdncache-a.akamaihd.net 2017-09-11 10:03 - 2017-09-11 10:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\cdncache-a.akamaihd.net\items 2017-09-11 10:03 - 2017-09-11 10:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 10:03 - 2017-09-11 10:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 10:03 - 2017-09-11 10:07 - 000000478 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 10:03 - 2017-09-11 10:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\eereader.com 2017-09-11 10:08 - 2017-09-11 10:08 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\eereader.com\analytics.sol 2017-09-11 10:04 - 2017-09-11 10:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\efreader.com 2017-09-11 10:05 - 2017-09-11 10:05 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\efreader.com\analytics.sol 2017-09-11 10:03 - 2017-09-11 10:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\egreader.com 2017-09-11 10:06 - 2017-09-11 10:06 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\egreader.com\analytics.sol 2017-09-11 10:07 - 2017-09-11 10:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\inread.anyclip.com 2017-09-11 10:07 - 2017-09-11 10:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\inread.anyclip.com\ac# 2017-09-11 10:07 - 2017-09-11 10:07 - 000000489 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-11 10:03 - 2017-09-11 10:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\macromedia.com 2017-09-11 10:03 - 2017-09-11 10:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\macromedia.com\support 2017-09-11 10:03 - 2017-09-11 10:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\macromedia.com\support\flashplayer 2017-09-11 10:03 - 2017-09-11 10:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\macromedia.com\support\flashplayer\sys 2017-09-11 10:03 - 2017-09-11 10:07 - 000000513 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 10:03 - 2017-09-11 10:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 10:03 - 2017-09-11 10:03 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 10:03 - 2017-09-11 10:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 10:03 - 2017-09-11 10:03 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 10:03 - 2017-09-11 10:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 10:03 - 2017-09-11 10:03 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 10:04 - 2017-09-11 10:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 10:04 - 2017-09-11 10:04 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 10:03 - 2017-09-11 10:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 10:03 - 2017-09-11 10:03 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 10:07 - 2017-09-11 10:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 10:07 - 2017-09-11 10:07 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data641\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ET6H3WT6\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-09 22:15 - 2017-09-12 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642 2017-09-09 22:15 - 2017-09-12 05:09 - 000270336 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Cookies 2017-09-09 22:15 - 2017-09-12 05:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Cookies-journal 2017-09-10 14:37 - 2017-09-10 14:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\databases 2017-09-10 14:37 - 2017-09-10 14:37 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\databases\Databases.db 2017-09-10 14:37 - 2017-09-10 14:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\databases\Databases.db-journal 2017-09-09 22:15 - 2017-09-12 05:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System 2017-09-10 14:44 - 2017-09-10 14:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\004 2017-09-10 14:44 - 2017-09-12 05:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\004\t 2017-09-12 05:05 - 2017-09-12 05:05 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\004\t\.usage 2017-09-12 05:05 - 2017-09-12 05:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\004\t\Paths 2017-09-12 05:05 - 2017-09-12 05:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\004\t\Paths\000003.log 2017-09-12 05:05 - 2017-09-12 05:05 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\004\t\Paths\CURRENT 2017-09-12 05:05 - 2017-09-12 05:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\004\t\Paths\LOCK 2017-09-12 05:05 - 2017-09-12 05:05 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\004\t\Paths\LOG 2017-09-12 05:05 - 2017-09-12 05:05 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\004\t\Paths\MANIFEST-000001 2017-09-10 14:39 - 2017-09-10 14:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\006 2017-09-10 14:39 - 2017-09-12 05:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\006\t 2017-09-12 05:05 - 2017-09-12 05:05 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\006\t\.usage 2017-09-10 14:43 - 2017-09-12 05:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\006\t\Paths 2017-09-10 14:43 - 2017-09-10 14:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\006\t\Paths\000003.log 2017-09-10 14:43 - 2017-09-10 14:43 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\006\t\Paths\CURRENT 2017-09-10 14:43 - 2017-09-10 14:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\006\t\Paths\LOCK 2017-09-10 14:43 - 2017-09-12 05:05 - 000000307 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\006\t\Paths\LOG 2017-09-10 14:43 - 2017-09-10 14:43 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\006\t\Paths\LOG.old 2017-09-10 14:43 - 2017-09-10 14:43 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\006\t\Paths\MANIFEST-000001 2017-09-12 05:08 - 2017-09-12 05:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\007 2017-09-12 05:08 - 2017-09-12 05:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\007\t 2017-09-09 22:15 - 2017-09-12 05:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\Origins 2017-09-09 22:15 - 2017-09-12 05:10 - 000000576 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\Origins\000003.log 2017-09-09 22:15 - 2017-09-09 22:15 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\Origins\CURRENT 2017-09-09 22:15 - 2017-09-09 22:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\Origins\LOCK 2017-09-09 22:15 - 2017-09-12 05:08 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\Origins\LOG 2017-09-09 22:15 - 2017-09-12 05:05 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\Origins\LOG.old 2017-09-09 22:15 - 2017-09-09 22:15 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\Origins\MANIFEST-000001 2017-09-09 22:23 - 2017-09-09 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\File System\Origins\lost 2017-09-10 14:37 - 2017-09-12 05:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\IndexedDB 2017-09-10 14:37 - 2017-09-10 14:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\IndexedDB\http_www.cableone.net_0.indexeddb.leveldb 2017-09-10 14:37 - 2017-09-10 14:37 - 000000190 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\IndexedDB\http_www.cableone.net_0.indexeddb.leveldb\000003.log 2017-09-10 14:37 - 2017-09-10 14:37 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\IndexedDB\http_www.cableone.net_0.indexeddb.leveldb\CURRENT 2017-09-10 14:37 - 2017-09-10 14:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\IndexedDB\http_www.cableone.net_0.indexeddb.leveldb\LOCK 2017-09-10 14:37 - 2017-09-10 14:37 - 000000160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\IndexedDB\http_www.cableone.net_0.indexeddb.leveldb\LOG 2017-09-10 14:37 - 2017-09-10 14:37 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\IndexedDB\http_www.cableone.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 05:05 - 2017-09-12 05:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\IndexedDB\http_www.foxnews.com_0.indexeddb.leveldb 2017-09-12 05:05 - 2017-09-12 05:05 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\IndexedDB\http_www.foxnews.com_0.indexeddb.leveldb\000003.log 2017-09-12 05:05 - 2017-09-12 05:05 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\IndexedDB\http_www.foxnews.com_0.indexeddb.leveldb\CURRENT 2017-09-12 05:05 - 2017-09-12 05:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\IndexedDB\http_www.foxnews.com_0.indexeddb.leveldb\LOCK 2017-09-12 05:05 - 2017-09-12 05:05 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\IndexedDB\http_www.foxnews.com_0.indexeddb.leveldb\LOG 2017-09-12 05:05 - 2017-09-12 05:05 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\IndexedDB\http_www.foxnews.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 14:43 - 2017-09-10 14:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\IndexedDB\http_www.history.com_0.indexeddb.leveldb 2017-09-10 14:43 - 2017-09-10 14:43 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\IndexedDB\http_www.history.com_0.indexeddb.leveldb\000003.log 2017-09-10 14:43 - 2017-09-10 14:43 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\IndexedDB\http_www.history.com_0.indexeddb.leveldb\CURRENT 2017-09-10 14:43 - 2017-09-10 14:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\IndexedDB\http_www.history.com_0.indexeddb.leveldb\LOCK 2017-09-10 14:43 - 2017-09-10 14:43 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\IndexedDB\http_www.history.com_0.indexeddb.leveldb\LOG 2017-09-10 14:43 - 2017-09-10 14:43 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\IndexedDB\http_www.history.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-09 22:15 - 2017-09-12 05:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage 2017-09-09 22:22 - 2017-09-09 22:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-09 22:22 - 2017-09-09 22:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-12 05:07 - 2017-09-12 05:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-12 05:07 - 2017-09-12 05:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 14:37 - 2017-09-10 14:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 14:37 - 2017-09-10 14:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-09 22:18 - 2017-09-09 22:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_connexity.net_0.localstorage 2017-09-09 22:18 - 2017-09-09 22:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-12 05:03 - 2017-09-12 05:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_nflfilms.nfl.com_0.localstorage 2017-09-12 05:03 - 2017-09-12 05:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_nflfilms.nfl.com_0.localstorage-journal 2017-09-09 22:15 - 2017-09-09 22:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_universal.iperceptions.com_0.localstorage 2017-09-09 22:15 - 2017-09-09 22:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_universal.iperceptions.com_0.localstorage-journal 2017-09-10 14:37 - 2017-09-10 14:38 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_wwmt.com_0.localstorage 2017-09-10 14:37 - 2017-09-10 14:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_wwmt.com_0.localstorage-journal 2017-09-10 14:41 - 2017-09-10 14:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-10 14:41 - 2017-09-10 14:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-09 22:20 - 2017-09-09 22:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.bendbulletin.com_0.localstorage 2017-09-09 22:20 - 2017-09-09 22:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.bendbulletin.com_0.localstorage-journal 2017-09-09 22:20 - 2017-09-09 22:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.bhg.com_0.localstorage 2017-09-09 22:20 - 2017-09-09 22:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.bhg.com_0.localstorage-journal 2017-09-12 05:08 - 2017-09-12 05:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.bunsinmyoven.com_0.localstorage 2017-09-12 05:08 - 2017-09-12 05:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.bunsinmyoven.com_0.localstorage-journal 2017-09-10 14:37 - 2017-09-10 14:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.cableone.net_0.localstorage 2017-09-10 14:37 - 2017-09-10 14:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.cableone.net_0.localstorage-journal 2017-09-09 22:18 - 2017-09-12 05:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-09 22:18 - 2017-09-12 05:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-12 05:05 - 2017-09-12 05:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.complex.com_0.localstorage 2017-09-12 05:05 - 2017-09-12 05:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-09 22:15 - 2017-09-09 22:17 - 000011264 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.essence.com_0.localstorage 2017-09-09 22:15 - 2017-09-09 22:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.essence.com_0.localstorage-journal 2017-09-09 22:19 - 2017-09-09 22:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.finecooking.com_0.localstorage 2017-09-09 22:19 - 2017-09-09 22:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.finecooking.com_0.localstorage-journal 2017-09-10 14:41 - 2017-09-10 14:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.food.com_0.localstorage 2017-09-10 14:41 - 2017-09-10 14:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-12 05:05 - 2017-09-12 05:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.foxnews.com_0.localstorage 2017-09-12 05:05 - 2017-09-12 05:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.foxnews.com_0.localstorage-journal 2017-09-10 14:42 - 2017-09-10 14:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.history.com_0.localstorage 2017-09-10 14:42 - 2017-09-10 14:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.history.com_0.localstorage-journal 2017-09-09 22:21 - 2017-09-10 14:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.instyle.com_0.localstorage 2017-09-09 22:21 - 2017-09-10 14:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-09 22:17 - 2017-09-09 22:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-09 22:17 - 2017-09-09 22:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-12 05:04 - 2017-09-12 05:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-12 05:04 - 2017-09-12 05:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-09 22:18 - 2017-09-09 22:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-09 22:18 - 2017-09-09 22:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-10 14:42 - 2017-09-10 14:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.macworld.com_0.localstorage 2017-09-10 14:42 - 2017-09-10 14:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-10 14:39 - 2017-09-10 14:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.nbc.com_0.localstorage 2017-09-10 14:39 - 2017-09-10 14:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.nbc.com_0.localstorage-journal 2017-09-10 14:39 - 2017-09-10 14:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 14:39 - 2017-09-10 14:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 14:40 - 2017-09-10 14:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.parents.com_0.localstorage 2017-09-10 14:40 - 2017-09-10 14:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-12 05:07 - 2017-09-12 05:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.reuters.com_0.localstorage 2017-09-12 05:07 - 2017-09-12 05:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-09 22:15 - 2017-09-09 22:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.vw.com_0.localstorage 2017-09-09 22:15 - 2017-09-09 22:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\http_www.vw.com_0.localstorage-journal 2017-09-09 22:15 - 2017-09-09 22:15 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\https_a8380451206.cdn.optimizely.com_0.localstorage 2017-09-09 22:15 - 2017-09-09 22:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\https_a8380451206.cdn.optimizely.com_0.localstorage-journal 2017-09-10 14:37 - 2017-09-10 14:37 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 14:37 - 2017-09-10 14:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-09 22:18 - 2017-09-09 22:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\https_connexity.net_0.localstorage 2017-09-09 22:18 - 2017-09-09 22:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 14:39 - 2017-09-12 05:07 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-10 14:39 - 2017-09-12 05:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-09 22:15 - 2017-09-09 22:15 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\https_volkswagenvwcom.mpeasylink.com_0.localstorage 2017-09-09 22:15 - 2017-09-09 22:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\https_volkswagenvwcom.mpeasylink.com_0.localstorage-journal 2017-09-09 22:15 - 2017-09-09 22:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\https_www.instagram.com_0.localstorage 2017-09-09 22:15 - 2017-09-09 22:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\https_www.instagram.com_0.localstorage-journal 2017-09-12 05:01 - 2017-09-12 05:01 - 001887232 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\https_www.pacogames.com_0.localstorage 2017-09-12 05:01 - 2017-09-12 05:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\https_www.pacogames.com_0.localstorage-journal 2017-09-12 05:01 - 2017-09-12 05:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\https_www.trainz.com_0.localstorage 2017-09-12 05:01 - 2017-09-12 05:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Local Storage\https_www.trainz.com_0.localstorage-journal 2017-09-09 22:15 - 2017-09-09 22:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data 2017-09-09 22:15 - 2017-09-12 05:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash 2017-09-09 22:15 - 2017-09-09 22:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-09 22:15 - 2017-09-09 22:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-09 22:15 - 2017-09-09 22:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\CZSQNJ26 2017-09-09 22:15 - 2017-09-09 22:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot 2017-09-09 22:15 - 2017-09-09 22:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-09 22:15 - 2017-09-10 14:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9 2017-09-10 14:42 - 2017-09-10 14:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\cdn.dashbid.io 2017-09-10 14:42 - 2017-09-10 14:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\cdn.dashbid.io\prod 2017-09-10 14:42 - 2017-09-10 14:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-10 14:42 - 2017-09-10 14:42 - 000000069 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-09 22:15 - 2017-09-12 05:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\cdn.stickyadstv.com 2017-09-09 22:15 - 2017-09-12 05:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\eereader.com 2017-09-09 22:17 - 2017-09-10 14:42 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\eereader.com\analytics.sol 2017-09-09 22:17 - 2017-09-12 05:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\efreader.com 2017-09-09 22:18 - 2017-09-12 05:10 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\efreader.com\analytics.sol 2017-09-09 22:15 - 2017-09-12 05:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\egreader.com 2017-09-09 22:22 - 2017-09-09 22:22 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\egreader.com\analytics.sol 2017-09-09 22:21 - 2017-09-09 22:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\inread.anyclip.com 2017-09-09 22:21 - 2017-09-09 22:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\inread.anyclip.com\ac# 2017-09-09 22:21 - 2017-09-09 22:21 - 000000441 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-09 22:15 - 2017-09-09 22:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\macromedia.com 2017-09-09 22:15 - 2017-09-09 22:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\macromedia.com\support 2017-09-09 22:15 - 2017-09-09 22:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\macromedia.com\support\flashplayer 2017-09-09 22:15 - 2017-09-10 14:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\macromedia.com\support\flashplayer\sys 2017-09-09 22:15 - 2017-09-10 14:42 - 000000504 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 14:42 - 2017-09-10 14:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-10 14:42 - 2017-09-10 14:42 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-09 22:15 - 2017-09-09 22:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-09 22:15 - 2017-09-09 22:15 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-09 22:15 - 2017-09-09 22:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-09 22:15 - 2017-09-09 22:15 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-09 22:17 - 2017-09-09 22:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-09 22:17 - 2017-09-09 22:17 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-09 22:15 - 2017-09-09 22:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-09 22:15 - 2017-09-09 22:15 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-09 22:21 - 2017-09-09 22:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-09 22:21 - 2017-09-09 22:21 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data642\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8DR7SPJ9\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-10 13:06 - 2017-09-11 09:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643 2017-09-10 13:06 - 2017-09-11 07:25 - 000199680 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Cookies 2017-09-10 13:06 - 2017-09-11 07:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Cookies-journal 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\databases 2017-09-10 13:06 - 2017-09-10 13:06 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\databases\Databases.db 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\databases\Databases.db-journal 2017-09-11 07:25 - 2017-09-11 07:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\File System 2017-09-11 07:25 - 2017-09-11 07:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\File System\000 2017-09-11 07:25 - 2017-09-11 07:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\File System\000\t 2017-09-11 07:25 - 2017-09-11 07:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\File System\Origins 2017-09-11 07:25 - 2017-09-11 07:25 - 000000098 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\File System\Origins\000003.log 2017-09-11 07:25 - 2017-09-11 07:25 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\File System\Origins\CURRENT 2017-09-11 07:25 - 2017-09-11 07:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\File System\Origins\LOCK 2017-09-11 07:25 - 2017-09-11 07:25 - 000000128 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\File System\Origins\LOG 2017-09-11 07:25 - 2017-09-11 07:25 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\File System\Origins\MANIFEST-000001 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\IndexedDB 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\IndexedDB\https_www.cnet.com_0.indexeddb.leveldb 2017-09-10 13:06 - 2017-09-10 13:06 - 000000176 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\IndexedDB\https_www.cnet.com_0.indexeddb.leveldb\000003.log 2017-09-10 13:06 - 2017-09-10 13:06 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\IndexedDB\https_www.cnet.com_0.indexeddb.leveldb\CURRENT 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\IndexedDB\https_www.cnet.com_0.indexeddb.leveldb\LOCK 2017-09-10 13:06 - 2017-09-10 13:06 - 000000157 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\IndexedDB\https_www.cnet.com_0.indexeddb.leveldb\LOG 2017-09-10 13:06 - 2017-09-10 13:06 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\IndexedDB\https_www.cnet.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 13:06 - 2017-09-11 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage 2017-09-10 13:08 - 2017-09-10 13:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 13:08 - 2017-09-10 13:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 07:17 - 2017-09-11 07:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 07:17 - 2017-09-11 07:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 13:10 - 2017-09-10 13:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\http_connexity.net_0.localstorage 2017-09-10 13:10 - 2017-09-10 13:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 07:19 - 2017-09-11 07:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 07:19 - 2017-09-11 07:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 07:21 - 2017-09-11 07:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-11 07:21 - 2017-09-11 07:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-10 13:09 - 2017-09-10 13:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\http_www.latimes.com_0.localstorage 2017-09-10 13:09 - 2017-09-10 13:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-11 07:17 - 2017-09-11 07:18 - 000012288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\http_www.msnbc.com_0.localstorage 2017-09-11 07:17 - 2017-09-11 07:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\http_www.msnbc.com_0.localstorage-journal 2017-09-10 13:08 - 2017-09-10 13:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 13:08 - 2017-09-10 13:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 13:10 - 2017-09-10 13:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\https_connexity.net_0.localstorage 2017-09-10 13:10 - 2017-09-10 13:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 13:06 - 2017-09-10 13:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\https_disqus.com_0.localstorage 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\https_disqus.com_0.localstorage-journal 2017-09-10 13:06 - 2017-09-10 13:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\https_tpc.googlesyndication.com_0.localstorage 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\https_tpc.googlesyndication.com_0.localstorage-journal 2017-09-10 13:06 - 2017-09-10 13:07 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\https_www.cnet.com_0.localstorage 2017-09-10 13:06 - 2017-09-10 13:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\https_www.cnet.com_0.localstorage-journal 2017-09-10 13:06 - 2017-09-10 13:06 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\https_www.lightboxcdn.com_0.localstorage 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\https_www.lightboxcdn.com_0.localstorage-journal 2017-09-11 07:17 - 2017-09-11 07:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\https_www.xoom.com_0.localstorage 2017-09-11 07:17 - 2017-09-11 07:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Local Storage\https_www.xoom.com_0.localstorage-journal 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data 2017-09-10 13:06 - 2017-09-11 07:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\7RG2YZQH 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 13:06 - 2017-09-11 07:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW 2017-09-10 13:08 - 2017-09-11 07:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\cdn.stickyadstv.com 2017-09-10 13:06 - 2017-09-11 07:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\eereader.com 2017-09-10 13:07 - 2017-09-11 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\efreader.com 2017-09-11 07:27 - 2017-09-11 07:27 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\efreader.com\analytics.sol 2017-09-10 13:08 - 2017-09-11 07:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\egreader.com 2017-09-11 07:17 - 2017-09-11 07:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\entitlement.auth.adobe.com 2017-09-11 07:17 - 2017-09-11 07:17 - 000000061 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\entitlement.auth.adobe.com\authorization_access.sol 2017-09-11 07:17 - 2017-09-11 07:17 - 000000048 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\entitlement.auth.adobe.com\social_data.sol 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\macromedia.com 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\macromedia.com\support 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\macromedia.com\support\flashplayer 2017-09-10 13:06 - 2017-09-11 07:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\macromedia.com\support\flashplayer\sys 2017-09-10 13:06 - 2017-09-11 07:18 - 000000517 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 13:08 - 2017-09-10 13:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 13:08 - 2017-09-10 13:08 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 13:06 - 2017-09-10 13:06 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 13:07 - 2017-09-10 13:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 13:07 - 2017-09-10 13:07 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 13:08 - 2017-09-10 13:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 13:08 - 2017-09-10 13:08 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 07:17 - 2017-09-11 07:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\macromedia.com\support\flashplayer\sys\#entitlement.auth.adobe.com 2017-09-11 07:17 - 2017-09-11 07:17 - 000000096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\macromedia.com\support\flashplayer\sys\#entitlement.auth.adobe.com\settings.sol 2017-09-11 07:18 - 2017-09-11 07:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\macromedia.com\support\flashplayer\sys\#pdk.theplatform.com 2017-09-11 07:18 - 2017-09-11 07:18 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\macromedia.com\support\flashplayer\sys\#pdk.theplatform.com\settings.sol 2017-09-11 07:17 - 2017-09-11 07:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\pdk.theplatform.com 2017-09-11 07:17 - 2017-09-11 07:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\pdk.theplatform.com\current 2017-09-11 07:17 - 2017-09-11 07:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\pdk.theplatform.com\current\pdk 2017-09-11 07:17 - 2017-09-11 07:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\pdk.theplatform.com\current\pdk\swf 2017-09-11 07:17 - 2017-09-11 07:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\pdk.theplatform.com\current\pdk\swf\flvPlayer.swf 2017-09-11 07:18 - 2017-09-11 07:18 - 000000128 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\S5F53UQW\pdk.theplatform.com\current\pdk\swf\flvPlayer.swf\tpPdk.sol 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Service Worker 2017-09-10 13:06 - 2017-09-11 07:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Service Worker\Database 2017-09-10 13:06 - 2017-09-10 13:06 - 000000900 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Service Worker\Database\000003.log 2017-09-10 13:06 - 2017-09-10 13:06 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Service Worker\Database\CURRENT 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Service Worker\Database\LOCK 2017-09-10 13:06 - 2017-09-11 07:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Service Worker\Database\LOG 2017-09-10 13:06 - 2017-09-10 13:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Service Worker\Database\LOG.old 2017-09-10 13:06 - 2017-09-10 13:06 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Service Worker\Database\MANIFEST-000001 2017-09-10 13:06 - 2017-09-10 13:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Service Worker\ScriptCache 2017-09-10 13:06 - 2017-09-10 13:06 - 000006990 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Service Worker\ScriptCache\2cc80dabc69f58b6_0 2017-09-10 13:06 - 2017-09-10 13:06 - 000000061 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Service Worker\ScriptCache\2cc80dabc69f58b6_1 2017-09-10 13:06 - 2017-09-10 13:06 - 000055657 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Service Worker\ScriptCache\4cb013792b196a35_0 2017-09-10 13:06 - 2017-09-10 13:06 - 000000061 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Service Worker\ScriptCache\4cb013792b196a35_1 2017-09-10 13:06 - 2017-09-10 13:06 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Service Worker\ScriptCache\index 2017-09-10 13:06 - 2017-09-10 13:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Service Worker\ScriptCache\index-dir 2017-09-10 13:06 - 2017-09-10 13:07 - 000000092 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data643\Service Worker\ScriptCache\index-dir\the-real-index 2017-09-11 06:36 - 2017-09-11 13:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644 2017-09-11 06:36 - 2017-09-11 12:47 - 000256000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Cookies 2017-09-11 06:36 - 2017-09-11 12:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Cookies-journal 2017-09-11 06:37 - 2017-09-11 06:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\databases 2017-09-11 06:37 - 2017-09-11 06:37 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\databases\Databases.db 2017-09-11 06:37 - 2017-09-11 06:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\databases\Databases.db-journal 2017-09-11 06:37 - 2017-09-11 06:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\databases\https_camster.com_0 2017-09-11 06:37 - 2017-09-11 06:37 - 000020480 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\databases\https_camster.com_0\1 2017-09-11 06:44 - 2017-09-11 12:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\File System 2017-09-11 06:44 - 2017-09-11 06:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\File System\000 2017-09-11 06:44 - 2017-09-11 06:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\File System\000\t 2017-09-11 12:39 - 2017-09-11 12:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\File System\001 2017-09-11 12:39 - 2017-09-11 12:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\File System\001\t 2017-09-11 12:43 - 2017-09-11 12:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\File System\002 2017-09-11 12:43 - 2017-09-11 12:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\File System\002\t 2017-09-11 12:45 - 2017-09-11 12:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\File System\003 2017-09-11 12:45 - 2017-09-11 12:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\File System\003\t 2017-09-11 06:44 - 2017-09-11 12:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\File System\Origins 2017-09-11 06:44 - 2017-09-11 12:47 - 000000305 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\File System\Origins\000003.log 2017-09-11 06:44 - 2017-09-11 06:44 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\File System\Origins\CURRENT 2017-09-11 06:44 - 2017-09-11 06:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\File System\Origins\LOCK 2017-09-11 06:44 - 2017-09-11 12:45 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\File System\Origins\LOG 2017-09-11 06:44 - 2017-09-11 12:43 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\File System\Origins\LOG.old 2017-09-11 06:44 - 2017-09-11 06:44 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\File System\Origins\MANIFEST-000001 2017-09-11 06:36 - 2017-09-11 12:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage 2017-09-11 12:41 - 2017-09-11 12:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 12:41 - 2017-09-11 12:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 12:39 - 2017-09-11 12:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 12:39 - 2017-09-11 12:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-11 06:38 - 2017-09-11 06:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_connexity.net_0.localstorage 2017-09-11 06:38 - 2017-09-11 06:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 06:37 - 2017-09-11 06:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_disqusads.com_0.localstorage 2017-09-11 06:37 - 2017-09-11 06:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_disqusads.com_0.localstorage-journal 2017-09-11 12:39 - 2017-09-11 12:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 12:39 - 2017-09-11 12:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 06:41 - 2017-09-11 06:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-11 06:41 - 2017-09-11 06:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-11 06:39 - 2017-09-11 12:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 06:39 - 2017-09-11 12:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 06:40 - 2017-09-11 06:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-11 06:40 - 2017-09-11 06:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-11 06:40 - 2017-09-11 06:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.instyle.com_0.localstorage 2017-09-11 06:40 - 2017-09-11 06:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 12:42 - 2017-09-11 12:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.insurancejournal.tv_0.localstorage 2017-09-11 12:42 - 2017-09-11 12:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.insurancejournal.tv_0.localstorage-journal 2017-09-11 06:40 - 2017-09-11 06:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 06:40 - 2017-09-11 06:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-11 06:42 - 2017-09-11 06:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.msnbc.com_0.localstorage 2017-09-11 06:42 - 2017-09-11 06:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.msnbc.com_0.localstorage-journal 2017-09-11 06:38 - 2017-09-11 06:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 06:38 - 2017-09-11 06:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 12:42 - 2017-09-11 12:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.parents.com_0.localstorage 2017-09-11 12:42 - 2017-09-11 12:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-11 12:39 - 2017-09-11 12:40 - 000012288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.shape.com_0.localstorage 2017-09-11 12:39 - 2017-09-11 12:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.shape.com_0.localstorage-journal 2017-09-11 12:45 - 2017-09-11 12:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.torontosun.com_0.localstorage 2017-09-11 12:45 - 2017-09-11 12:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.torontosun.com_0.localstorage-journal 2017-09-11 06:36 - 2017-09-11 06:38 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.wnd.com_0.localstorage 2017-09-11 06:36 - 2017-09-11 06:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\http_www.wnd.com_0.localstorage-journal 2017-09-11 12:45 - 2017-09-11 12:45 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 12:45 - 2017-09-11 12:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 06:37 - 2017-09-11 06:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\https_camster.com_0.localstorage 2017-09-11 06:37 - 2017-09-11 06:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\https_camster.com_0.localstorage-journal 2017-09-11 06:37 - 2017-09-11 06:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\https_configusa.veinteractive.com_0.localstorage 2017-09-11 06:37 - 2017-09-11 06:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\https_configusa.veinteractive.com_0.localstorage-journal 2017-09-11 06:38 - 2017-09-11 06:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\https_connexity.net_0.localstorage 2017-09-11 06:38 - 2017-09-11 06:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 06:37 - 2017-09-11 12:39 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 06:37 - 2017-09-11 12:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 06:37 - 2017-09-11 06:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\https_disqus.com_0.localstorage 2017-09-11 06:37 - 2017-09-11 06:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\https_disqus.com_0.localstorage-journal 2017-09-11 06:37 - 2017-09-11 06:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 06:37 - 2017-09-11 06:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 06:37 - 2017-09-11 12:39 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 06:37 - 2017-09-11 12:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 06:37 - 2017-09-11 06:38 - 000054272 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\https_www.shoes.com_0.localstorage 2017-09-11 06:37 - 2017-09-11 06:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Local Storage\https_www.shoes.com_0.localstorage-journal 2017-09-11 06:36 - 2017-09-11 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data 2017-09-11 06:36 - 2017-09-11 12:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash 2017-09-11 06:36 - 2017-09-11 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 06:36 - 2017-09-11 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 06:36 - 2017-09-11 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\ZUY8YVV8 2017-09-11 06:36 - 2017-09-11 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 06:36 - 2017-09-11 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 06:36 - 2017-09-11 12:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5 2017-09-11 12:42 - 2017-09-11 12:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\aka.spotxcdn.com 2017-09-11 06:37 - 2017-09-11 12:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\cdn.stickyadstv.com 2017-09-11 06:37 - 2017-09-11 06:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\cdncache-a.akamaihd.net 2017-09-11 06:37 - 2017-09-11 06:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\cdncache-a.akamaihd.net\items 2017-09-11 06:37 - 2017-09-11 06:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 06:37 - 2017-09-11 12:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 06:37 - 2017-09-11 12:43 - 000000489 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 06:36 - 2017-09-11 12:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\eereader.com 2017-09-11 12:41 - 2017-09-11 12:41 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\eereader.com\analytics.sol 2017-09-11 06:38 - 2017-09-11 12:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\efreader.com 2017-09-11 06:46 - 2017-09-11 12:47 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\efreader.com\analytics.sol 2017-09-11 06:37 - 2017-09-11 12:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\egreader.com 2017-09-11 12:44 - 2017-09-11 12:44 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\egreader.com\analytics.sol 2017-09-11 06:36 - 2017-09-11 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\macromedia.com 2017-09-11 06:36 - 2017-09-11 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\macromedia.com\support 2017-09-11 06:36 - 2017-09-11 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\macromedia.com\support\flashplayer 2017-09-11 06:36 - 2017-09-11 12:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\macromedia.com\support\flashplayer\sys 2017-09-11 06:36 - 2017-09-11 12:42 - 000000511 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 12:42 - 2017-09-11 12:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\macromedia.com\support\flashplayer\sys\#aka.spotxcdn.com 2017-09-11 12:42 - 2017-09-11 12:42 - 000000086 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\macromedia.com\support\flashplayer\sys\#aka.spotxcdn.com\settings.sol 2017-09-11 06:37 - 2017-09-11 06:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 06:37 - 2017-09-11 06:37 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 06:37 - 2017-09-11 06:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 06:37 - 2017-09-11 06:37 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 06:36 - 2017-09-11 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 06:36 - 2017-09-11 06:36 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 06:38 - 2017-09-11 06:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 06:38 - 2017-09-11 06:38 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 06:37 - 2017-09-11 06:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 06:37 - 2017-09-11 06:37 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data644\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E3DLQRZ5\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 22:23 - 2017-09-10 23:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645 2017-09-10 22:23 - 2017-09-10 22:31 - 000190464 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Cookies 2017-09-10 22:23 - 2017-09-10 22:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Cookies-journal 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\databases 2017-09-10 22:23 - 2017-09-10 22:23 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\databases\Databases.db 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\databases\Databases.db-journal 2017-09-10 22:23 - 2017-09-10 22:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\File System 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\File System\000 2017-09-10 22:23 - 2017-09-10 22:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\File System\000\t 2017-09-10 22:26 - 2017-09-10 22:26 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\File System\000\t\.usage 2017-09-10 22:26 - 2017-09-10 22:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\File System\000\t\Paths 2017-09-10 22:26 - 2017-09-10 22:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\File System\000\t\Paths\000003.log 2017-09-10 22:26 - 2017-09-10 22:26 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\File System\000\t\Paths\CURRENT 2017-09-10 22:26 - 2017-09-10 22:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\File System\000\t\Paths\LOCK 2017-09-10 22:26 - 2017-09-10 22:26 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\File System\000\t\Paths\LOG 2017-09-10 22:26 - 2017-09-10 22:26 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\File System\000\t\Paths\MANIFEST-000001 2017-09-10 22:30 - 2017-09-10 22:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\File System\001 2017-09-10 22:30 - 2017-09-10 22:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\File System\001\t 2017-09-10 22:23 - 2017-09-10 22:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\File System\Origins 2017-09-10 22:23 - 2017-09-10 22:32 - 000000166 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\File System\Origins\000003.log 2017-09-10 22:23 - 2017-09-10 22:23 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\File System\Origins\CURRENT 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\File System\Origins\LOCK 2017-09-10 22:23 - 2017-09-10 22:30 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\File System\Origins\LOG 2017-09-10 22:23 - 2017-09-10 22:26 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\File System\Origins\LOG.old 2017-09-10 22:23 - 2017-09-10 22:23 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\File System\Origins\MANIFEST-000001 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\IndexedDB 2017-09-10 22:23 - 2017-09-10 22:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\IndexedDB\http_www.roadrunnersports.com_0.indexeddb.leveldb 2017-09-10 22:23 - 2017-09-10 22:23 - 000000400 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\IndexedDB\http_www.roadrunnersports.com_0.indexeddb.leveldb\000003.log 2017-09-10 22:23 - 2017-09-10 22:23 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\IndexedDB\http_www.roadrunnersports.com_0.indexeddb.leveldb\CURRENT 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\IndexedDB\http_www.roadrunnersports.com_0.indexeddb.leveldb\LOCK 2017-09-10 22:23 - 2017-09-10 22:26 - 000000376 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\IndexedDB\http_www.roadrunnersports.com_0.indexeddb.leveldb\LOG 2017-09-10 22:23 - 2017-09-10 22:24 - 000000376 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\IndexedDB\http_www.roadrunnersports.com_0.indexeddb.leveldb\LOG.old 2017-09-10 22:23 - 2017-09-10 22:23 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\IndexedDB\http_www.roadrunnersports.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 22:23 - 2017-09-10 22:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage 2017-09-10 22:23 - 2017-09-10 22:24 - 000015360 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_allrecipes.com_0.localstorage 2017-09-10 22:23 - 2017-09-10 22:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-10 22:25 - 2017-09-10 22:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 22:25 - 2017-09-10 22:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 22:23 - 2017-09-10 22:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 22:23 - 2017-09-10 22:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_install.online-live-streaming.com_0.localstorage 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_install.online-live-streaming.com_0.localstorage-journal 2017-09-10 22:23 - 2017-09-10 22:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 22:23 - 2017-09-10 22:23 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 22:27 - 2017-09-10 22:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-10 22:27 - 2017-09-10 22:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-10 22:25 - 2017-09-10 22:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 22:25 - 2017-09-10 22:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 22:26 - 2017-09-10 22:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-10 22:26 - 2017-09-10 22:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-10 22:26 - 2017-09-10 22:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 22:26 - 2017-09-10 22:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 22:28 - 2017-09-10 22:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_www.kcra.com_0.localstorage 2017-09-10 22:28 - 2017-09-10 22:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_www.kcra.com_0.localstorage-journal 2017-09-10 22:26 - 2017-09-10 22:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-10 22:26 - 2017-09-10 22:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-10 22:28 - 2017-09-10 22:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 22:28 - 2017-09-10 22:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 22:23 - 2017-09-10 22:27 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_www.roadrunnersports.com_0.localstorage 2017-09-10 22:23 - 2017-09-10 22:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\http_www.roadrunnersports.com_0.localstorage-journal 2017-09-10 22:23 - 2017-09-10 22:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\https_assets.bounceexchange.com_0.localstorage 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\https_assets.bounceexchange.com_0.localstorage-journal 2017-09-10 22:26 - 2017-09-10 22:26 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 22:26 - 2017-09-10 22:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 22:24 - 2017-09-10 22:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\https_content.shoprunner.com_0.localstorage 2017-09-10 22:24 - 2017-09-10 22:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\https_content.shoprunner.com_0.localstorage-journal 2017-09-10 22:23 - 2017-09-10 22:24 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 22:23 - 2017-09-10 22:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 22:23 - 2017-09-10 22:24 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 22:23 - 2017-09-10 22:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 22:23 - 2017-09-10 22:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\https_tpc.googlesyndication.com_0.localstorage 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Local Storage\https_tpc.googlesyndication.com_0.localstorage-journal 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data 2017-09-10 22:23 - 2017-09-10 22:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\3TG4Y6Z3 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 22:23 - 2017-09-10 22:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9 2017-09-10 22:23 - 2017-09-10 22:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\cdn.stickyadstv.com 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\cdncache-a.akamaihd.net 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\cdncache-a.akamaihd.net\items 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 22:23 - 2017-09-10 22:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 22:23 - 2017-09-10 22:27 - 000000579 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 22:23 - 2017-09-10 22:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\eereader.com 2017-09-10 22:24 - 2017-09-10 22:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\efreader.com 2017-09-10 22:32 - 2017-09-10 22:32 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\efreader.com\analytics.sol 2017-09-10 22:23 - 2017-09-10 22:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\egreader.com 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\macromedia.com 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\macromedia.com\support 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\macromedia.com\support\flashplayer 2017-09-10 22:23 - 2017-09-10 22:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\macromedia.com\support\flashplayer\sys 2017-09-10 22:23 - 2017-09-10 22:24 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 22:23 - 2017-09-10 22:23 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 22:23 - 2017-09-10 22:23 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 22:23 - 2017-09-10 22:23 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 22:24 - 2017-09-10 22:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 22:24 - 2017-09-10 22:24 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 22:23 - 2017-09-10 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 22:23 - 2017-09-10 22:23 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data645\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\J3UUQUM9\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 00:45 - 2017-09-11 07:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646 2017-09-10 00:45 - 2017-09-11 07:05 - 000257024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Cookies 2017-09-10 00:45 - 2017-09-11 07:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Cookies-journal 2017-09-11 06:57 - 2017-09-11 06:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\databases 2017-09-11 06:57 - 2017-09-11 06:57 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\databases\Databases.db 2017-09-11 06:57 - 2017-09-11 06:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\databases\Databases.db-journal 2017-09-10 00:46 - 2017-09-11 07:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System 2017-09-10 00:46 - 2017-09-10 00:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\000 2017-09-10 00:46 - 2017-09-11 06:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\000\t 2017-09-11 06:57 - 2017-09-11 06:57 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\000\t\.usage 2017-09-11 06:57 - 2017-09-11 06:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\000\t\Paths 2017-09-11 06:57 - 2017-09-11 06:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\000\t\Paths\000003.log 2017-09-11 06:57 - 2017-09-11 06:57 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\000\t\Paths\CURRENT 2017-09-11 06:57 - 2017-09-11 06:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\000\t\Paths\LOCK 2017-09-11 06:57 - 2017-09-11 06:57 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\000\t\Paths\LOG 2017-09-11 06:57 - 2017-09-11 06:57 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\000\t\Paths\MANIFEST-000001 2017-09-10 16:20 - 2017-09-10 16:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\001 2017-09-10 16:20 - 2017-09-11 06:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\001\t 2017-09-11 06:57 - 2017-09-11 06:57 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\001\t\.usage 2017-09-11 06:57 - 2017-09-11 06:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\001\t\Paths 2017-09-11 06:57 - 2017-09-11 06:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\001\t\Paths\000003.log 2017-09-11 06:57 - 2017-09-11 06:57 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\001\t\Paths\CURRENT 2017-09-11 06:57 - 2017-09-11 06:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\001\t\Paths\LOCK 2017-09-11 06:57 - 2017-09-11 06:57 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\001\t\Paths\LOG 2017-09-11 06:57 - 2017-09-11 06:57 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\001\t\Paths\MANIFEST-000001 2017-09-11 07:04 - 2017-09-11 07:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\002 2017-09-11 07:04 - 2017-09-11 07:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\002\t 2017-09-10 00:46 - 2017-09-11 07:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\Origins 2017-09-10 00:46 - 2017-09-11 07:05 - 000000236 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\Origins\000003.log 2017-09-10 00:46 - 2017-09-10 00:46 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\Origins\CURRENT 2017-09-10 00:46 - 2017-09-10 00:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\Origins\LOCK 2017-09-10 00:46 - 2017-09-11 07:05 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\Origins\LOG 2017-09-10 00:46 - 2017-09-11 06:57 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\Origins\LOG.old 2017-09-10 00:46 - 2017-09-10 00:46 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\File System\Origins\MANIFEST-000001 2017-09-11 06:57 - 2017-09-11 06:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\IndexedDB 2017-09-11 06:57 - 2017-09-11 06:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\IndexedDB\https_tpc.googlesyndication.com_0.indexeddb.leveldb 2017-09-11 06:57 - 2017-09-11 06:57 - 000000202 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\IndexedDB\https_tpc.googlesyndication.com_0.indexeddb.leveldb\000003.log 2017-09-11 06:57 - 2017-09-11 06:57 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\IndexedDB\https_tpc.googlesyndication.com_0.indexeddb.leveldb\CURRENT 2017-09-11 06:57 - 2017-09-11 06:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\IndexedDB\https_tpc.googlesyndication.com_0.indexeddb.leveldb\LOCK 2017-09-11 06:57 - 2017-09-11 06:57 - 000000169 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\IndexedDB\https_tpc.googlesyndication.com_0.indexeddb.leveldb\LOG 2017-09-11 06:57 - 2017-09-11 06:57 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\IndexedDB\https_tpc.googlesyndication.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 00:45 - 2017-09-11 07:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage 2017-09-10 16:26 - 2017-09-10 16:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 16:26 - 2017-09-10 16:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 16:24 - 2017-09-10 16:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_connexity.net_0.localstorage 2017-09-10 16:24 - 2017-09-10 16:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 16:20 - 2017-09-10 16:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 16:20 - 2017-09-10 16:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 00:45 - 2017-09-10 00:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_secure-us.imrworldwide.com_0.localstorage 2017-09-10 00:45 - 2017-09-10 00:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_secure-us.imrworldwide.com_0.localstorage-journal 2017-09-11 07:02 - 2017-09-11 07:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_thehill.com_0.localstorage 2017-09-11 07:02 - 2017-09-11 07:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_thehill.com_0.localstorage-journal 2017-09-10 16:25 - 2017-09-10 16:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.amc.com_0.localstorage 2017-09-10 16:25 - 2017-09-10 16:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.amc.com_0.localstorage-journal 2017-09-10 00:49 - 2017-09-10 00:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-10 00:49 - 2017-09-10 00:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-11 07:02 - 2017-09-11 07:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-11 07:02 - 2017-09-11 07:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-10 00:45 - 2017-09-10 00:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.bloomingbulb.com_0.localstorage 2017-09-10 00:45 - 2017-09-10 00:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.bloomingbulb.com_0.localstorage-journal 2017-09-10 00:51 - 2017-09-10 00:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.bunsinmyoven.com_0.localstorage 2017-09-10 00:51 - 2017-09-10 00:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.bunsinmyoven.com_0.localstorage-journal 2017-09-10 00:47 - 2017-09-10 00:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 00:47 - 2017-09-10 00:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 16:24 - 2017-09-10 16:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.complex.com_0.localstorage 2017-09-10 16:24 - 2017-09-10 16:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-11 07:01 - 2017-09-11 07:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.crash.net_0.localstorage 2017-09-11 07:01 - 2017-09-11 07:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-10 16:23 - 2017-09-10 16:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-10 16:23 - 2017-09-10 16:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-10 00:45 - 2017-09-10 00:46 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.foxsports.com_0.localstorage 2017-09-10 00:45 - 2017-09-10 00:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.foxsports.com_0.localstorage-journal 2017-09-10 00:48 - 2017-09-10 00:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-10 00:48 - 2017-09-10 00:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-10 16:23 - 2017-09-10 16:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.instyle.com_0.localstorage 2017-09-10 16:23 - 2017-09-10 16:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 07:00 - 2017-09-11 07:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-11 07:00 - 2017-09-11 07:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-11 07:03 - 2017-09-11 07:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.macworld.com_0.localstorage 2017-09-11 07:03 - 2017-09-11 07:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-10 00:51 - 2017-09-10 00:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 00:51 - 2017-09-10 00:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 00:47 - 2017-09-10 00:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-10 00:47 - 2017-09-10 00:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-10 16:19 - 2017-09-10 16:21 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.wuxiaworld.com_0.localstorage 2017-09-10 16:19 - 2017-09-10 16:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\http_www.wuxiaworld.com_0.localstorage-journal 2017-09-10 00:49 - 2017-09-10 00:49 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 00:49 - 2017-09-10 00:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 16:24 - 2017-09-10 16:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\https_connexity.net_0.localstorage 2017-09-10 16:24 - 2017-09-10 16:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 16:20 - 2017-09-10 16:21 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 16:20 - 2017-09-10 16:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 16:20 - 2017-09-11 06:58 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 16:20 - 2017-09-11 06:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 06:57 - 2017-09-11 06:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\https_tpc.googlesyndication.com_0.localstorage 2017-09-11 06:57 - 2017-09-11 06:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\https_tpc.googlesyndication.com_0.localstorage-journal 2017-09-11 06:57 - 2017-09-11 06:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\https_w.soundcloud.com_0.localstorage 2017-09-11 06:57 - 2017-09-11 06:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\https_w.soundcloud.com_0.localstorage-journal 2017-09-11 06:57 - 2017-09-11 06:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\https_www.irishtimes.com_0.localstorage 2017-09-11 06:57 - 2017-09-11 06:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\https_www.irishtimes.com_0.localstorage-journal 2017-09-10 16:20 - 2017-09-10 16:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\https_www.socialengine.com_0.localstorage 2017-09-10 16:20 - 2017-09-10 16:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\https_www.socialengine.com_0.localstorage-journal 2017-09-10 16:20 - 2017-09-10 16:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\https_www.youtube.com_0.localstorage 2017-09-10 16:20 - 2017-09-10 16:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-10 00:45 - 2017-09-10 00:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data 2017-09-10 00:45 - 2017-09-11 07:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash 2017-09-10 00:45 - 2017-09-10 00:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 00:45 - 2017-09-10 00:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 00:45 - 2017-09-10 00:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\UF3VQ8YN 2017-09-10 00:45 - 2017-09-10 00:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 00:45 - 2017-09-10 00:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 00:45 - 2017-09-10 16:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH 2017-09-10 00:45 - 2017-09-11 07:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\cdn.stickyadstv.com 2017-09-10 16:20 - 2017-09-10 16:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\cdncache-a.akamaihd.net 2017-09-10 16:20 - 2017-09-10 16:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\cdncache-a.akamaihd.net\items 2017-09-10 16:20 - 2017-09-10 16:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 16:20 - 2017-09-11 07:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 16:20 - 2017-09-11 07:03 - 000000495 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 00:45 - 2017-09-11 07:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\eereader.com 2017-09-10 00:46 - 2017-09-11 07:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\efreader.com 2017-09-10 16:23 - 2017-09-10 16:23 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\efreader.com\analytics.sol 2017-09-10 00:45 - 2017-09-11 07:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\egreader.com 2017-09-10 00:48 - 2017-09-10 00:48 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\egreader.com\analytics.sol 2017-09-10 00:45 - 2017-09-10 00:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\macromedia.com 2017-09-10 00:45 - 2017-09-10 00:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\macromedia.com\support 2017-09-10 00:45 - 2017-09-10 00:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\macromedia.com\support\flashplayer 2017-09-10 00:45 - 2017-09-10 16:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\macromedia.com\support\flashplayer\sys 2017-09-10 00:45 - 2017-09-10 16:20 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 00:45 - 2017-09-10 00:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 00:45 - 2017-09-10 00:45 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 16:20 - 2017-09-10 16:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 16:20 - 2017-09-10 16:20 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 00:45 - 2017-09-10 00:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 00:45 - 2017-09-10 00:45 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 00:46 - 2017-09-10 00:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 00:46 - 2017-09-10 00:46 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 00:45 - 2017-09-10 00:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 00:45 - 2017-09-10 00:45 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data646\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\3ZAVUQBH\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 14:06 - 2017-09-12 02:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647 2017-09-10 14:06 - 2017-09-12 01:15 - 000387072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Cookies 2017-09-10 14:06 - 2017-09-12 01:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Cookies-journal 2017-09-10 14:11 - 2017-09-10 18:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\databases 2017-09-10 14:11 - 2017-09-10 18:31 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\databases\Databases.db 2017-09-10 14:11 - 2017-09-10 18:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\databases\Databases.db-journal 2017-09-10 18:31 - 2017-09-10 18:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\databases\https_www.gaiam.com_0 2017-09-10 18:31 - 2017-09-10 18:31 - 000020480 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\databases\https_www.gaiam.com_0\1 2017-09-10 14:09 - 2017-09-12 01:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\File System 2017-09-10 14:09 - 2017-09-12 01:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\File System\Origins 2017-09-10 14:09 - 2017-09-12 01:08 - 000000448 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\File System\Origins\000003.log 2017-09-10 14:09 - 2017-09-10 14:09 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\File System\Origins\CURRENT 2017-09-10 14:09 - 2017-09-10 14:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\File System\Origins\LOCK 2017-09-10 14:09 - 2017-09-12 01:11 - 000000434 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\File System\Origins\LOG 2017-09-10 14:09 - 2017-09-12 01:07 - 000000798 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\File System\Origins\LOG.old 2017-09-10 14:09 - 2017-09-10 14:09 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\File System\Origins\MANIFEST-000001 2017-09-12 01:07 - 2017-09-12 01:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\File System\Origins\lost 2017-09-10 14:11 - 2017-09-12 01:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB 2017-09-12 01:11 - 2017-09-12 01:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.blessyouboys.com_0.indexeddb.leveldb 2017-09-12 01:11 - 2017-09-12 01:11 - 000000190 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.blessyouboys.com_0.indexeddb.leveldb\000003.log 2017-09-12 01:11 - 2017-09-12 01:11 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.blessyouboys.com_0.indexeddb.leveldb\CURRENT 2017-09-12 01:11 - 2017-09-12 01:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.blessyouboys.com_0.indexeddb.leveldb\LOCK 2017-09-12 01:11 - 2017-09-12 01:11 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.blessyouboys.com_0.indexeddb.leveldb\LOG 2017-09-12 01:11 - 2017-09-12 01:11 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.blessyouboys.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 18:34 - 2017-09-10 18:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.courant.com_0.indexeddb.leveldb 2017-09-10 18:34 - 2017-09-10 18:34 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.courant.com_0.indexeddb.leveldb\000003.log 2017-09-10 18:34 - 2017-09-10 18:34 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.courant.com_0.indexeddb.leveldb\CURRENT 2017-09-10 18:34 - 2017-09-10 18:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.courant.com_0.indexeddb.leveldb\LOCK 2017-09-10 18:34 - 2017-09-10 18:34 - 000000157 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.courant.com_0.indexeddb.leveldb\LOG 2017-09-10 18:34 - 2017-09-10 18:34 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.courant.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 18:37 - 2017-09-10 18:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.food.com_0.indexeddb.leveldb 2017-09-10 18:37 - 2017-09-10 18:37 - 000000174 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.food.com_0.indexeddb.leveldb\000003.log 2017-09-10 18:37 - 2017-09-10 18:37 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.food.com_0.indexeddb.leveldb\CURRENT 2017-09-10 18:37 - 2017-09-10 18:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.food.com_0.indexeddb.leveldb\LOCK 2017-09-10 18:37 - 2017-09-10 18:37 - 000000154 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.food.com_0.indexeddb.leveldb\LOG 2017-09-10 18:37 - 2017-09-10 18:37 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.food.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 15:53 - 2017-09-10 15:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb 2017-09-10 15:53 - 2017-09-10 15:53 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\000003.log 2017-09-10 15:53 - 2017-09-10 15:53 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\CURRENT 2017-09-10 15:53 - 2017-09-10 15:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\LOCK 2017-09-10 15:53 - 2017-09-10 15:53 - 000000157 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\LOG 2017-09-10 15:53 - 2017-09-10 15:53 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 01:07 - 2017-09-12 01:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\https_30373515.va.cobrowse.liveperson.net_0.indexeddb.leveldb 2017-09-12 01:07 - 2017-09-12 01:07 - 000000587 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\https_30373515.va.cobrowse.liveperson.net_0.indexeddb.leveldb\000003.log 2017-09-12 01:07 - 2017-09-12 01:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\https_30373515.va.cobrowse.liveperson.net_0.indexeddb.leveldb\CURRENT 2017-09-12 01:07 - 2017-09-12 01:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\https_30373515.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOCK 2017-09-12 01:07 - 2017-09-12 01:07 - 000000179 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\https_30373515.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOG 2017-09-12 01:07 - 2017-09-12 01:07 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\https_30373515.va.cobrowse.liveperson.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 14:11 - 2017-09-10 14:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb 2017-09-10 14:11 - 2017-09-10 14:11 - 000000196 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\000003.log 2017-09-10 14:11 - 2017-09-10 14:11 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\CURRENT 2017-09-10 14:11 - 2017-09-10 14:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOCK 2017-09-10 14:11 - 2017-09-10 14:11 - 000000167 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOG 2017-09-10 14:11 - 2017-09-10 14:11 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 01:07 - 2017-09-12 01:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb 2017-09-12 01:07 - 2017-09-12 01:07 - 000001346 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\000003.log 2017-09-12 01:07 - 2017-09-12 01:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\CURRENT 2017-09-12 01:07 - 2017-09-12 01:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOCK 2017-09-12 01:07 - 2017-09-12 01:07 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOG 2017-09-12 01:07 - 2017-09-12 01:07 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 14:06 - 2017-09-12 01:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage 2017-09-10 15:53 - 2017-09-10 15:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_ad.doubleclick.net_0.localstorage 2017-09-10 15:53 - 2017-09-10 15:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_ad.doubleclick.net_0.localstorage-journal 2017-09-11 09:22 - 2017-09-11 09:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 09:22 - 2017-09-11 09:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 15:50 - 2017-09-12 01:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 15:50 - 2017-09-12 01:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 14:12 - 2017-09-10 14:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_connexity.net_0.localstorage 2017-09-10 14:12 - 2017-09-10 14:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 18:32 - 2017-09-10 18:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_davedameshek.nfl.com_0.localstorage 2017-09-10 18:32 - 2017-09-10 18:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_davedameshek.nfl.com_0.localstorage-journal 2017-09-11 09:25 - 2017-09-11 09:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_keepvid.com_0.localstorage 2017-09-11 09:25 - 2017-09-11 09:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_keepvid.com_0.localstorage-journal 2017-09-10 14:12 - 2017-09-10 14:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_mashable.com_0.localstorage 2017-09-10 14:12 - 2017-09-10 14:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_mashable.com_0.localstorage-journal 2017-09-10 14:09 - 2017-09-10 14:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_nflfilms.nfl.com_0.localstorage 2017-09-10 14:09 - 2017-09-10 14:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_nflfilms.nfl.com_0.localstorage-journal 2017-09-10 15:49 - 2017-09-10 15:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 15:49 - 2017-09-10 15:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 15:49 - 2017-09-11 09:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 15:49 - 2017-09-11 09:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 18:31 - 2017-09-10 18:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_search.gikix.com_0.localstorage 2017-09-10 18:31 - 2017-09-10 18:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_search.gikix.com_0.localstorage-journal 2017-09-10 15:49 - 2017-09-10 15:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.artisteer.com_0.localstorage 2017-09-10 15:49 - 2017-09-10 15:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.artisteer.com_0.localstorage-journal 2017-09-10 18:34 - 2017-09-10 18:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.bendbulletin.com_0.localstorage 2017-09-10 18:34 - 2017-09-10 18:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.bendbulletin.com_0.localstorage-journal 2017-09-10 18:30 - 2017-09-10 18:31 - 000009216 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.bhg.com_0.localstorage 2017-09-10 18:30 - 2017-09-10 18:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.bhg.com_0.localstorage-journal 2017-09-10 15:53 - 2017-09-10 15:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.blabbermouth.net_0.localstorage 2017-09-10 15:53 - 2017-09-10 15:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.blabbermouth.net_0.localstorage-journal 2017-09-12 01:11 - 2017-09-12 01:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.blessyouboys.com_0.localstorage 2017-09-12 01:11 - 2017-09-12 01:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.blessyouboys.com_0.localstorage-journal 2017-09-10 14:09 - 2017-09-10 14:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 14:09 - 2017-09-10 14:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 14:11 - 2017-09-10 14:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.citysearch.com_0.localstorage 2017-09-10 14:11 - 2017-09-10 14:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.citysearch.com_0.localstorage-journal 2017-09-11 09:24 - 2017-09-11 09:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.complex.com_0.localstorage 2017-09-11 09:24 - 2017-09-11 09:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-10 18:34 - 2017-09-11 09:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.courant.com_0.localstorage 2017-09-10 18:34 - 2017-09-11 09:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-10 15:53 - 2017-09-10 15:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.crash.net_0.localstorage 2017-09-10 15:53 - 2017-09-10 15:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-10 15:55 - 2017-09-10 15:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-10 15:55 - 2017-09-10 15:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-10 14:10 - 2017-09-10 18:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.food.com_0.localstorage 2017-09-10 14:10 - 2017-09-10 18:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-12 01:10 - 2017-09-12 01:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.foxnews.com_0.localstorage 2017-09-12 01:10 - 2017-09-12 01:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.foxnews.com_0.localstorage-journal 2017-09-11 09:23 - 2017-09-11 09:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-11 09:23 - 2017-09-11 09:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-10 18:35 - 2017-09-10 18:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.hgtv.com_0.localstorage 2017-09-10 18:35 - 2017-09-10 18:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.hgtv.com_0.localstorage-journal 2017-09-10 15:54 - 2017-09-10 15:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.history.com_0.localstorage 2017-09-10 15:54 - 2017-09-10 15:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.history.com_0.localstorage-journal 2017-09-10 18:34 - 2017-09-10 18:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-10 18:34 - 2017-09-10 18:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-12 01:10 - 2017-09-12 01:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.instyle.com_0.localstorage 2017-09-12 01:10 - 2017-09-12 01:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-10 14:09 - 2017-09-10 18:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 14:09 - 2017-09-10 18:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 14:09 - 2017-09-10 14:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.latimes.com_0.localstorage 2017-09-10 14:09 - 2017-09-10 14:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-10 14:09 - 2017-09-12 01:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.macworld.com_0.localstorage 2017-09-10 14:09 - 2017-09-12 01:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-12 01:12 - 2017-09-12 01:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.marketwatch.com_0.localstorage 2017-09-12 01:12 - 2017-09-12 01:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.marketwatch.com_0.localstorage-journal 2017-09-10 14:12 - 2017-09-10 14:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 14:12 - 2017-09-10 14:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-12 01:07 - 2017-09-12 01:08 - 000013312 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.parents.com_0.localstorage 2017-09-12 01:07 - 2017-09-12 01:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-10 15:52 - 2017-09-12 01:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-10 15:52 - 2017-09-12 01:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-10 15:49 - 2017-09-10 15:50 - 000009216 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.stltoday.com_0.localstorage 2017-09-10 15:49 - 2017-09-10 15:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.stltoday.com_0.localstorage-journal 2017-09-11 09:20 - 2017-09-11 09:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.ustream.tv_0.localstorage 2017-09-11 09:20 - 2017-09-11 09:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.ustream.tv_0.localstorage-journal 2017-09-10 14:12 - 2017-09-10 14:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.vogue.com_0.localstorage 2017-09-10 14:12 - 2017-09-10 14:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\http_www.vogue.com_0.localstorage-journal 2017-09-10 14:08 - 2017-09-10 14:08 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 14:08 - 2017-09-10 14:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 14:06 - 2017-09-10 14:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_cdn-gl.imrworldwide.com_0.localstorage 2017-09-10 14:06 - 2017-09-10 14:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_cdn-gl.imrworldwide.com_0.localstorage-journal 2017-09-10 14:12 - 2017-09-10 14:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_connexity.net_0.localstorage 2017-09-10 14:12 - 2017-09-10 14:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 15:49 - 2017-09-11 09:20 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 15:49 - 2017-09-11 09:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 18:31 - 2017-09-10 18:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_edge.personalizer.io_0.localstorage 2017-09-10 18:31 - 2017-09-10 18:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_edge.personalizer.io_0.localstorage-journal 2017-09-12 01:07 - 2017-09-12 01:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_gateway.foresee.com_0.localstorage 2017-09-12 01:07 - 2017-09-12 01:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_gateway.foresee.com_0.localstorage-journal 2017-09-10 18:30 - 2017-09-10 18:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_photos.pixlee.com_0.localstorage 2017-09-10 18:30 - 2017-09-10 18:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_photos.pixlee.com_0.localstorage-journal 2017-09-10 15:50 - 2017-09-12 01:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_player.mediabong.net_0.localstorage 2017-09-10 15:50 - 2017-09-12 01:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_player.mediabong.net_0.localstorage-journal 2017-09-10 18:30 - 2017-09-10 18:31 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 18:30 - 2017-09-10 18:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 14:06 - 2017-09-10 14:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_secure-au.imrworldwide.com_0.localstorage 2017-09-10 14:06 - 2017-09-10 14:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_secure-au.imrworldwide.com_0.localstorage-journal 2017-09-10 15:49 - 2017-09-11 09:20 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 15:49 - 2017-09-11 09:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 14:08 - 2017-09-10 14:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_www.1800flowers.com_0.localstorage 2017-09-10 14:08 - 2017-09-10 14:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_www.1800flowers.com_0.localstorage-journal 2017-09-10 14:06 - 2017-09-10 14:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_www.babycentre.co.uk_0.localstorage 2017-09-10 14:06 - 2017-09-10 14:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_www.babycentre.co.uk_0.localstorage-journal 2017-09-12 01:07 - 2017-09-12 01:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_www.bestbullysticks.com_0.localstorage 2017-09-12 01:07 - 2017-09-12 01:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_www.bestbullysticks.com_0.localstorage-journal 2017-09-10 18:30 - 2017-09-10 18:32 - 000052224 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_www.gaiam.com_0.localstorage 2017-09-10 18:30 - 2017-09-10 18:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_www.gaiam.com_0.localstorage-journal 2017-09-11 09:20 - 2017-09-11 09:21 - 000016384 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_www.irishtimes.com_0.localstorage 2017-09-11 09:20 - 2017-09-11 09:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_www.irishtimes.com_0.localstorage-journal 2017-09-10 15:49 - 2017-09-10 15:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_www.stanza.co_0.localstorage 2017-09-10 15:49 - 2017-09-10 15:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_www.stanza.co_0.localstorage-journal 2017-09-11 09:20 - 2017-09-11 09:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_www.ustream.tv_0.localstorage 2017-09-11 09:20 - 2017-09-11 09:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Local Storage\https_www.ustream.tv_0.localstorage-journal 2017-09-10 14:06 - 2017-09-10 14:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data 2017-09-10 14:06 - 2017-09-12 01:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash 2017-09-10 14:06 - 2017-09-10 14:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 14:06 - 2017-09-10 14:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 14:06 - 2017-09-10 14:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\DRX48ZZ7 2017-09-10 14:06 - 2017-09-10 14:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 14:06 - 2017-09-10 14:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 14:06 - 2017-09-11 09:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6 2017-09-11 09:22 - 2017-09-11 09:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\cdn.dashbid.io 2017-09-11 09:22 - 2017-09-11 09:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\cdn.dashbid.io\prod 2017-09-11 09:22 - 2017-09-11 09:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-11 09:22 - 2017-09-11 09:22 - 000000069 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-10 14:06 - 2017-09-12 01:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\cdn.stickyadstv.com 2017-09-10 15:49 - 2017-09-10 15:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\cdncache-a.akamaihd.net 2017-09-10 15:49 - 2017-09-10 15:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\cdncache-a.akamaihd.net\items 2017-09-10 15:49 - 2017-09-10 15:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 15:49 - 2017-09-11 09:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 15:49 - 2017-09-11 09:24 - 000000541 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 14:06 - 2017-09-12 01:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\eereader.com 2017-09-10 15:54 - 2017-09-10 15:54 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\eereader.com\analytics.sol 2017-09-10 14:08 - 2017-09-12 01:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\efreader.com 2017-09-10 14:09 - 2017-09-11 09:29 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\efreader.com\analytics.sol 2017-09-10 14:06 - 2017-09-12 01:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\egreader.com 2017-09-11 09:25 - 2017-09-11 09:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\inread.anyclip.com 2017-09-11 09:25 - 2017-09-11 09:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\inread.anyclip.com\ac# 2017-09-11 09:26 - 2017-09-11 09:26 - 000000441 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-10 14:06 - 2017-09-10 14:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com 2017-09-10 14:06 - 2017-09-10 14:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com\support 2017-09-10 14:06 - 2017-09-10 14:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com\support\flashplayer 2017-09-10 14:06 - 2017-09-11 09:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com\support\flashplayer\sys 2017-09-10 14:06 - 2017-09-11 09:25 - 000000554 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 09:22 - 2017-09-11 09:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-11 09:22 - 2017-09-11 09:22 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-10 14:06 - 2017-09-10 14:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 14:06 - 2017-09-10 14:06 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 15:49 - 2017-09-10 15:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 15:49 - 2017-09-10 15:49 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 14:06 - 2017-09-10 14:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 14:06 - 2017-09-10 14:06 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 14:08 - 2017-09-10 14:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 14:08 - 2017-09-10 14:08 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 14:06 - 2017-09-10 14:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 14:06 - 2017-09-10 14:06 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 09:25 - 2017-09-11 09:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 09:25 - 2017-09-11 09:25 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-10 18:31 - 2017-09-10 18:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com\support\flashplayer\sys\#mpsnare.iesnare.com 2017-09-10 18:31 - 2017-09-10 18:31 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\macromedia.com\support\flashplayer\sys\#mpsnare.iesnare.com\settings.sol 2017-09-10 18:31 - 2017-09-10 18:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\mpsnare.iesnare.com 2017-09-10 18:31 - 2017-09-10 18:31 - 000000079 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data647\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\BULFXYK6\mpsnare.iesnare.com\stm.sol 2017-09-11 00:03 - 2017-09-11 17:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648 2017-09-11 00:03 - 2017-09-11 16:53 - 000299008 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Cookies 2017-09-11 00:03 - 2017-09-11 16:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Cookies-journal 2017-09-11 00:03 - 2017-09-11 00:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\databases 2017-09-11 00:03 - 2017-09-11 00:03 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\databases\Databases.db 2017-09-11 00:03 - 2017-09-11 00:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\databases\Databases.db-journal 2017-09-11 00:06 - 2017-09-11 16:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\File System 2017-09-11 00:06 - 2017-09-11 16:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\File System\Origins 2017-09-11 00:06 - 2017-09-11 16:35 - 000000239 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\File System\Origins\000003.log 2017-09-11 16:52 - 2017-09-11 16:52 - 000000227 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\File System\Origins\000004.ldb 2017-09-11 16:52 - 2017-09-11 16:52 - 000000227 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\File System\Origins\000005.ldb 2017-09-11 00:06 - 2017-09-11 00:06 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\File System\Origins\CURRENT 2017-09-11 00:06 - 2017-09-11 00:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\File System\Origins\LOCK 2017-09-11 00:06 - 2017-09-11 16:52 - 000000741 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\File System\Origins\LOG 2017-09-11 00:06 - 2017-09-11 16:49 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\File System\Origins\LOG.old 2017-09-11 00:06 - 2017-09-11 00:06 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\File System\Origins\MANIFEST-000001 2017-09-11 16:52 - 2017-09-11 16:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\File System\Origins\lost 2017-09-11 00:03 - 2017-09-11 16:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\IndexedDB 2017-09-11 00:03 - 2017-09-11 00:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\IndexedDB\http_www.adobe.com_0.indexeddb.leveldb 2017-09-11 00:03 - 2017-09-11 00:04 - 000098089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\IndexedDB\http_www.adobe.com_0.indexeddb.leveldb\000003.log 2017-09-11 00:03 - 2017-09-11 00:03 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\IndexedDB\http_www.adobe.com_0.indexeddb.leveldb\CURRENT 2017-09-11 00:03 - 2017-09-11 00:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\IndexedDB\http_www.adobe.com_0.indexeddb.leveldb\LOCK 2017-09-11 00:03 - 2017-09-11 00:04 - 000000156 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\IndexedDB\http_www.adobe.com_0.indexeddb.leveldb\LOG 2017-09-11 00:03 - 2017-09-11 00:03 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\IndexedDB\http_www.adobe.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 15:37 - 2017-09-11 15:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb 2017-09-11 15:37 - 2017-09-11 15:37 - 000000186 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb\000003.log 2017-09-11 15:37 - 2017-09-11 15:37 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb\CURRENT 2017-09-11 15:37 - 2017-09-11 15:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb\LOCK 2017-09-11 15:37 - 2017-09-11 15:37 - 000000162 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb\LOG 2017-09-11 15:37 - 2017-09-11 15:37 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\IndexedDB\http_www.diynetwork.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 16:49 - 2017-09-11 16:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb 2017-09-11 16:49 - 2017-09-11 16:49 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\000003.log 2017-09-11 16:49 - 2017-09-11 16:49 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\CURRENT 2017-09-11 16:49 - 2017-09-11 16:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\LOCK 2017-09-11 16:49 - 2017-09-11 16:49 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\LOG 2017-09-11 16:49 - 2017-09-11 16:49 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 00:03 - 2017-09-11 16:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage 2017-09-11 15:41 - 2017-09-11 15:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-11 15:41 - 2017-09-11 15:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-11 00:06 - 2017-09-11 00:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 00:06 - 2017-09-11 00:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 16:44 - 2017-09-11 16:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 16:44 - 2017-09-11 16:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-11 15:37 - 2017-09-11 15:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_connexity.net_0.localstorage 2017-09-11 15:37 - 2017-09-11 15:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 00:09 - 2017-09-11 00:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_mashable.com_0.localstorage 2017-09-11 00:09 - 2017-09-11 00:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_mashable.com_0.localstorage-journal 2017-09-11 16:34 - 2017-09-11 16:45 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 16:34 - 2017-09-11 16:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 16:38 - 2017-09-11 16:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-11 16:38 - 2017-09-11 16:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-11 16:45 - 2017-09-11 16:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_tracking.publicidees.com_0.localstorage 2017-09-11 16:45 - 2017-09-11 16:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_tracking.publicidees.com_0.localstorage-journal 2017-09-11 00:04 - 2017-09-11 00:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_universal.iperceptions.com_0.localstorage 2017-09-11 00:04 - 2017-09-11 00:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_universal.iperceptions.com_0.localstorage-journal 2017-09-11 00:04 - 2017-09-11 00:05 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.adobe.com_0.localstorage 2017-09-11 00:04 - 2017-09-11 00:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.adobe.com_0.localstorage-journal 2017-09-11 00:08 - 2017-09-11 00:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-11 00:08 - 2017-09-11 00:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-11 16:44 - 2017-09-11 16:45 - 000013312 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.bhg.com_0.localstorage 2017-09-11 16:44 - 2017-09-11 16:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.bhg.com_0.localstorage-journal 2017-09-11 16:49 - 2017-09-11 16:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-11 16:49 - 2017-09-11 16:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-11 16:40 - 2017-09-11 16:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.cbs.com_0.localstorage 2017-09-11 16:40 - 2017-09-11 16:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.cbs.com_0.localstorage-journal 2017-09-11 00:05 - 2017-09-11 00:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 00:05 - 2017-09-11 00:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 15:38 - 2017-09-11 15:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.complex.com_0.localstorage 2017-09-11 15:38 - 2017-09-11 15:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-11 16:45 - 2017-09-11 16:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.crane.com_0.localstorage 2017-09-11 16:45 - 2017-09-11 16:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.crane.com_0.localstorage-journal 2017-09-11 16:38 - 2017-09-11 16:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.finecooking.com_0.localstorage 2017-09-11 16:38 - 2017-09-11 16:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.finecooking.com_0.localstorage-journal 2017-09-11 00:07 - 2017-09-11 00:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.food.com_0.localstorage 2017-09-11 00:07 - 2017-09-11 00:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-11 00:08 - 2017-09-11 00:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.goal.com_0.localstorage 2017-09-11 00:08 - 2017-09-11 00:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.goal.com_0.localstorage-journal 2017-09-11 16:34 - 2017-09-11 16:35 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.golf.com_0.localstorage 2017-09-11 16:34 - 2017-09-11 16:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.golf.com_0.localstorage-journal 2017-09-11 15:39 - 2017-09-11 15:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.history.com_0.localstorage 2017-09-11 15:39 - 2017-09-11 15:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.history.com_0.localstorage-journal 2017-09-11 15:37 - 2017-09-11 15:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.innerself.com_0.localstorage 2017-09-11 15:37 - 2017-09-11 15:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.innerself.com_0.localstorage-journal 2017-09-11 00:07 - 2017-09-11 00:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.instyle.com_0.localstorage 2017-09-11 00:07 - 2017-09-11 00:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 16:36 - 2017-09-11 16:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 16:36 - 2017-09-11 16:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 15:37 - 2017-09-11 15:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-11 15:37 - 2017-09-11 15:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-11 16:40 - 2017-09-11 16:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.macworld.com_0.localstorage 2017-09-11 16:40 - 2017-09-11 16:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-11 16:50 - 2017-09-11 16:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.mansionglobal.com_0.localstorage 2017-09-11 16:50 - 2017-09-11 16:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.mansionglobal.com_0.localstorage-journal 2017-09-11 00:06 - 2017-09-11 00:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-11 00:06 - 2017-09-11 00:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-11 16:47 - 2017-09-11 16:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.nbc.com_0.localstorage 2017-09-11 16:47 - 2017-09-11 16:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.nbc.com_0.localstorage-journal 2017-09-11 00:10 - 2017-09-11 00:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 00:10 - 2017-09-11 00:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 16:37 - 2017-09-11 16:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.parents.com_0.localstorage 2017-09-11 16:37 - 2017-09-11 16:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-11 16:44 - 2017-09-11 16:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.vacanceo.com_0.localstorage 2017-09-11 16:44 - 2017-09-11 16:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\http_www.vacanceo.com_0.localstorage-journal 2017-09-11 16:35 - 2017-09-11 16:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_a-cn-hkg.netmng.com_0.localstorage 2017-09-11 16:35 - 2017-09-11 16:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_a-cn-hkg.netmng.com_0.localstorage-journal 2017-09-11 16:34 - 2017-09-11 16:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_auid.adledge.com_0.localstorage 2017-09-11 16:34 - 2017-09-11 16:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_auid.adledge.com_0.localstorage-journal 2017-09-11 00:08 - 2017-09-11 00:08 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 00:08 - 2017-09-11 00:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 15:34 - 2017-09-11 15:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_cdn.krxd.net_0.localstorage 2017-09-11 15:34 - 2017-09-11 15:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_cdn.krxd.net_0.localstorage-journal 2017-09-11 00:03 - 2017-09-11 00:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_comcast.inq.com_0.localstorage 2017-09-11 00:03 - 2017-09-11 00:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_comcast.inq.com_0.localstorage-journal 2017-09-11 15:37 - 2017-09-11 15:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_connexity.net_0.localstorage 2017-09-11 15:37 - 2017-09-11 15:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 15:34 - 2017-09-11 15:34 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 15:34 - 2017-09-11 15:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 15:34 - 2017-09-11 16:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 15:34 - 2017-09-11 16:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 16:44 - 2017-09-11 16:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_sb.monetate.net_0.localstorage 2017-09-11 16:44 - 2017-09-11 16:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_sb.monetate.net_0.localstorage-journal 2017-09-11 15:34 - 2017-09-11 16:46 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 15:34 - 2017-09-11 16:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 00:04 - 2017-09-11 00:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_universal.iperceptions.com_0.localstorage 2017-09-11 00:04 - 2017-09-11 00:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_universal.iperceptions.com_0.localstorage-journal 2017-09-11 16:34 - 2017-09-11 16:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_widgets.outbrain.com_0.localstorage 2017-09-11 16:34 - 2017-09-11 16:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_widgets.outbrain.com_0.localstorage-journal 2017-09-11 15:34 - 2017-09-11 15:35 - 000014336 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_www.today.com_0.localstorage 2017-09-11 15:34 - 2017-09-11 15:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_www.today.com_0.localstorage-journal 2017-09-11 16:34 - 2017-09-11 16:35 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_www.vacationrentals.com_0.localstorage 2017-09-11 16:34 - 2017-09-11 16:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_www.vacationrentals.com_0.localstorage-journal 2017-09-11 00:03 - 2017-09-11 00:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_www.xfinity.com_0.localstorage 2017-09-11 00:03 - 2017-09-11 00:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Local Storage\https_www.xfinity.com_0.localstorage-journal 2017-09-11 00:03 - 2017-09-11 00:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data 2017-09-11 00:03 - 2017-09-11 16:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash 2017-09-11 00:03 - 2017-09-11 00:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 00:03 - 2017-09-11 00:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 00:03 - 2017-09-11 00:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\Q6TS5DV4 2017-09-11 00:03 - 2017-09-11 00:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 00:03 - 2017-09-11 00:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 00:03 - 2017-09-11 16:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7 2017-09-11 15:39 - 2017-09-11 15:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\aka.spotxcdn.com 2017-09-11 00:04 - 2017-09-11 16:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\cdn.stickyadstv.com 2017-09-11 00:05 - 2017-09-11 00:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\cdncache-a.akamaihd.net 2017-09-11 00:05 - 2017-09-11 00:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\cdncache-a.akamaihd.net\items 2017-09-11 00:05 - 2017-09-11 00:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 00:05 - 2017-09-11 16:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 00:05 - 2017-09-11 16:47 - 000000475 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 00:06 - 2017-09-11 16:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\eereader.com 2017-09-11 00:05 - 2017-09-11 16:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\efreader.com 2017-09-11 15:42 - 2017-09-11 16:54 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\efreader.com\analytics.sol 2017-09-11 00:03 - 2017-09-11 16:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\egreader.com 2017-09-11 16:45 - 2017-09-11 16:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\i0.poll.fm 2017-09-11 16:45 - 2017-09-11 16:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\i0.poll.fm\swf 2017-09-11 16:45 - 2017-09-11 16:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\i0.poll.fm\swf\storage.swf 2017-09-11 15:36 - 2017-09-11 15:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\inread.anyclip.com 2017-09-11 15:36 - 2017-09-11 15:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\inread.anyclip.com\ac# 2017-09-11 15:36 - 2017-09-11 15:36 - 000000437 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-11 00:03 - 2017-09-11 00:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com 2017-09-11 00:03 - 2017-09-11 00:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support 2017-09-11 00:03 - 2017-09-11 00:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer 2017-09-11 00:03 - 2017-09-11 16:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer\sys 2017-09-11 00:03 - 2017-09-11 16:45 - 000000566 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 15:39 - 2017-09-11 15:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer\sys\#aka.spotxcdn.com 2017-09-11 15:39 - 2017-09-11 15:39 - 000000086 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer\sys\#aka.spotxcdn.com\settings.sol 2017-09-11 00:04 - 2017-09-11 00:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 00:04 - 2017-09-11 00:04 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 00:05 - 2017-09-11 00:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 00:05 - 2017-09-11 00:05 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 00:06 - 2017-09-11 00:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 00:06 - 2017-09-11 00:06 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 00:05 - 2017-09-11 00:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 00:05 - 2017-09-11 00:05 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 00:03 - 2017-09-11 00:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 00:03 - 2017-09-11 00:03 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 16:45 - 2017-09-11 16:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer\sys\#i0.poll.fm 2017-09-11 16:45 - 2017-09-11 16:45 - 000000080 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer\sys\#i0.poll.fm\settings.sol 2017-09-11 15:36 - 2017-09-11 15:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 15:36 - 2017-09-11 15:36 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-11 16:34 - 2017-09-11 16:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer\sys\#www.cdn-net.com 2017-09-11 16:34 - 2017-09-11 16:34 - 000000085 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\macromedia.com\support\flashplayer\sys\#www.cdn-net.com\settings.sol 2017-09-11 16:34 - 2017-09-11 16:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\www.cdn-net.com 2017-09-11 16:34 - 2017-09-11 16:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\www.cdn-net.com\s.swf 2017-09-11 16:34 - 2017-09-11 16:34 - 000000054 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data648\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8D43W4E7\www.cdn-net.com\s.swf\_cc.sol 2017-09-10 22:02 - 2017-09-11 22:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649 2017-09-10 22:02 - 2017-09-11 22:50 - 000336896 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Cookies 2017-09-10 22:02 - 2017-09-11 22:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Cookies-journal 2017-09-11 21:41 - 2017-09-11 21:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\databases 2017-09-11 21:41 - 2017-09-11 21:41 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\databases\Databases.db 2017-09-11 21:41 - 2017-09-11 21:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\databases\Databases.db-journal 2017-09-10 22:03 - 2017-09-11 22:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\000 2017-09-10 22:03 - 2017-09-11 21:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\000\t 2017-09-11 21:41 - 2017-09-11 21:41 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\000\t\.usage 2017-09-11 21:41 - 2017-09-11 21:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\000\t\Paths 2017-09-11 21:41 - 2017-09-11 21:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\000\t\Paths\000003.log 2017-09-11 21:41 - 2017-09-11 21:41 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\000\t\Paths\CURRENT 2017-09-11 21:41 - 2017-09-11 21:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\000\t\Paths\LOCK 2017-09-11 21:41 - 2017-09-11 21:42 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\000\t\Paths\LOG 2017-09-11 21:41 - 2017-09-11 21:41 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\000\t\Paths\MANIFEST-000001 2017-09-11 12:19 - 2017-09-11 12:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\001 2017-09-11 12:19 - 2017-09-11 21:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\001\t 2017-09-11 21:41 - 2017-09-11 21:42 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\001\t\.usage 2017-09-11 21:41 - 2017-09-11 21:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\001\t\Paths 2017-09-11 21:41 - 2017-09-11 21:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\001\t\Paths\000003.log 2017-09-11 21:41 - 2017-09-11 21:41 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\001\t\Paths\CURRENT 2017-09-11 21:41 - 2017-09-11 21:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\001\t\Paths\LOCK 2017-09-11 21:41 - 2017-09-11 21:42 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\001\t\Paths\LOG 2017-09-11 21:41 - 2017-09-11 21:41 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\001\t\Paths\MANIFEST-000001 2017-09-11 21:43 - 2017-09-11 21:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\002 2017-09-11 21:43 - 2017-09-11 21:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\002\t 2017-09-11 22:47 - 2017-09-11 22:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\003 2017-09-11 22:47 - 2017-09-11 22:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\003\t 2017-09-11 22:49 - 2017-09-11 22:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\004 2017-09-11 22:49 - 2017-09-11 22:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\004\t 2017-09-10 22:03 - 2017-09-11 22:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\Origins 2017-09-10 22:03 - 2017-09-11 22:50 - 000000387 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\Origins\000003.log 2017-09-10 22:03 - 2017-09-10 22:03 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\Origins\CURRENT 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\Origins\LOCK 2017-09-10 22:03 - 2017-09-11 22:49 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\Origins\LOG 2017-09-10 22:03 - 2017-09-11 22:47 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\Origins\LOG.old 2017-09-10 22:03 - 2017-09-10 22:03 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\File System\Origins\MANIFEST-000001 2017-09-11 21:41 - 2017-09-11 21:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\IndexedDB 2017-09-11 21:41 - 2017-09-11 21:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\IndexedDB\http_www.marthastewart.com_0.indexeddb.leveldb 2017-09-11 21:41 - 2017-09-11 21:41 - 000000192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\IndexedDB\http_www.marthastewart.com_0.indexeddb.leveldb\000003.log 2017-09-11 21:41 - 2017-09-11 21:41 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\IndexedDB\http_www.marthastewart.com_0.indexeddb.leveldb\CURRENT 2017-09-11 21:41 - 2017-09-11 21:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\IndexedDB\http_www.marthastewart.com_0.indexeddb.leveldb\LOCK 2017-09-11 21:41 - 2017-09-11 21:41 - 000000164 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\IndexedDB\http_www.marthastewart.com_0.indexeddb.leveldb\LOG 2017-09-11 21:41 - 2017-09-11 21:41 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\IndexedDB\http_www.marthastewart.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 22:02 - 2017-09-11 22:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage 2017-09-10 22:08 - 2017-09-10 22:09 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_allrecipes.com_0.localstorage 2017-09-10 22:08 - 2017-09-10 22:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-11 22:49 - 2017-09-11 22:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-11 22:49 - 2017-09-11 22:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-10 22:08 - 2017-09-10 22:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 22:08 - 2017-09-10 22:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 12:18 - 2017-09-11 12:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_connexity.net_0.localstorage 2017-09-11 12:18 - 2017-09-11 12:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 22:03 - 2017-09-10 22:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 22:03 - 2017-09-10 22:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_sm-cdn.simplymeasured.com_0.localstorage 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_sm-cdn.simplymeasured.com_0.localstorage-journal 2017-09-11 22:45 - 2017-09-11 22:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_variance.tv_0.localstorage 2017-09-11 22:45 - 2017-09-11 22:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_variance.tv_0.localstorage-journal 2017-09-10 22:07 - 2017-09-10 22:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_washingtonmonthly.com_0.localstorage 2017-09-10 22:07 - 2017-09-10 22:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_washingtonmonthly.com_0.localstorage-journal 2017-09-10 22:08 - 2017-09-10 22:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.abcya.com_0.localstorage 2017-09-10 22:08 - 2017-09-10 22:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.abcya.com_0.localstorage-journal 2017-09-11 21:44 - 2017-09-11 21:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.aetv.com_0.localstorage 2017-09-11 21:44 - 2017-09-11 21:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.aetv.com_0.localstorage-journal 2017-09-11 21:43 - 2017-09-11 21:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-11 21:43 - 2017-09-11 21:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-11 12:18 - 2017-09-11 22:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-11 12:18 - 2017-09-11 22:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-11 22:42 - 2017-09-11 22:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.cabelas.com_0.localstorage 2017-09-11 22:42 - 2017-09-11 22:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.cabelas.com_0.localstorage-journal 2017-09-10 22:05 - 2017-09-11 12:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 22:05 - 2017-09-11 12:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 12:19 - 2017-09-11 12:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.cnbc.com_0.localstorage 2017-09-11 12:19 - 2017-09-11 12:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.cnbc.com_0.localstorage-journal 2017-09-10 22:06 - 2017-09-10 22:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.courant.com_0.localstorage 2017-09-10 22:06 - 2017-09-10 22:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-11 12:17 - 2017-09-11 12:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-11 12:17 - 2017-09-11 12:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-11 22:47 - 2017-09-11 22:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.food.com_0.localstorage 2017-09-11 22:47 - 2017-09-11 22:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-11 22:46 - 2017-09-11 22:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-11 22:46 - 2017-09-11 22:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-11 21:39 - 2017-09-11 21:40 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.goal.com_0.localstorage 2017-09-11 21:39 - 2017-09-11 21:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.goal.com_0.localstorage-journal 2017-09-11 22:45 - 2017-09-11 22:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.insideedition.com_0.localstorage 2017-09-11 22:45 - 2017-09-11 22:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.insideedition.com_0.localstorage-journal 2017-09-10 22:04 - 2017-09-10 22:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 22:04 - 2017-09-10 22:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 21:42 - 2017-09-11 21:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-11 21:42 - 2017-09-11 21:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-11 12:16 - 2017-09-11 21:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 12:16 - 2017-09-11 21:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-10 22:05 - 2017-09-10 22:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-10 22:05 - 2017-09-10 22:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-11 12:15 - 2017-09-11 12:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 12:15 - 2017-09-11 12:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 22:45 - 2017-09-11 22:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.reuters.com_0.localstorage 2017-09-11 22:45 - 2017-09-11 22:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-10 22:03 - 2017-09-10 22:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.wolverine.com_0.localstorage 2017-09-10 22:03 - 2017-09-10 22:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\http_www.wolverine.com_0.localstorage-journal 2017-09-11 21:39 - 2017-09-11 21:40 - 000008192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_asset.gomoxie.solutions_0.localstorage 2017-09-11 21:39 - 2017-09-11 21:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_asset.gomoxie.solutions_0.localstorage-journal 2017-09-11 21:41 - 2017-09-11 21:41 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 21:41 - 2017-09-11 21:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 22:03 - 2017-09-10 22:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_cdn-gl.imrworldwide.com_0.localstorage 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_cdn-gl.imrworldwide.com_0.localstorage-journal 2017-09-11 12:18 - 2017-09-11 12:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_connexity.net_0.localstorage 2017-09-11 12:18 - 2017-09-11 12:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 22:03 - 2017-09-10 22:03 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 12:15 - 2017-09-11 12:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-11 12:15 - 2017-09-11 12:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-11 21:39 - 2017-09-11 21:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_player.mediabong.net_0.localstorage 2017-09-11 21:39 - 2017-09-11 21:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_player.mediabong.net_0.localstorage-journal 2017-09-10 22:03 - 2017-09-10 22:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 22:03 - 2017-09-10 22:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_secure-au.imrworldwide.com_0.localstorage 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_secure-au.imrworldwide.com_0.localstorage-journal 2017-09-10 22:04 - 2017-09-10 22:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_serveads.co_0.localstorage 2017-09-10 22:04 - 2017-09-10 22:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_serveads.co_0.localstorage-journal 2017-09-10 22:03 - 2017-09-11 12:14 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 22:03 - 2017-09-11 12:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 22:03 - 2017-09-10 22:03 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_www.babycentre.co.uk_0.localstorage 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_www.babycentre.co.uk_0.localstorage-journal 2017-09-11 21:39 - 2017-09-11 21:40 - 000229376 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_www.boscovs.com_0.localstorage 2017-09-11 21:39 - 2017-09-11 21:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_www.boscovs.com_0.localstorage-journal 2017-09-11 22:42 - 2017-09-11 22:44 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_www.facebook.com_0.localstorage 2017-09-11 22:42 - 2017-09-11 22:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_www.facebook.com_0.localstorage-journal 2017-09-10 22:03 - 2017-09-10 22:04 - 000012288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_www.gothamcigars.com_0.localstorage 2017-09-10 22:03 - 2017-09-10 22:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_www.gothamcigars.com_0.localstorage-journal 2017-09-11 12:14 - 2017-09-11 12:14 - 000550912 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_www.guess.ca_0.localstorage 2017-09-11 12:14 - 2017-09-11 12:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_www.guess.ca_0.localstorage-journal 2017-09-11 12:13 - 2017-09-11 12:15 - 000008192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_www.shmoop.com_0.localstorage 2017-09-11 12:13 - 2017-09-11 12:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Local Storage\https_www.shmoop.com_0.localstorage-journal 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data 2017-09-10 22:03 - 2017-09-11 22:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\GYU3B8U5 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 22:03 - 2017-09-11 12:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG 2017-09-10 22:03 - 2017-09-11 22:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\cdn.stickyadstv.com 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\cdncache-a.akamaihd.net 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\cdncache-a.akamaihd.net\items 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 22:03 - 2017-09-11 21:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 22:03 - 2017-09-11 21:43 - 000000634 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 22:03 - 2017-09-11 22:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\eereader.com 2017-09-10 22:04 - 2017-09-11 22:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\efreader.com 2017-09-11 12:21 - 2017-09-11 22:50 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\efreader.com\analytics.sol 2017-09-10 22:03 - 2017-09-11 22:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\egreader.com 2017-09-11 12:14 - 2017-09-11 12:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\inread.anyclip.com 2017-09-11 12:14 - 2017-09-11 12:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\inread.anyclip.com\ac# 2017-09-11 12:14 - 2017-09-11 12:14 - 000000457 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\macromedia.com 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\macromedia.com\support 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\macromedia.com\support\flashplayer 2017-09-10 22:03 - 2017-09-11 12:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\macromedia.com\support\flashplayer\sys 2017-09-10 22:03 - 2017-09-11 12:14 - 000000513 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 22:03 - 2017-09-10 22:03 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 22:03 - 2017-09-10 22:03 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 22:03 - 2017-09-10 22:03 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 22:04 - 2017-09-10 22:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 22:04 - 2017-09-10 22:04 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 22:03 - 2017-09-10 22:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 22:03 - 2017-09-10 22:03 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 12:14 - 2017-09-11 12:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 12:14 - 2017-09-11 12:14 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data649\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PVQFZ7VG\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-09 22:26 - 2017-09-11 19:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650 2017-09-09 22:26 - 2017-09-11 18:34 - 000284672 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Cookies 2017-09-09 22:26 - 2017-09-11 18:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Cookies-journal 2017-09-11 18:30 - 2017-09-11 18:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\databases 2017-09-11 18:30 - 2017-09-11 18:30 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\databases\Databases.db 2017-09-11 18:30 - 2017-09-11 18:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\databases\Databases.db-journal 2017-09-09 22:28 - 2017-09-11 18:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\File System 2017-09-09 22:28 - 2017-09-11 18:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\File System\Origins 2017-09-09 22:28 - 2017-09-10 19:45 - 000000382 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\File System\Origins\000003.log 2017-09-09 22:28 - 2017-09-09 22:28 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\File System\Origins\CURRENT 2017-09-09 22:28 - 2017-09-09 22:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\File System\Origins\LOCK 2017-09-09 22:28 - 2017-09-11 18:31 - 000000393 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\File System\Origins\LOG 2017-09-09 22:28 - 2017-09-11 18:30 - 000000744 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\File System\Origins\LOG.old 2017-09-09 22:28 - 2017-09-09 22:28 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\File System\Origins\MANIFEST-000001 2017-09-11 18:30 - 2017-09-11 18:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\File System\Origins\lost 2017-09-11 18:30 - 2017-09-11 18:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\IndexedDB 2017-09-11 18:31 - 2017-09-11 18:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\IndexedDB\http_washingtonmonthly.com_0.indexeddb.leveldb 2017-09-11 18:31 - 2017-09-11 18:31 - 000000192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\IndexedDB\http_washingtonmonthly.com_0.indexeddb.leveldb\000003.log 2017-09-11 18:31 - 2017-09-11 18:31 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\IndexedDB\http_washingtonmonthly.com_0.indexeddb.leveldb\CURRENT 2017-09-11 18:31 - 2017-09-11 18:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\IndexedDB\http_washingtonmonthly.com_0.indexeddb.leveldb\LOCK 2017-09-11 18:31 - 2017-09-11 18:31 - 000000165 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\IndexedDB\http_washingtonmonthly.com_0.indexeddb.leveldb\LOG 2017-09-11 18:31 - 2017-09-11 18:31 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\IndexedDB\http_washingtonmonthly.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 18:30 - 2017-09-11 18:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\IndexedDB\http_www.funnyordie.com_0.indexeddb.leveldb 2017-09-11 18:30 - 2017-09-11 18:30 - 000000186 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\IndexedDB\http_www.funnyordie.com_0.indexeddb.leveldb\000003.log 2017-09-11 18:30 - 2017-09-11 18:30 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\IndexedDB\http_www.funnyordie.com_0.indexeddb.leveldb\CURRENT 2017-09-11 18:30 - 2017-09-11 18:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\IndexedDB\http_www.funnyordie.com_0.indexeddb.leveldb\LOCK 2017-09-11 18:30 - 2017-09-11 18:30 - 000000162 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\IndexedDB\http_www.funnyordie.com_0.indexeddb.leveldb\LOG 2017-09-11 18:30 - 2017-09-11 18:30 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\IndexedDB\http_www.funnyordie.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-09 22:26 - 2017-09-11 18:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage 2017-09-09 22:26 - 2017-09-09 22:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_aax-us-pdx.amazon-adsystem.com_0.localstorage 2017-09-09 22:26 - 2017-09-09 22:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_aax-us-pdx.amazon-adsystem.com_0.localstorage-journal 2017-09-09 22:27 - 2017-09-09 22:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-09 22:27 - 2017-09-09 22:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-09 22:26 - 2017-09-09 22:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_connexity.net_0.localstorage 2017-09-09 22:26 - 2017-09-09 22:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-09 22:26 - 2017-09-09 22:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_iad.anm.co.uk_0.localstorage 2017-09-09 22:26 - 2017-09-09 22:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_iad.anm.co.uk_0.localstorage-journal 2017-09-10 19:41 - 2017-09-10 19:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 19:41 - 2017-09-10 19:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 19:43 - 2017-09-10 19:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_prod.www.dolphins.clubs.nfl.com_0.localstorage 2017-09-10 19:43 - 2017-09-10 19:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_prod.www.dolphins.clubs.nfl.com_0.localstorage-journal 2017-09-10 19:41 - 2017-09-11 18:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 19:41 - 2017-09-11 18:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-09 22:26 - 2017-09-09 22:27 - 000020480 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.511tactical.com_0.localstorage 2017-09-09 22:26 - 2017-09-09 22:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.511tactical.com_0.localstorage-journal 2017-09-09 22:31 - 2017-09-09 22:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.aetv.com_0.localstorage 2017-09-09 22:31 - 2017-09-09 22:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.aetv.com_0.localstorage-journal 2017-09-09 22:30 - 2017-09-09 22:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.bendbulletin.com_0.localstorage 2017-09-09 22:30 - 2017-09-09 22:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.bendbulletin.com_0.localstorage-journal 2017-09-10 19:45 - 2017-09-10 19:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-10 19:45 - 2017-09-10 19:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-10 19:41 - 2017-09-10 19:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.biotherm-usa.com_0.localstorage 2017-09-10 19:41 - 2017-09-10 19:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.biotherm-usa.com_0.localstorage-journal 2017-09-11 18:26 - 2017-09-11 18:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.bitlanders.com_0.localstorage 2017-09-11 18:26 - 2017-09-11 18:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.bitlanders.com_0.localstorage-journal 2017-09-10 19:46 - 2017-09-10 19:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.bunsinmyoven.com_0.localstorage 2017-09-10 19:46 - 2017-09-10 19:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.bunsinmyoven.com_0.localstorage-journal 2017-09-09 22:28 - 2017-09-09 22:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-09 22:28 - 2017-09-09 22:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-09 22:26 - 2017-09-09 22:27 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-09 22:26 - 2017-09-09 22:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-10 19:44 - 2017-09-10 19:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-10 19:44 - 2017-09-10 19:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-10 19:47 - 2017-09-10 19:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-10 19:47 - 2017-09-10 19:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-09 22:29 - 2017-09-09 22:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-09 22:29 - 2017-09-09 22:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-11 18:32 - 2017-09-11 18:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.instyle.com_0.localstorage 2017-09-11 18:32 - 2017-09-11 18:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-09 22:28 - 2017-09-09 22:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-09 22:28 - 2017-09-09 22:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 19:44 - 2017-09-11 18:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.latimes.com_0.localstorage 2017-09-10 19:44 - 2017-09-11 18:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-09 22:29 - 2017-09-09 22:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.macworld.com_0.localstorage 2017-09-09 22:29 - 2017-09-09 22:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-10 19:43 - 2017-09-10 19:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 19:43 - 2017-09-10 19:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 19:44 - 2017-09-11 18:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-10 19:44 - 2017-09-11 18:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-11 18:26 - 2017-09-11 18:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.shopcopperpenny.com_0.localstorage 2017-09-11 18:26 - 2017-09-11 18:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\http_www.shopcopperpenny.com_0.localstorage-journal 2017-09-09 22:26 - 2017-09-09 22:26 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\https_c.betrad.com_0.localstorage 2017-09-09 22:26 - 2017-09-09 22:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-09 22:26 - 2017-09-09 22:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\https_connexity.net_0.localstorage 2017-09-09 22:26 - 2017-09-09 22:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 18:26 - 2017-09-11 18:26 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 18:26 - 2017-09-11 18:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-09 22:29 - 2017-09-09 22:31 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-09 22:29 - 2017-09-09 22:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-10 19:41 - 2017-09-11 18:26 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 19:41 - 2017-09-11 18:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-09 22:26 - 2017-09-09 22:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data 2017-09-09 22:26 - 2017-09-11 18:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash 2017-09-09 22:26 - 2017-09-09 22:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-09 22:26 - 2017-09-09 22:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-09 22:26 - 2017-09-09 22:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\TWLV8ZMP 2017-09-09 22:26 - 2017-09-09 22:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot 2017-09-09 22:26 - 2017-09-09 22:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-09 22:26 - 2017-09-11 18:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK 2017-09-09 22:26 - 2017-09-11 18:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\cdn.stickyadstv.com 2017-09-10 19:41 - 2017-09-10 19:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\cdncache-a.akamaihd.net 2017-09-10 19:41 - 2017-09-10 19:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\cdncache-a.akamaihd.net\items 2017-09-10 19:41 - 2017-09-10 19:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 19:41 - 2017-09-11 18:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 19:41 - 2017-09-11 18:30 - 000000476 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-09 22:26 - 2017-09-11 18:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\eereader.com 2017-09-09 22:27 - 2017-09-11 18:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\efreader.com 2017-09-09 22:28 - 2017-09-10 19:50 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\efreader.com\analytics.sol 2017-09-09 22:26 - 2017-09-11 18:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\egreader.com 2017-09-09 22:26 - 2017-09-09 22:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\macromedia.com 2017-09-09 22:26 - 2017-09-09 22:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\macromedia.com\support 2017-09-09 22:26 - 2017-09-09 22:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\macromedia.com\support\flashplayer 2017-09-09 22:26 - 2017-09-11 18:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\macromedia.com\support\flashplayer\sys 2017-09-09 22:26 - 2017-09-11 18:26 - 000000543 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-09 22:26 - 2017-09-09 22:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-09 22:26 - 2017-09-09 22:26 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 19:41 - 2017-09-10 19:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 19:41 - 2017-09-10 19:41 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-09 22:26 - 2017-09-09 22:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-09 22:26 - 2017-09-09 22:26 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-09 22:27 - 2017-09-09 22:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-09 22:27 - 2017-09-09 22:27 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-09 22:26 - 2017-09-09 22:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-09 22:26 - 2017-09-09 22:26 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-09 22:28 - 2017-09-09 22:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com 2017-09-09 22:28 - 2017-09-09 22:28 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com\settings.sol 2017-09-11 18:26 - 2017-09-11 18:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\macromedia.com\support\flashplayer\sys\#static.bitlanders.com 2017-09-11 18:26 - 2017-09-11 18:26 - 000000091 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\macromedia.com\support\flashplayer\sys\#static.bitlanders.com\settings.sol 2017-09-09 22:28 - 2017-09-09 22:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\objects.tremormedia.com 2017-09-09 22:28 - 2017-09-09 22:28 - 000000072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\objects.tremormedia.com\com.quantserve.sol 2017-09-11 18:26 - 2017-09-11 18:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data650\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QPP6VKXK\static.bitlanders.com 2017-09-09 23:16 - 2017-09-12 09:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651 2017-09-09 23:16 - 2017-09-12 09:12 - 000334848 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Cookies 2017-09-09 23:16 - 2017-09-12 09:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Cookies-journal 2017-09-11 03:44 - 2017-09-11 03:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\databases 2017-09-11 03:44 - 2017-09-11 03:44 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\databases\Databases.db 2017-09-11 03:44 - 2017-09-11 03:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\databases\Databases.db-journal 2017-09-11 03:43 - 2017-09-12 09:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\File System 2017-09-12 05:33 - 2017-09-12 05:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\File System\002 2017-09-12 05:33 - 2017-09-12 05:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\File System\002\t 2017-09-12 05:36 - 2017-09-12 05:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\File System\003 2017-09-12 05:36 - 2017-09-12 05:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\File System\003\t 2017-09-12 09:08 - 2017-09-12 09:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\File System\004 2017-09-12 09:08 - 2017-09-12 09:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\File System\004\t 2017-09-11 03:43 - 2017-09-12 09:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\File System\Origins 2017-09-11 03:43 - 2017-09-12 09:09 - 000000388 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\File System\Origins\000003.log 2017-09-11 03:43 - 2017-09-11 03:43 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\File System\Origins\CURRENT 2017-09-11 03:43 - 2017-09-11 03:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\File System\Origins\LOCK 2017-09-11 03:43 - 2017-09-12 09:08 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\File System\Origins\LOG 2017-09-11 03:43 - 2017-09-12 05:36 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\File System\Origins\LOG.old 2017-09-11 03:43 - 2017-09-11 03:43 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\File System\Origins\MANIFEST-000001 2017-09-11 03:46 - 2017-09-11 03:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\File System\Origins\lost 2017-09-11 03:44 - 2017-09-11 11:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\IndexedDB 2017-09-11 03:45 - 2017-09-11 03:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb 2017-09-11 03:45 - 2017-09-11 03:45 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb\000003.log 2017-09-11 03:45 - 2017-09-11 03:45 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb\CURRENT 2017-09-11 03:45 - 2017-09-11 03:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb\LOCK 2017-09-11 03:45 - 2017-09-11 03:45 - 000000160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb\LOG 2017-09-11 03:45 - 2017-09-11 03:45 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 11:07 - 2017-09-11 11:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\IndexedDB\http_www.insidenova.com_0.indexeddb.leveldb 2017-09-11 11:07 - 2017-09-11 11:07 - 000000186 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\IndexedDB\http_www.insidenova.com_0.indexeddb.leveldb\000003.log 2017-09-11 11:07 - 2017-09-11 11:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\IndexedDB\http_www.insidenova.com_0.indexeddb.leveldb\CURRENT 2017-09-11 11:07 - 2017-09-11 11:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\IndexedDB\http_www.insidenova.com_0.indexeddb.leveldb\LOCK 2017-09-11 11:07 - 2017-09-11 11:07 - 000000162 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\IndexedDB\http_www.insidenova.com_0.indexeddb.leveldb\LOG 2017-09-11 11:07 - 2017-09-11 11:07 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\IndexedDB\http_www.insidenova.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 03:44 - 2017-09-11 03:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb 2017-09-11 03:44 - 2017-09-11 03:44 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb\000003.log 2017-09-11 03:44 - 2017-09-11 03:44 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb\CURRENT 2017-09-11 03:44 - 2017-09-11 03:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb\LOCK 2017-09-11 03:44 - 2017-09-11 03:44 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb\LOG 2017-09-11 03:44 - 2017-09-11 03:44 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-09 23:16 - 2017-09-12 09:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage 2017-09-11 03:40 - 2017-09-11 03:41 - 000014336 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_allrecipes.com_0.localstorage 2017-09-11 03:40 - 2017-09-11 03:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-11 11:08 - 2017-09-11 11:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 11:08 - 2017-09-11 11:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 03:40 - 2017-09-12 09:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 03:40 - 2017-09-12 09:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-12 09:05 - 2017-09-12 09:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_cdn-gl.imrworldwide.com_0.localstorage 2017-09-12 09:05 - 2017-09-12 09:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_cdn-gl.imrworldwide.com_0.localstorage-journal 2017-09-11 11:07 - 2017-09-11 11:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_connexity.net_0.localstorage 2017-09-11 11:07 - 2017-09-11 11:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-12 05:37 - 2017-09-12 05:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_de.reuters.com_0.localstorage 2017-09-12 05:37 - 2017-09-12 05:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_de.reuters.com_0.localstorage-journal 2017-09-12 09:10 - 2017-09-12 09:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_diethood.com_0.localstorage 2017-09-12 09:10 - 2017-09-12 09:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_diethood.com_0.localstorage-journal 2017-09-11 22:23 - 2017-09-11 22:24 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 22:23 - 2017-09-11 22:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 22:23 - 2017-09-11 22:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_royaldesign.com_0.localstorage 2017-09-11 22:23 - 2017-09-11 22:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_royaldesign.com_0.localstorage-journal 2017-09-12 09:08 - 2017-09-12 09:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_tpc.googlesyndication.com_0.localstorage 2017-09-12 09:08 - 2017-09-12 09:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_tpc.googlesyndication.com_0.localstorage-journal 2017-09-09 23:16 - 2017-09-09 23:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_vplayer.techtimes.com_0.localstorage 2017-09-09 23:16 - 2017-09-09 23:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_vplayer.techtimes.com_0.localstorage-journal 2017-09-11 11:07 - 2017-09-12 05:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-11 11:07 - 2017-09-12 05:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-11 03:45 - 2017-09-11 03:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-11 03:45 - 2017-09-11 03:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-12 05:33 - 2017-09-12 05:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.businessinsider.com_0.localstorage 2017-09-12 05:33 - 2017-09-12 05:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.businessinsider.com_0.localstorage-journal 2017-09-11 03:41 - 2017-09-11 03:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.carparts.com_0.localstorage 2017-09-11 03:41 - 2017-09-11 03:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.carparts.com_0.localstorage-journal 2017-09-11 03:43 - 2017-09-11 03:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 03:43 - 2017-09-11 03:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-12 09:09 - 2017-09-12 09:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-12 09:09 - 2017-09-12 09:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-11 11:07 - 2017-09-11 11:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-11 11:07 - 2017-09-11 11:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-11 22:26 - 2017-09-11 22:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-11 22:26 - 2017-09-11 22:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-11 03:44 - 2017-09-11 03:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-11 03:44 - 2017-09-11 03:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-12 09:05 - 2017-09-12 09:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.gnclivewell.com_0.localstorage 2017-09-12 09:05 - 2017-09-12 09:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.gnclivewell.com_0.localstorage-journal 2017-09-12 05:31 - 2017-09-12 05:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.goal.com_0.localstorage 2017-09-12 05:31 - 2017-09-12 05:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.goal.com_0.localstorage-journal 2017-09-11 11:09 - 2017-09-11 11:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.health.com_0.localstorage 2017-09-11 11:09 - 2017-09-11 11:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.health.com_0.localstorage-journal 2017-09-11 22:26 - 2017-09-12 05:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-11 22:26 - 2017-09-12 05:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-11 22:28 - 2017-09-11 22:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.hgtv.com_0.localstorage 2017-09-11 22:28 - 2017-09-11 22:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.hgtv.com_0.localstorage-journal 2017-09-12 09:05 - 2017-09-12 09:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.hollywood.com_0.localstorage 2017-09-12 09:05 - 2017-09-12 09:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.hollywood.com_0.localstorage-journal 2017-09-11 11:03 - 2017-09-11 11:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.homeadvisor.com_0.localstorage 2017-09-11 11:03 - 2017-09-11 11:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.homeadvisor.com_0.localstorage-journal 2017-09-11 11:06 - 2017-09-11 11:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-11 11:06 - 2017-09-11 11:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-12 09:10 - 2017-09-12 09:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.instyle.com_0.localstorage 2017-09-12 09:10 - 2017-09-12 09:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 03:42 - 2017-09-11 22:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 03:42 - 2017-09-11 22:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-12 05:32 - 2017-09-12 05:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.ivlproducts.com_0.localstorage 2017-09-12 05:32 - 2017-09-12 05:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.ivlproducts.com_0.localstorage-journal 2017-09-11 03:46 - 2017-09-11 03:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.latimes.com_0.localstorage 2017-09-11 03:46 - 2017-09-11 03:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-11 11:06 - 2017-09-11 22:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-11 11:06 - 2017-09-11 22:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-11 22:28 - 2017-09-11 22:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.macworld.com_0.localstorage 2017-09-11 22:28 - 2017-09-11 22:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-12 05:34 - 2017-09-12 05:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-12 05:34 - 2017-09-12 05:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-11 03:42 - 2017-09-11 11:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 03:42 - 2017-09-11 11:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 03:43 - 2017-09-11 03:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.reuters.com_0.localstorage 2017-09-11 03:43 - 2017-09-11 03:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-09 23:16 - 2017-09-09 23:17 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.techtimes.com_0.localstorage 2017-09-09 23:16 - 2017-09-09 23:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.techtimes.com_0.localstorage-journal 2017-09-11 22:26 - 2017-09-11 22:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.washingtonmonthly.com_0.localstorage 2017-09-11 22:26 - 2017-09-11 22:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\http_www.washingtonmonthly.com_0.localstorage-journal 2017-09-11 03:40 - 2017-09-11 03:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_assets.bounceexchange.com_0.localstorage 2017-09-11 03:40 - 2017-09-11 03:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_assets.bounceexchange.com_0.localstorage-journal 2017-09-12 09:08 - 2017-09-12 09:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_auid.adledge.com_0.localstorage 2017-09-12 09:08 - 2017-09-12 09:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_auid.adledge.com_0.localstorage-journal 2017-09-11 03:44 - 2017-09-11 03:44 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 03:44 - 2017-09-11 03:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 22:23 - 2017-09-11 22:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_cdn.krxd.net_0.localstorage 2017-09-11 22:23 - 2017-09-11 22:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_cdn.krxd.net_0.localstorage-journal 2017-09-11 11:07 - 2017-09-11 11:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_connexity.net_0.localstorage 2017-09-11 11:07 - 2017-09-11 11:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 11:03 - 2017-09-11 11:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_gateway.foresee.com_0.localstorage 2017-09-11 11:03 - 2017-09-11 11:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_gateway.foresee.com_0.localstorage-journal 2017-09-09 23:17 - 2017-09-09 23:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_imasdk.googleapis.com_0.localstorage 2017-09-09 23:17 - 2017-09-09 23:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_imasdk.googleapis.com_0.localstorage-journal 2017-09-11 22:24 - 2017-09-11 22:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_serveads.co_0.localstorage 2017-09-11 22:24 - 2017-09-11 22:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_serveads.co_0.localstorage-journal 2017-09-11 22:23 - 2017-09-11 22:24 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 22:23 - 2017-09-11 22:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-09 23:16 - 2017-09-09 23:16 - 000054272 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_static.olark.com_0.localstorage 2017-09-09 23:16 - 2017-09-09 23:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_static.olark.com_0.localstorage-journal 2017-09-11 03:40 - 2017-09-11 03:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_tpc.googlesyndication.com_0.localstorage 2017-09-11 03:40 - 2017-09-11 03:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_tpc.googlesyndication.com_0.localstorage-journal 2017-09-11 11:03 - 2017-09-11 11:03 - 002072576 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_www.pacogames.com_0.localstorage 2017-09-11 11:03 - 2017-09-11 11:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_www.pacogames.com_0.localstorage-journal 2017-09-11 22:22 - 2017-09-11 22:23 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_www.prevention.com_0.localstorage 2017-09-11 22:22 - 2017-09-11 22:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_www.prevention.com_0.localstorage-journal 2017-09-09 23:16 - 2017-09-09 23:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_www.stickyj.com_0.localstorage 2017-09-09 23:16 - 2017-09-09 23:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_www.stickyj.com_0.localstorage-journal 2017-09-12 05:31 - 2017-09-12 05:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_www.youtube.com_0.localstorage 2017-09-12 05:31 - 2017-09-12 05:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-09 23:16 - 2017-09-09 23:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data 2017-09-09 23:16 - 2017-09-12 09:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash 2017-09-09 23:16 - 2017-09-09 23:16 - 027246502 ____T () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\DF40.tmp 2017-09-09 23:16 - 2017-09-09 23:16 - 000000000 ____T () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\DF41.tmp 2017-09-09 23:16 - 2017-09-09 23:16 - 000000000 ____T () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\DF52.tmp 2017-09-09 23:16 - 2017-09-09 23:16 - 000000000 ____T () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\DF53.tmp 2017-09-09 23:16 - 2017-09-09 23:16 - 000003358 ____T () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\E290.tmp 2017-09-09 23:16 - 2017-09-09 23:16 - 000004096 ____T () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\FE56.tmp 2017-09-09 23:16 - 2017-09-09 23:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-09 23:16 - 2017-09-09 23:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-09 23:16 - 2017-09-09 23:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\HNXYU2ZT 2017-09-09 23:16 - 2017-09-09 23:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot 2017-09-09 23:16 - 2017-09-09 23:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-09 23:16 - 2017-09-11 22:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD 2017-09-09 23:16 - 2017-09-12 09:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\cdn.stickyadstv.com 2017-09-11 03:44 - 2017-09-11 03:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\cdncache-a.akamaihd.net 2017-09-11 03:44 - 2017-09-11 03:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\cdncache-a.akamaihd.net\items 2017-09-11 03:44 - 2017-09-11 03:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 03:44 - 2017-09-11 22:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 03:44 - 2017-09-11 22:23 - 000000428 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-09 23:16 - 2017-09-12 09:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\eereader.com 2017-09-11 03:42 - 2017-09-11 11:08 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\eereader.com\analytics.sol 2017-09-11 03:42 - 2017-09-12 09:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\efreader.com 2017-09-11 03:48 - 2017-09-12 09:09 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\efreader.com\analytics.sol 2017-09-09 23:16 - 2017-09-12 09:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\egreader.com 2017-09-11 11:05 - 2017-09-11 11:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\inread.anyclip.com 2017-09-11 11:05 - 2017-09-11 11:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\inread.anyclip.com\ac# 2017-09-11 11:05 - 2017-09-11 11:05 - 000000441 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-11 22:26 - 2017-09-11 22:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\live.sekindo.com 2017-09-09 23:16 - 2017-09-09 23:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\macromedia.com 2017-09-09 23:16 - 2017-09-09 23:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\macromedia.com\support 2017-09-09 23:16 - 2017-09-09 23:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\macromedia.com\support\flashplayer 2017-09-09 23:16 - 2017-09-11 22:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\macromedia.com\support\flashplayer\sys 2017-09-09 23:16 - 2017-09-11 22:26 - 000000533 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-09 23:16 - 2017-09-09 23:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-09 23:16 - 2017-09-09 23:16 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 03:44 - 2017-09-11 03:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 03:44 - 2017-09-11 03:44 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-09 23:16 - 2017-09-09 23:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-09 23:16 - 2017-09-09 23:16 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 03:42 - 2017-09-11 03:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 03:42 - 2017-09-11 03:42 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-09 23:16 - 2017-09-09 23:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-09 23:16 - 2017-09-09 23:16 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 11:05 - 2017-09-11 11:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 11:05 - 2017-09-11 11:05 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-11 22:26 - 2017-09-11 22:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\macromedia.com\support\flashplayer\sys\#live.sekindo.com 2017-09-11 22:26 - 2017-09-11 22:26 - 000000086 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data651\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\YDZV67ZD\macromedia.com\support\flashplayer\sys\#live.sekindo.com\settings.sol 2017-09-10 19:51 - 2017-09-12 04:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652 2017-09-10 19:51 - 2017-09-12 02:58 - 000275456 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Cookies 2017-09-10 19:51 - 2017-09-12 02:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Cookies-journal 2017-09-11 03:23 - 2017-09-11 03:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\databases 2017-09-11 03:23 - 2017-09-11 03:23 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\databases\Databases.db 2017-09-11 03:23 - 2017-09-11 03:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\databases\Databases.db-journal 2017-09-10 19:59 - 2017-09-12 02:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\File System 2017-09-10 19:59 - 2017-09-12 02:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\File System\Origins 2017-09-10 19:59 - 2017-09-12 02:56 - 000000383 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\File System\Origins\000003.log 2017-09-12 02:56 - 2017-09-12 02:56 - 000000291 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\File System\Origins\000004.ldb 2017-09-12 02:56 - 2017-09-12 02:56 - 000000291 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\File System\Origins\000005.ldb 2017-09-10 19:59 - 2017-09-10 19:59 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\File System\Origins\CURRENT 2017-09-10 19:59 - 2017-09-10 19:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\File System\Origins\LOCK 2017-09-10 19:59 - 2017-09-12 02:56 - 000000744 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\File System\Origins\LOG 2017-09-10 19:59 - 2017-09-12 02:53 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\File System\Origins\LOG.old 2017-09-10 19:59 - 2017-09-10 19:59 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\File System\Origins\MANIFEST-000001 2017-09-11 03:23 - 2017-09-11 03:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\File System\Origins\lost 2017-09-11 03:23 - 2017-09-12 02:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB 2017-09-11 03:23 - 2017-09-11 03:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb 2017-09-11 03:23 - 2017-09-11 03:23 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\000003.log 2017-09-11 03:23 - 2017-09-11 03:23 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\CURRENT 2017-09-11 03:23 - 2017-09-11 03:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\LOCK 2017-09-11 03:23 - 2017-09-11 03:23 - 000000160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\LOG 2017-09-11 03:23 - 2017-09-11 03:23 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 03:24 - 2017-09-11 03:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.food.com_0.indexeddb.leveldb 2017-09-11 03:24 - 2017-09-11 03:24 - 000000174 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.food.com_0.indexeddb.leveldb\000003.log 2017-09-11 03:24 - 2017-09-11 03:24 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.food.com_0.indexeddb.leveldb\CURRENT 2017-09-11 03:24 - 2017-09-11 03:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.food.com_0.indexeddb.leveldb\LOCK 2017-09-11 03:24 - 2017-09-11 03:24 - 000000155 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.food.com_0.indexeddb.leveldb\LOG 2017-09-11 03:24 - 2017-09-11 03:24 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.food.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 03:23 - 2017-09-11 03:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.insideedition.com_0.indexeddb.leveldb 2017-09-11 03:23 - 2017-09-11 03:23 - 000000192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.insideedition.com_0.indexeddb.leveldb\000003.log 2017-09-11 03:23 - 2017-09-11 03:23 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.insideedition.com_0.indexeddb.leveldb\CURRENT 2017-09-11 03:23 - 2017-09-11 03:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.insideedition.com_0.indexeddb.leveldb\LOCK 2017-09-11 03:23 - 2017-09-11 03:23 - 000000164 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.insideedition.com_0.indexeddb.leveldb\LOG 2017-09-11 03:23 - 2017-09-11 03:23 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.insideedition.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 02:52 - 2017-09-12 02:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb 2017-09-12 02:52 - 2017-09-12 02:52 - 000000172 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\000003.log 2017-09-12 02:52 - 2017-09-12 02:52 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\CURRENT 2017-09-12 02:52 - 2017-09-12 02:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOCK 2017-09-12 02:52 - 2017-09-12 02:52 - 000000154 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOG 2017-09-12 02:52 - 2017-09-12 02:52 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 19:51 - 2017-09-12 02:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage 2017-09-12 02:50 - 2017-09-12 02:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-12 02:50 - 2017-09-12 02:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-12 02:52 - 2017-09-12 02:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_connexity.net_0.localstorage 2017-09-12 02:52 - 2017-09-12 02:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-12 02:56 - 2017-09-12 02:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_in.reuters.com_0.localstorage 2017-09-12 02:56 - 2017-09-12 02:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_in.reuters.com_0.localstorage-journal 2017-09-12 02:52 - 2017-09-12 02:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_nflfilms.nfl.com_0.localstorage 2017-09-12 02:52 - 2017-09-12 02:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_nflfilms.nfl.com_0.localstorage-journal 2017-09-11 03:25 - 2017-09-11 03:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.aetv.com_0.localstorage 2017-09-11 03:25 - 2017-09-11 03:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.aetv.com_0.localstorage-journal 2017-09-12 02:54 - 2017-09-12 02:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-12 02:54 - 2017-09-12 02:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-11 03:25 - 2017-09-11 03:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.bendbulletin.com_0.localstorage 2017-09-11 03:25 - 2017-09-11 03:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.bendbulletin.com_0.localstorage-journal 2017-09-10 19:53 - 2017-09-11 03:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 19:53 - 2017-09-11 03:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 19:55 - 2017-09-10 19:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.complex.com_0.localstorage 2017-09-10 19:55 - 2017-09-10 19:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-10 19:55 - 2017-09-12 02:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-10 19:55 - 2017-09-12 02:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-10 19:57 - 2017-09-10 19:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-10 19:57 - 2017-09-10 19:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-11 03:24 - 2017-09-11 03:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.food.com_0.localstorage 2017-09-11 03:24 - 2017-09-11 03:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-12 02:53 - 2017-09-12 02:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.innerself.com_0.localstorage 2017-09-12 02:53 - 2017-09-12 02:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.innerself.com_0.localstorage-journal 2017-09-11 03:24 - 2017-09-11 03:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.insideedition.com_0.localstorage 2017-09-11 03:24 - 2017-09-11 03:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.insideedition.com_0.localstorage-journal 2017-09-10 19:54 - 2017-09-10 19:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-10 19:54 - 2017-09-10 19:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-10 19:57 - 2017-09-10 19:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.instyle.com_0.localstorage 2017-09-10 19:57 - 2017-09-10 19:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-10 19:54 - 2017-09-10 19:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-10 19:54 - 2017-09-10 19:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-10 19:54 - 2017-09-10 19:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 19:54 - 2017-09-10 19:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 03:23 - 2017-09-11 03:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.parents.com_0.localstorage 2017-09-11 03:23 - 2017-09-11 03:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-12 02:50 - 2017-09-12 02:51 - 000008192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.turnto23.com_0.localstorage 2017-09-12 02:50 - 2017-09-12 02:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.turnto23.com_0.localstorage-journal 2017-09-12 02:56 - 2017-09-12 02:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.vogue.com_0.localstorage 2017-09-12 02:56 - 2017-09-12 02:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\http_www.vogue.com_0.localstorage-journal 2017-09-11 03:24 - 2017-09-11 03:24 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 03:24 - 2017-09-11 03:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 19:51 - 2017-09-10 19:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\https_cdn.krxd.net_0.localstorage 2017-09-10 19:51 - 2017-09-10 19:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\https_cdn.krxd.net_0.localstorage-journal 2017-09-12 02:50 - 2017-09-12 02:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\https_connexity.net_0.localstorage 2017-09-12 02:50 - 2017-09-12 02:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 03:20 - 2017-09-11 03:20 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 03:20 - 2017-09-11 03:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 03:20 - 2017-09-11 03:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\https_pokemondb.net_0.localstorage 2017-09-11 03:20 - 2017-09-11 03:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\https_pokemondb.net_0.localstorage-journal 2017-09-10 19:51 - 2017-09-10 19:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 19:51 - 2017-09-10 19:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 19:51 - 2017-09-11 03:20 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 19:51 - 2017-09-11 03:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 03:20 - 2017-09-11 03:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\https_www.booking.com_0.localstorage 2017-09-11 03:20 - 2017-09-11 03:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\https_www.booking.com_0.localstorage-journal 2017-09-10 19:51 - 2017-09-10 19:53 - 000029696 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\https_www.groupon.com_0.localstorage 2017-09-10 19:51 - 2017-09-10 19:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\https_www.groupon.com_0.localstorage-journal 2017-09-10 19:51 - 2017-09-10 19:52 - 000012288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\https_www.today.com_0.localstorage 2017-09-10 19:51 - 2017-09-10 19:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Local Storage\https_www.today.com_0.localstorage-journal 2017-09-10 19:51 - 2017-09-10 19:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data 2017-09-10 19:51 - 2017-09-12 02:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash 2017-09-10 19:51 - 2017-09-10 19:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 19:51 - 2017-09-10 19:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 19:51 - 2017-09-10 19:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\75FZE9BJ 2017-09-10 19:51 - 2017-09-10 19:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 19:51 - 2017-09-10 19:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 19:51 - 2017-09-12 02:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY 2017-09-10 19:53 - 2017-09-10 19:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\cdn.dashbid.io 2017-09-10 19:53 - 2017-09-10 19:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\cdn.dashbid.io\prod 2017-09-10 19:53 - 2017-09-10 19:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-10 19:53 - 2017-09-10 19:53 - 000000069 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-10 19:51 - 2017-09-12 02:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\cdn.stickyadstv.com 2017-09-10 19:51 - 2017-09-10 19:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\cdncache-a.akamaihd.net 2017-09-10 19:51 - 2017-09-10 19:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\cdncache-a.akamaihd.net\items 2017-09-10 19:51 - 2017-09-10 19:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 19:51 - 2017-09-11 03:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 19:51 - 2017-09-11 03:26 - 000000415 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 19:51 - 2017-09-12 02:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\eereader.com 2017-09-10 19:53 - 2017-09-12 02:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\efreader.com 2017-09-10 20:01 - 2017-09-12 02:57 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\efreader.com\analytics.sol 2017-09-10 19:51 - 2017-09-12 02:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\egreader.com 2017-09-11 03:25 - 2017-09-11 03:25 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\egreader.com\analytics.sol 2017-09-10 19:51 - 2017-09-10 19:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\macromedia.com 2017-09-10 19:51 - 2017-09-10 19:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\macromedia.com\support 2017-09-10 19:51 - 2017-09-10 19:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\macromedia.com\support\flashplayer 2017-09-10 19:51 - 2017-09-12 02:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\macromedia.com\support\flashplayer\sys 2017-09-10 19:51 - 2017-09-12 02:50 - 000000527 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 19:53 - 2017-09-10 19:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-10 19:53 - 2017-09-10 19:53 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-10 19:51 - 2017-09-10 19:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 19:51 - 2017-09-10 19:51 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 19:51 - 2017-09-10 19:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 19:51 - 2017-09-10 19:51 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 19:51 - 2017-09-10 19:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 19:51 - 2017-09-10 19:51 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 19:53 - 2017-09-10 19:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 19:53 - 2017-09-10 19:53 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 19:51 - 2017-09-10 19:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 19:51 - 2017-09-10 19:51 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-12 02:50 - 2017-09-12 02:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\macromedia.com\support\flashplayer\sys\#www.uclick.com 2017-09-12 02:50 - 2017-09-12 02:50 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\macromedia.com\support\flashplayer\sys\#www.uclick.com\settings.sol 2017-09-12 02:50 - 2017-09-12 02:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\www.uclick.com 2017-09-12 02:50 - 2017-09-12 02:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\www.uclick.com\puzzles 2017-09-12 02:50 - 2017-09-12 02:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\www.uclick.com\puzzles\sudoc 2017-09-12 02:50 - 2017-09-12 02:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\www.uclick.com\puzzles\sudoc\sudoku_engine_daily.swf 2017-09-12 02:50 - 2017-09-12 02:50 - 000000193 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\www.uclick.com\puzzles\sudoc\sudoku_engine_daily.swf\sudoku08.sol 2017-09-12 02:50 - 2017-09-12 02:50 - 000000312 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\www.uclick.com\puzzles\sudoc\sudoku_engine_daily.swf\sudoku08_history.sol 2017-09-12 02:50 - 2017-09-12 02:50 - 000000432 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data652\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PPAGS8JY\www.uclick.com\puzzles\sudoc\sudoku_engine_daily.swf\undefinedsave.sol 2017-09-11 06:26 - 2017-09-12 02:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653 2017-09-11 06:26 - 2017-09-12 01:35 - 000356352 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Cookies 2017-09-11 06:26 - 2017-09-12 01:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Cookies-journal 2017-09-11 16:27 - 2017-09-11 16:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\databases 2017-09-11 16:27 - 2017-09-11 16:27 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\databases\Databases.db 2017-09-11 16:27 - 2017-09-11 16:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\databases\Databases.db-journal 2017-09-11 06:30 - 2017-09-12 01:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\File System 2017-09-12 01:32 - 2017-09-12 01:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\File System\005 2017-09-12 01:32 - 2017-09-12 01:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\File System\005\t 2017-09-12 01:34 - 2017-09-12 01:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\File System\006 2017-09-12 01:34 - 2017-09-12 01:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\File System\006\t 2017-09-11 06:30 - 2017-09-12 01:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\File System\Origins 2017-09-11 06:30 - 2017-09-12 01:36 - 000000528 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\File System\Origins\000003.log 2017-09-11 06:30 - 2017-09-11 06:30 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\File System\Origins\CURRENT 2017-09-11 06:30 - 2017-09-11 06:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\File System\Origins\LOCK 2017-09-11 06:30 - 2017-09-12 01:34 - 000000393 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\File System\Origins\LOG 2017-09-11 06:30 - 2017-09-12 01:32 - 000000739 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\File System\Origins\LOG.old 2017-09-11 06:30 - 2017-09-11 06:30 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\File System\Origins\MANIFEST-000001 2017-09-11 09:47 - 2017-09-11 09:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\File System\Origins\lost 2017-09-11 16:27 - 2017-09-12 01:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\IndexedDB 2017-09-11 16:27 - 2017-09-11 16:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb 2017-09-11 16:27 - 2017-09-11 16:27 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\000003.log 2017-09-11 16:27 - 2017-09-11 16:27 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\CURRENT 2017-09-11 16:27 - 2017-09-11 16:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\LOCK 2017-09-11 16:27 - 2017-09-11 16:27 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\LOG 2017-09-11 16:27 - 2017-09-11 16:27 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 01:27 - 2017-09-12 01:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\IndexedDB\https_83170087.va.cobrowse.liveperson.net_0.indexeddb.leveldb 2017-09-12 01:27 - 2017-09-12 01:27 - 000000587 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\IndexedDB\https_83170087.va.cobrowse.liveperson.net_0.indexeddb.leveldb\000003.log 2017-09-12 01:27 - 2017-09-12 01:27 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\IndexedDB\https_83170087.va.cobrowse.liveperson.net_0.indexeddb.leveldb\CURRENT 2017-09-12 01:27 - 2017-09-12 01:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\IndexedDB\https_83170087.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOCK 2017-09-12 01:27 - 2017-09-12 01:27 - 000000179 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\IndexedDB\https_83170087.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOG 2017-09-12 01:27 - 2017-09-12 01:27 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\IndexedDB\https_83170087.va.cobrowse.liveperson.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 01:27 - 2017-09-12 01:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb 2017-09-12 01:27 - 2017-09-12 01:27 - 000001338 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\000003.log 2017-09-12 01:27 - 2017-09-12 01:27 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\CURRENT 2017-09-12 01:27 - 2017-09-12 01:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOCK 2017-09-12 01:27 - 2017-09-12 01:27 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOG 2017-09-12 01:27 - 2017-09-12 01:27 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 06:26 - 2017-09-12 01:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage 2017-09-11 09:44 - 2017-09-11 09:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_ad.afy11.net_0.localstorage 2017-09-11 09:44 - 2017-09-11 09:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_ad.afy11.net_0.localstorage-journal 2017-09-11 06:26 - 2017-09-11 09:48 - 000020480 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_allrecipes.com_0.localstorage 2017-09-11 06:26 - 2017-09-11 09:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-11 16:31 - 2017-09-11 16:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-11 16:31 - 2017-09-11 16:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-11 06:28 - 2017-09-11 06:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 06:28 - 2017-09-11 06:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 06:26 - 2017-09-11 06:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 06:26 - 2017-09-11 06:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-11 09:42 - 2017-09-11 09:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_connexity.net_0.localstorage 2017-09-11 09:42 - 2017-09-11 09:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-12 01:33 - 2017-09-12 01:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_in.reuters.com_0.localstorage 2017-09-12 01:33 - 2017-09-12 01:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_in.reuters.com_0.localstorage-journal 2017-09-11 09:40 - 2017-09-11 16:24 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 09:40 - 2017-09-11 16:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 06:30 - 2017-09-11 06:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-11 06:30 - 2017-09-11 06:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-12 01:32 - 2017-09-12 01:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_variety.com_0.localstorage 2017-09-12 01:32 - 2017-09-12 01:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_variety.com_0.localstorage-journal 2017-09-12 01:31 - 2017-09-12 01:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-12 01:31 - 2017-09-12 01:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-11 09:44 - 2017-09-11 09:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.bounty.com_0.localstorage 2017-09-11 09:44 - 2017-09-11 09:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.bounty.com_0.localstorage-journal 2017-09-11 06:29 - 2017-09-12 01:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 06:29 - 2017-09-12 01:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 16:28 - 2017-09-11 16:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.complex.com_0.localstorage 2017-09-11 16:28 - 2017-09-11 16:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-11 16:24 - 2017-09-11 16:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.countryliving.com_0.localstorage 2017-09-11 16:24 - 2017-09-11 16:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.countryliving.com_0.localstorage-journal 2017-09-11 06:30 - 2017-09-11 06:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-11 06:30 - 2017-09-11 06:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-11 09:40 - 2017-09-11 09:42 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.detroitnews.com_0.localstorage 2017-09-11 09:40 - 2017-09-11 09:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.detroitnews.com_0.localstorage-journal 2017-09-11 16:28 - 2017-09-11 16:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.food.com_0.localstorage 2017-09-11 16:28 - 2017-09-11 16:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-12 01:32 - 2017-09-12 01:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-12 01:32 - 2017-09-12 01:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-11 09:45 - 2017-09-11 09:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.foxnews.com_0.localstorage 2017-09-11 09:45 - 2017-09-11 09:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.foxnews.com_0.localstorage-journal 2017-09-12 01:27 - 2017-09-12 01:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.hugoboss.com_0.localstorage 2017-09-12 01:27 - 2017-09-12 01:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.hugoboss.com_0.localstorage-journal 2017-09-11 06:30 - 2017-09-11 06:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.instyle.com_0.localstorage 2017-09-11 06:30 - 2017-09-11 06:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 09:42 - 2017-09-11 09:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 09:42 - 2017-09-11 09:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 09:43 - 2017-09-11 09:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-11 09:43 - 2017-09-11 09:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-11 16:27 - 2017-09-12 01:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.latimes.com_0.localstorage 2017-09-11 16:27 - 2017-09-12 01:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-11 16:30 - 2017-09-11 16:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.macworld.com_0.localstorage 2017-09-11 16:30 - 2017-09-11 16:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-11 16:27 - 2017-09-11 16:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.mylifetime.com_0.localstorage 2017-09-11 16:27 - 2017-09-11 16:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.mylifetime.com_0.localstorage-journal 2017-09-11 09:43 - 2017-09-11 09:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-11 09:43 - 2017-09-11 09:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-11 09:42 - 2017-09-12 01:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 09:42 - 2017-09-12 01:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-12 01:27 - 2017-09-12 01:29 - 000143360 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.nola.com_0.localstorage 2017-09-12 01:27 - 2017-09-12 01:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.nola.com_0.localstorage-journal 2017-09-11 06:29 - 2017-09-11 06:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-11 06:29 - 2017-09-11 06:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-11 06:31 - 2017-09-11 06:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.torontosun.com_0.localstorage 2017-09-11 06:31 - 2017-09-11 06:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.torontosun.com_0.localstorage-journal 2017-09-11 09:45 - 2017-09-11 09:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.yupptv.com_0.localstorage 2017-09-11 09:45 - 2017-09-11 09:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.yupptv.com_0.localstorage-journal 2017-09-11 16:24 - 2017-09-11 16:25 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.zappos.com_0.localstorage 2017-09-11 16:24 - 2017-09-11 16:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\http_www.zappos.com_0.localstorage-journal 2017-09-11 06:26 - 2017-09-12 01:27 - 000008192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\https_assets.bounceexchange.com_0.localstorage 2017-09-11 06:26 - 2017-09-12 01:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\https_assets.bounceexchange.com_0.localstorage-journal 2017-09-11 09:44 - 2017-09-11 09:44 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 09:44 - 2017-09-11 09:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 09:42 - 2017-09-11 09:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\https_connexity.net_0.localstorage 2017-09-11 09:42 - 2017-09-11 09:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 09:40 - 2017-09-11 16:24 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 09:40 - 2017-09-11 16:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 09:40 - 2017-09-11 09:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\https_embed.sendtonews.com_0.localstorage 2017-09-11 09:40 - 2017-09-11 09:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\https_embed.sendtonews.com_0.localstorage-journal 2017-09-12 01:28 - 2017-09-12 01:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\https_player.mediabong.net_0.localstorage 2017-09-12 01:28 - 2017-09-12 01:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\https_player.mediabong.net_0.localstorage-journal 2017-09-11 09:40 - 2017-09-11 16:24 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 09:40 - 2017-09-11 16:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-12 01:27 - 2017-09-12 01:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\https_www.youtube.com_0.localstorage 2017-09-12 01:27 - 2017-09-12 01:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-11 06:26 - 2017-09-11 06:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data 2017-09-11 06:26 - 2017-09-12 01:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash 2017-09-11 06:26 - 2017-09-11 06:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 06:26 - 2017-09-11 06:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 06:26 - 2017-09-11 06:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\FHTCV5WE 2017-09-11 06:26 - 2017-09-11 06:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 06:26 - 2017-09-11 06:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 06:26 - 2017-09-11 09:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F 2017-09-11 09:45 - 2017-09-11 09:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\cdn.dashbid.io 2017-09-11 09:45 - 2017-09-11 09:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\cdn.dashbid.io\prod 2017-09-11 09:45 - 2017-09-11 09:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-11 09:45 - 2017-09-11 09:45 - 000000236 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-11 06:27 - 2017-09-12 01:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\cdn.stickyadstv.com 2017-09-11 06:30 - 2017-09-11 06:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\cdncache-a.akamaihd.net 2017-09-11 06:30 - 2017-09-11 06:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\cdncache-a.akamaihd.net\items 2017-09-11 06:30 - 2017-09-11 06:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 06:30 - 2017-09-11 16:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 06:30 - 2017-09-11 16:24 - 000000428 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 06:26 - 2017-09-12 01:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\eereader.com 2017-09-11 09:45 - 2017-09-11 09:45 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\eereader.com\analytics.sol 2017-09-11 06:28 - 2017-09-12 01:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\efreader.com 2017-09-11 06:36 - 2017-09-12 01:36 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\efreader.com\analytics.sol 2017-09-11 06:26 - 2017-09-12 01:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\egreader.com 2017-09-11 09:45 - 2017-09-11 09:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\inread.anyclip.com 2017-09-11 09:45 - 2017-09-11 09:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\inread.anyclip.com\ac# 2017-09-11 09:45 - 2017-09-11 09:45 - 000000439 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-11 06:26 - 2017-09-11 06:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\macromedia.com 2017-09-11 06:26 - 2017-09-11 06:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\macromedia.com\support 2017-09-11 06:26 - 2017-09-11 06:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\macromedia.com\support\flashplayer 2017-09-11 06:26 - 2017-09-11 09:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\macromedia.com\support\flashplayer\sys 2017-09-11 06:26 - 2017-09-11 09:45 - 000000531 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 09:45 - 2017-09-11 09:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-11 09:45 - 2017-09-11 09:45 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-11 06:27 - 2017-09-11 06:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 06:27 - 2017-09-11 06:27 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 06:30 - 2017-09-11 06:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 06:30 - 2017-09-11 06:30 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 06:26 - 2017-09-11 06:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 06:26 - 2017-09-11 06:26 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 06:28 - 2017-09-11 06:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 06:28 - 2017-09-11 06:28 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 06:26 - 2017-09-11 06:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 06:26 - 2017-09-11 06:26 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 09:45 - 2017-09-11 09:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 09:45 - 2017-09-11 09:45 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data653\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\N7D9YZ7F\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-10 13:46 - 2017-09-10 15:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654 2017-09-10 13:46 - 2017-09-10 13:54 - 000183296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Cookies 2017-09-10 13:46 - 2017-09-10 13:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Cookies-journal 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\databases 2017-09-10 13:46 - 2017-09-10 13:46 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\databases\Databases.db 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\databases\Databases.db-journal 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\File System 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\File System\000 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\File System\000\t 2017-09-10 13:46 - 2017-09-10 13:46 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\File System\000\t\.usage 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\File System\000\t\Paths 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\File System\000\t\Paths\000003.log 2017-09-10 13:46 - 2017-09-10 13:46 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\File System\000\t\Paths\CURRENT 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\File System\000\t\Paths\LOCK 2017-09-10 13:46 - 2017-09-10 13:46 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\File System\000\t\Paths\LOG 2017-09-10 13:46 - 2017-09-10 13:46 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\File System\000\t\Paths\MANIFEST-000001 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\File System\Origins 2017-09-10 13:46 - 2017-09-10 13:46 - 000000111 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\File System\Origins\000003.log 2017-09-10 13:46 - 2017-09-10 13:46 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\File System\Origins\CURRENT 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\File System\Origins\LOCK 2017-09-10 13:46 - 2017-09-10 13:46 - 000000128 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\File System\Origins\LOG 2017-09-10 13:46 - 2017-09-10 13:46 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\File System\Origins\MANIFEST-000001 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\IndexedDB 2017-09-10 13:46 - 2017-09-10 13:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb 2017-09-10 13:46 - 2017-09-10 13:47 - 000000367 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\000003.log 2017-09-10 13:46 - 2017-09-10 13:46 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\CURRENT 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\LOCK 2017-09-10 13:46 - 2017-09-10 13:47 - 000000379 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\LOG 2017-09-10 13:46 - 2017-09-10 13:46 - 000000168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\LOG.old 2017-09-10 13:46 - 2017-09-10 13:46 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 13:46 - 2017-09-10 13:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage 2017-09-10 13:52 - 2017-09-10 13:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\http_allrecipes.com_0.localstorage 2017-09-10 13:52 - 2017-09-10 13:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-10 13:50 - 2017-09-10 13:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-10 13:50 - 2017-09-10 13:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-10 13:48 - 2017-09-10 13:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 13:48 - 2017-09-10 13:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 13:50 - 2017-09-10 13:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-10 13:50 - 2017-09-10 13:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-10 13:48 - 2017-09-10 13:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 13:48 - 2017-09-10 13:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 13:50 - 2017-09-10 13:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\http_www.latimes.com_0.localstorage 2017-09-10 13:50 - 2017-09-10 13:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-10 13:50 - 2017-09-10 13:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-10 13:50 - 2017-09-10 13:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-10 13:48 - 2017-09-10 13:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 13:48 - 2017-09-10 13:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 13:51 - 2017-09-10 13:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\http_www.slice.ca_0.localstorage 2017-09-10 13:51 - 2017-09-10 13:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\http_www.slice.ca_0.localstorage-journal 2017-09-10 13:46 - 2017-09-10 13:46 - 000033792 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\https_a8140550914.cdn.optimizely.com_0.localstorage 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\https_a8140550914.cdn.optimizely.com_0.localstorage-journal 2017-09-10 13:49 - 2017-09-10 13:49 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 13:49 - 2017-09-10 13:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 13:46 - 2017-09-10 13:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\https_cdn.krxd.net_0.localstorage 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\https_cdn.krxd.net_0.localstorage-journal 2017-09-10 13:46 - 2017-09-10 13:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\https_sb.monetate.net_0.localstorage 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\https_sb.monetate.net_0.localstorage-journal 2017-09-10 13:46 - 2017-09-10 13:46 - 000033792 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\https_www.bestbuy.com_0.localstorage 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\https_www.bestbuy.com_0.localstorage-journal 2017-09-10 13:46 - 2017-09-10 13:47 - 000013312 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\https_www.fitnessmagazine.com_0.localstorage 2017-09-10 13:46 - 2017-09-10 13:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Local Storage\https_www.fitnessmagazine.com_0.localstorage-journal 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data 2017-09-10 13:46 - 2017-09-10 13:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\MDNQG8DW 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 13:46 - 2017-09-10 13:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ECJG4EWQ 2017-09-10 13:46 - 2017-09-10 13:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ECJG4EWQ\cdn.stickyadstv.com 2017-09-10 13:46 - 2017-09-10 13:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ECJG4EWQ\eereader.com 2017-09-10 13:47 - 2017-09-10 13:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ECJG4EWQ\efreader.com 2017-09-10 13:46 - 2017-09-10 13:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ECJG4EWQ\egreader.com 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ECJG4EWQ\macromedia.com 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ECJG4EWQ\macromedia.com\support 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ECJG4EWQ\macromedia.com\support\flashplayer 2017-09-10 13:46 - 2017-09-10 13:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ECJG4EWQ\macromedia.com\support\flashplayer\sys 2017-09-10 13:46 - 2017-09-10 13:48 - 000000464 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ECJG4EWQ\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ECJG4EWQ\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 13:46 - 2017-09-10 13:46 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ECJG4EWQ\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ECJG4EWQ\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 13:46 - 2017-09-10 13:46 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ECJG4EWQ\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 13:47 - 2017-09-10 13:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ECJG4EWQ\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 13:47 - 2017-09-10 13:47 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ECJG4EWQ\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 13:46 - 2017-09-10 13:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ECJG4EWQ\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 13:46 - 2017-09-10 13:46 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data654\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ECJG4EWQ\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 18:20 - 2017-09-11 03:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655 2017-09-10 18:20 - 2017-09-11 02:34 - 000281600 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Cookies 2017-09-10 18:20 - 2017-09-11 02:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Cookies-journal 2017-09-10 18:26 - 2017-09-10 18:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\databases 2017-09-10 18:26 - 2017-09-10 18:26 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\databases\Databases.db 2017-09-10 18:26 - 2017-09-10 18:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\databases\Databases.db-journal 2017-09-10 18:20 - 2017-09-11 02:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\000 2017-09-10 18:20 - 2017-09-10 18:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\000\t 2017-09-10 18:26 - 2017-09-10 18:26 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\000\t\.usage 2017-09-10 18:26 - 2017-09-10 18:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\000\t\Paths 2017-09-10 18:26 - 2017-09-10 18:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\000\t\Paths\000003.log 2017-09-10 18:26 - 2017-09-10 18:26 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\000\t\Paths\CURRENT 2017-09-10 18:26 - 2017-09-10 18:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\000\t\Paths\LOCK 2017-09-10 18:26 - 2017-09-10 18:26 - 000000131 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\000\t\Paths\LOG 2017-09-10 18:26 - 2017-09-10 18:26 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\000\t\Paths\MANIFEST-000001 2017-09-10 18:22 - 2017-09-10 18:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\001 2017-09-10 18:22 - 2017-09-10 18:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\001\t 2017-09-10 18:26 - 2017-09-10 18:26 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\001\t\.usage 2017-09-10 18:26 - 2017-09-10 18:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\001\t\Paths 2017-09-10 18:26 - 2017-09-10 18:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\001\t\Paths\000003.log 2017-09-10 18:26 - 2017-09-10 18:26 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\001\t\Paths\CURRENT 2017-09-10 18:26 - 2017-09-10 18:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\001\t\Paths\LOCK 2017-09-10 18:26 - 2017-09-10 18:26 - 000000131 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\001\t\Paths\LOG 2017-09-10 18:26 - 2017-09-10 18:26 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\001\t\Paths\MANIFEST-000001 2017-09-10 18:27 - 2017-09-10 18:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\002 2017-09-10 18:27 - 2017-09-11 02:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\002\t 2017-09-11 02:31 - 2017-09-11 02:31 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\002\t\.usage 2017-09-11 02:31 - 2017-09-11 02:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\002\t\Paths 2017-09-11 02:31 - 2017-09-11 02:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\002\t\Paths\000003.log 2017-09-11 02:31 - 2017-09-11 02:31 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\002\t\Paths\CURRENT 2017-09-11 02:31 - 2017-09-11 02:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\002\t\Paths\LOCK 2017-09-11 02:31 - 2017-09-11 02:31 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\002\t\Paths\LOG 2017-09-11 02:31 - 2017-09-11 02:31 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\002\t\Paths\MANIFEST-000001 2017-09-11 02:28 - 2017-09-11 02:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\003 2017-09-11 02:28 - 2017-09-11 02:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\003\t 2017-09-11 02:31 - 2017-09-11 02:31 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\003\t\.usage 2017-09-11 02:31 - 2017-09-11 02:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\003\t\Paths 2017-09-11 02:31 - 2017-09-11 02:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\003\t\Paths\000003.log 2017-09-11 02:31 - 2017-09-11 02:31 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\003\t\Paths\CURRENT 2017-09-11 02:31 - 2017-09-11 02:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\003\t\Paths\LOCK 2017-09-11 02:31 - 2017-09-11 02:31 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\003\t\Paths\LOG 2017-09-11 02:31 - 2017-09-11 02:31 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\003\t\Paths\MANIFEST-000001 2017-09-10 18:20 - 2017-09-11 02:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\Origins 2017-09-10 18:20 - 2017-09-11 02:29 - 000000301 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\Origins\000003.log 2017-09-10 18:20 - 2017-09-10 18:20 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\Origins\CURRENT 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\Origins\LOCK 2017-09-10 18:20 - 2017-09-11 02:31 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\Origins\LOG 2017-09-10 18:20 - 2017-09-11 02:31 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\Origins\LOG.old 2017-09-10 18:20 - 2017-09-10 18:20 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\File System\Origins\MANIFEST-000001 2017-09-10 18:26 - 2017-09-11 02:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\IndexedDB 2017-09-10 18:26 - 2017-09-10 18:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb 2017-09-10 18:26 - 2017-09-10 18:26 - 000000178 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\000003.log 2017-09-10 18:26 - 2017-09-10 18:26 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\CURRENT 2017-09-10 18:26 - 2017-09-10 18:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\LOCK 2017-09-10 18:26 - 2017-09-10 18:26 - 000000156 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\LOG 2017-09-10 18:26 - 2017-09-10 18:26 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 02:31 - 2017-09-11 02:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\IndexedDB\http_www.eatingwell.com_0.indexeddb.leveldb 2017-09-11 02:31 - 2017-09-11 02:31 - 000000186 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\IndexedDB\http_www.eatingwell.com_0.indexeddb.leveldb\000003.log 2017-09-11 02:31 - 2017-09-11 02:31 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\IndexedDB\http_www.eatingwell.com_0.indexeddb.leveldb\CURRENT 2017-09-11 02:31 - 2017-09-11 02:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\IndexedDB\http_www.eatingwell.com_0.indexeddb.leveldb\LOCK 2017-09-11 02:31 - 2017-09-11 02:31 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\IndexedDB\http_www.eatingwell.com_0.indexeddb.leveldb\LOG 2017-09-11 02:31 - 2017-09-11 02:31 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\IndexedDB\http_www.eatingwell.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 18:20 - 2017-09-11 02:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage 2017-09-10 18:26 - 2017-09-10 18:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_allrecipes.com_0.localstorage 2017-09-10 18:26 - 2017-09-10 18:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-11 02:28 - 2017-09-11 02:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 02:28 - 2017-09-11 02:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 02:26 - 2017-09-11 02:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 02:26 - 2017-09-11 02:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 18:22 - 2017-09-10 18:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_connexity.net_0.localstorage 2017-09-10 18:22 - 2017-09-10 18:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 02:32 - 2017-09-11 02:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_de.reuters.com_0.localstorage 2017-09-11 02:32 - 2017-09-11 02:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_de.reuters.com_0.localstorage-journal 2017-09-10 18:20 - 2017-09-10 18:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_edata.ndtv.com_0.localstorage 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_edata.ndtv.com_0.localstorage-journal 2017-09-10 18:20 - 2017-09-10 18:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 18:20 - 2017-09-10 18:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 18:20 - 2017-09-10 18:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_tpc.googlesyndication.com_0.localstorage 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_tpc.googlesyndication.com_0.localstorage-journal 2017-09-10 18:24 - 2017-09-10 18:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_washingtonmonthly.com_0.localstorage 2017-09-10 18:24 - 2017-09-10 18:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_washingtonmonthly.com_0.localstorage-journal 2017-09-11 02:30 - 2017-09-11 02:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-11 02:30 - 2017-09-11 02:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-10 18:22 - 2017-09-11 02:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 18:22 - 2017-09-11 02:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 18:23 - 2017-09-10 18:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.courant.com_0.localstorage 2017-09-10 18:23 - 2017-09-10 18:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-11 02:29 - 2017-09-11 02:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-11 02:29 - 2017-09-11 02:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-11 02:26 - 2017-09-11 02:27 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.fox5vegas.com_0.localstorage 2017-09-11 02:26 - 2017-09-11 02:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.fox5vegas.com_0.localstorage-journal 2017-09-10 18:25 - 2017-09-10 18:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.golfdigest.com_0.localstorage 2017-09-10 18:25 - 2017-09-10 18:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.golfdigest.com_0.localstorage-journal 2017-09-10 18:23 - 2017-09-10 18:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-10 18:23 - 2017-09-10 18:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-11 02:29 - 2017-09-11 02:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-11 02:29 - 2017-09-11 02:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-11 02:31 - 2017-09-11 02:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 02:31 - 2017-09-11 02:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-10 18:23 - 2017-09-10 18:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-10 18:23 - 2017-09-10 18:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-10 18:20 - 2017-09-10 18:21 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.ndtv.com_0.localstorage 2017-09-10 18:20 - 2017-09-10 18:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.ndtv.com_0.localstorage-journal 2017-09-10 18:22 - 2017-09-10 18:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 18:22 - 2017-09-10 18:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 02:29 - 2017-09-11 02:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.reuters.com_0.localstorage 2017-09-11 02:29 - 2017-09-11 02:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-10 18:22 - 2017-09-10 18:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\https_connexity.net_0.localstorage 2017-09-10 18:22 - 2017-09-10 18:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 18:20 - 2017-09-11 02:26 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 18:20 - 2017-09-11 02:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 02:27 - 2017-09-11 02:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\https_player.mediabong.net_0.localstorage 2017-09-11 02:27 - 2017-09-11 02:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\https_player.mediabong.net_0.localstorage-journal 2017-09-10 18:20 - 2017-09-10 18:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 02:26 - 2017-09-11 02:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\https_regionsbank.mpeasylink.com_0.localstorage 2017-09-11 02:26 - 2017-09-11 02:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\https_regionsbank.mpeasylink.com_0.localstorage-journal 2017-09-10 18:20 - 2017-09-11 02:26 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 18:20 - 2017-09-11 02:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 18:21 - 2017-09-10 18:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\https_tpc.googlesyndication.com_0.localstorage 2017-09-10 18:21 - 2017-09-10 18:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\https_tpc.googlesyndication.com_0.localstorage-journal 2017-09-10 18:20 - 2017-09-10 18:22 - 000013312 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\https_www.cheapflights.com_0.localstorage 2017-09-10 18:20 - 2017-09-10 18:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Local Storage\https_www.cheapflights.com_0.localstorage-journal 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data 2017-09-10 18:20 - 2017-09-11 02:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\UQ9V5HHD 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 18:20 - 2017-09-11 02:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62 2017-09-10 18:20 - 2017-09-11 02:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\cdn.stickyadstv.com 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\cdncache-a.akamaihd.net 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\cdncache-a.akamaihd.net\items 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 18:20 - 2017-09-11 02:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 18:20 - 2017-09-11 02:30 - 000000593 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 18:20 - 2017-09-11 02:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\eereader.com 2017-09-10 18:22 - 2017-09-11 02:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\efreader.com 2017-09-11 02:29 - 2017-09-11 02:33 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\efreader.com\analytics.sol 2017-09-10 18:20 - 2017-09-11 02:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\egreader.com 2017-09-11 02:30 - 2017-09-11 02:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\live.sekindo.com 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\macromedia.com 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\macromedia.com\support 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\macromedia.com\support\flashplayer 2017-09-10 18:20 - 2017-09-11 02:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\macromedia.com\support\flashplayer\sys 2017-09-10 18:20 - 2017-09-11 02:30 - 000000538 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 18:20 - 2017-09-10 18:20 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 18:20 - 2017-09-10 18:20 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 18:20 - 2017-09-10 18:20 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 18:22 - 2017-09-10 18:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 18:22 - 2017-09-10 18:22 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 18:20 - 2017-09-10 18:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 18:20 - 2017-09-10 18:20 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 02:30 - 2017-09-11 02:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\macromedia.com\support\flashplayer\sys\#live.sekindo.com 2017-09-11 02:30 - 2017-09-11 02:30 - 000000086 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\macromedia.com\support\flashplayer\sys\#live.sekindo.com\settings.sol 2017-09-11 02:28 - 2017-09-11 02:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com 2017-09-11 02:28 - 2017-09-11 02:28 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com\settings.sol 2017-09-11 02:28 - 2017-09-11 02:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\objects.tremormedia.com 2017-09-11 02:28 - 2017-09-11 02:28 - 000000073 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data655\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\56CQ6Q62\objects.tremormedia.com\com.quantserve.sol 2017-09-09 22:05 - 2017-09-12 09:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656 2017-09-09 22:05 - 2017-09-12 08:42 - 000344064 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Cookies 2017-09-09 22:05 - 2017-09-12 08:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Cookies-journal 2017-09-09 22:07 - 2017-09-09 22:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\databases 2017-09-09 22:07 - 2017-09-09 22:07 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\databases\Databases.db 2017-09-09 22:07 - 2017-09-09 22:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\databases\Databases.db-journal 2017-09-09 22:05 - 2017-09-12 08:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\File System 2017-09-12 08:41 - 2017-09-12 08:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\File System\008 2017-09-12 08:41 - 2017-09-12 08:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\File System\008\t 2017-09-12 08:40 - 2017-09-12 08:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\File System\009 2017-09-12 08:40 - 2017-09-12 08:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\File System\009\t 2017-09-09 22:05 - 2017-09-12 08:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\File System\Origins 2017-09-09 22:05 - 2017-09-12 08:40 - 000000762 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\File System\Origins\000003.log 2017-09-09 22:05 - 2017-09-09 22:05 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\File System\Origins\CURRENT 2017-09-09 22:05 - 2017-09-09 22:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\File System\Origins\LOCK 2017-09-09 22:05 - 2017-09-12 08:41 - 000000393 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\File System\Origins\LOG 2017-09-09 22:05 - 2017-09-12 08:40 - 000000744 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\File System\Origins\LOG.old 2017-09-09 22:05 - 2017-09-09 22:05 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\File System\Origins\MANIFEST-000001 2017-09-09 22:06 - 2017-09-09 22:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\File System\Origins\lost 2017-09-09 22:07 - 2017-09-12 08:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB 2017-09-12 08:40 - 2017-09-12 08:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\http_blogs.nfl.com_0.indexeddb.leveldb 2017-09-12 08:40 - 2017-09-12 08:40 - 000000176 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\http_blogs.nfl.com_0.indexeddb.leveldb\000003.log 2017-09-12 08:40 - 2017-09-12 08:40 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\http_blogs.nfl.com_0.indexeddb.leveldb\CURRENT 2017-09-12 08:40 - 2017-09-12 08:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\http_blogs.nfl.com_0.indexeddb.leveldb\LOCK 2017-09-12 08:40 - 2017-09-12 08:40 - 000000156 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\http_blogs.nfl.com_0.indexeddb.leveldb\LOG 2017-09-12 08:40 - 2017-09-12 08:40 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\http_blogs.nfl.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 01:52 - 2017-09-10 01:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\http_nflfilms.nfl.com_0.indexeddb.leveldb 2017-09-10 01:52 - 2017-09-10 01:52 - 000000182 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\http_nflfilms.nfl.com_0.indexeddb.leveldb\000003.log 2017-09-10 01:52 - 2017-09-10 01:52 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\http_nflfilms.nfl.com_0.indexeddb.leveldb\CURRENT 2017-09-10 01:52 - 2017-09-10 01:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\http_nflfilms.nfl.com_0.indexeddb.leveldb\LOCK 2017-09-10 01:52 - 2017-09-10 01:52 - 000000160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\http_nflfilms.nfl.com_0.indexeddb.leveldb\LOG 2017-09-10 01:52 - 2017-09-10 01:52 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\http_nflfilms.nfl.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-09 22:07 - 2017-09-12 08:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb 2017-09-09 22:07 - 2017-09-09 22:07 - 000000172 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\000003.log 2017-09-09 22:07 - 2017-09-09 22:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\CURRENT 2017-09-09 22:07 - 2017-09-09 22:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOCK 2017-09-09 22:07 - 2017-09-12 08:37 - 000000350 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOG 2017-09-09 22:07 - 2017-09-09 22:07 - 000000155 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOG.old 2017-09-09 22:07 - 2017-09-09 22:07 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 08:34 - 2017-09-12 08:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\https_89942226.lo.cobrowse.liveperson.net_0.indexeddb.leveldb 2017-09-12 08:34 - 2017-09-12 08:34 - 000000587 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\https_89942226.lo.cobrowse.liveperson.net_0.indexeddb.leveldb\000003.log 2017-09-12 08:34 - 2017-09-12 08:34 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\https_89942226.lo.cobrowse.liveperson.net_0.indexeddb.leveldb\CURRENT 2017-09-12 08:34 - 2017-09-12 08:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\https_89942226.lo.cobrowse.liveperson.net_0.indexeddb.leveldb\LOCK 2017-09-12 08:34 - 2017-09-12 08:34 - 000000179 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\https_89942226.lo.cobrowse.liveperson.net_0.indexeddb.leveldb\LOG 2017-09-12 08:34 - 2017-09-12 08:34 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\https_89942226.lo.cobrowse.liveperson.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 08:34 - 2017-09-12 08:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb 2017-09-12 08:34 - 2017-09-12 08:34 - 000001338 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\000003.log 2017-09-12 08:34 - 2017-09-12 08:34 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\CURRENT 2017-09-12 08:34 - 2017-09-12 08:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOCK 2017-09-12 08:34 - 2017-09-12 08:34 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOG 2017-09-12 08:34 - 2017-09-12 08:34 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-09 22:05 - 2017-09-12 08:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage 2017-09-10 01:48 - 2017-09-10 01:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 01:48 - 2017-09-10 01:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-09 22:09 - 2017-09-09 22:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_connexity.net_0.localstorage 2017-09-09 22:09 - 2017-09-09 22:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-09 22:11 - 2017-09-09 22:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_mashable.com_0.localstorage 2017-09-09 22:11 - 2017-09-09 22:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_mashable.com_0.localstorage-journal 2017-09-12 06:28 - 2017-09-12 06:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_mx.reuters.com_0.localstorage 2017-09-12 06:28 - 2017-09-12 06:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_mx.reuters.com_0.localstorage-journal 2017-09-10 01:52 - 2017-09-10 01:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_nflfilms.nfl.com_0.localstorage 2017-09-10 01:52 - 2017-09-10 01:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_nflfilms.nfl.com_0.localstorage-journal 2017-09-10 01:46 - 2017-09-12 08:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_pokemonshowdown.com_0.localstorage 2017-09-10 01:46 - 2017-09-12 08:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_pokemonshowdown.com_0.localstorage-journal 2017-09-11 17:25 - 2017-09-11 17:26 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 17:25 - 2017-09-11 17:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-12 06:27 - 2017-09-12 06:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-12 06:27 - 2017-09-12 06:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-10 01:50 - 2017-09-12 08:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-10 01:50 - 2017-09-12 08:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-09 22:05 - 2017-09-09 22:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.brides.com_0.localstorage 2017-09-09 22:05 - 2017-09-09 22:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.brides.com_0.localstorage-journal 2017-09-10 01:48 - 2017-09-10 01:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.businessinsider.com_0.localstorage 2017-09-10 01:48 - 2017-09-10 01:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.businessinsider.com_0.localstorage-journal 2017-09-09 22:07 - 2017-09-12 08:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-09 22:07 - 2017-09-12 08:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-09 22:09 - 2017-09-09 22:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.complex.com_0.localstorage 2017-09-09 22:09 - 2017-09-09 22:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-09 22:08 - 2017-09-12 06:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.crash.net_0.localstorage 2017-09-09 22:08 - 2017-09-12 06:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-10 01:49 - 2017-09-10 01:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-10 01:49 - 2017-09-10 01:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-12 06:28 - 2017-09-12 06:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.dictionary.com_0.localstorage 2017-09-12 06:28 - 2017-09-12 06:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.dictionary.com_0.localstorage-journal 2017-09-11 02:46 - 2017-09-11 02:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-11 02:46 - 2017-09-11 02:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-09 22:10 - 2017-09-09 22:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.ehow.com_0.localstorage 2017-09-09 22:10 - 2017-09-09 22:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.ehow.com_0.localstorage-journal 2017-09-11 17:31 - 2017-09-11 17:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.food.com_0.localstorage 2017-09-11 17:31 - 2017-09-11 17:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-11 02:44 - 2017-09-11 02:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-11 02:44 - 2017-09-11 02:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-10 01:51 - 2017-09-10 01:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.foxnews.com_0.localstorage 2017-09-10 01:51 - 2017-09-10 01:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.foxnews.com_0.localstorage-journal 2017-09-12 08:38 - 2017-09-12 08:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.innerself.com_0.localstorage 2017-09-12 08:38 - 2017-09-12 08:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.innerself.com_0.localstorage-journal 2017-09-09 22:08 - 2017-09-11 02:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.insideedition.com_0.localstorage 2017-09-09 22:08 - 2017-09-11 02:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.insideedition.com_0.localstorage-journal 2017-09-12 08:40 - 2017-09-12 08:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-12 08:40 - 2017-09-12 08:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-10 01:49 - 2017-09-10 01:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.insurancejournal.tv_0.localstorage 2017-09-10 01:49 - 2017-09-10 01:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.insurancejournal.tv_0.localstorage-journal 2017-09-11 02:42 - 2017-09-12 06:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 02:42 - 2017-09-12 06:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-09 22:08 - 2017-09-11 02:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.macworld.com_0.localstorage 2017-09-09 22:08 - 2017-09-11 02:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-12 06:25 - 2017-09-12 06:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.mylifetime.com_0.localstorage 2017-09-12 06:25 - 2017-09-12 06:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.mylifetime.com_0.localstorage-journal 2017-09-12 08:37 - 2017-09-12 08:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-12 08:37 - 2017-09-12 08:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-09 22:07 - 2017-09-09 22:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.nfl.com_0.localstorage 2017-09-09 22:07 - 2017-09-09 22:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 01:48 - 2017-09-10 01:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.parents.com_0.localstorage 2017-09-10 01:48 - 2017-09-10 01:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-11 17:28 - 2017-09-11 17:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-11 17:28 - 2017-09-11 17:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-12 08:39 - 2017-09-12 08:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.torontosun.com_0.localstorage 2017-09-12 08:39 - 2017-09-12 08:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.torontosun.com_0.localstorage-journal 2017-09-12 08:34 - 2017-09-12 08:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.wiggle.co.uk_0.localstorage 2017-09-12 08:34 - 2017-09-12 08:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.wiggle.co.uk_0.localstorage-journal 2017-09-12 06:22 - 2017-09-12 06:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.wordgames.com_0.localstorage 2017-09-12 06:22 - 2017-09-12 06:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.wordgames.com_0.localstorage-journal 2017-09-11 17:25 - 2017-09-11 17:26 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.wowhead.com_0.localstorage 2017-09-11 17:25 - 2017-09-11 17:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\http_www.wowhead.com_0.localstorage-journal 2017-09-10 01:49 - 2017-09-10 01:49 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 01:49 - 2017-09-10 01:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-09 22:09 - 2017-09-09 22:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\https_connexity.net_0.localstorage 2017-09-09 22:09 - 2017-09-09 22:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 17:25 - 2017-09-11 17:25 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 17:25 - 2017-09-11 17:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-09 22:09 - 2017-09-09 22:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-09 22:09 - 2017-09-09 22:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-11 17:25 - 2017-09-11 17:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\https_merchandise.ford.com_0.localstorage 2017-09-11 17:25 - 2017-09-11 17:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\https_merchandise.ford.com_0.localstorage-journal 2017-09-11 17:25 - 2017-09-11 17:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 17:25 - 2017-09-11 17:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 17:25 - 2017-09-11 17:26 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 17:25 - 2017-09-11 17:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 17:25 - 2017-09-11 17:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\https_universal.iperceptions.com_0.localstorage 2017-09-11 17:25 - 2017-09-11 17:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\https_universal.iperceptions.com_0.localstorage-journal 2017-09-12 06:22 - 2017-09-12 06:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\https_www.youtube.com_0.localstorage 2017-09-12 06:22 - 2017-09-12 06:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-09 22:05 - 2017-09-09 22:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data 2017-09-09 22:05 - 2017-09-12 08:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash 2017-09-09 22:05 - 2017-09-09 22:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-09 22:05 - 2017-09-09 22:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-09 22:05 - 2017-09-09 22:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\S9SFTA2G 2017-09-09 22:05 - 2017-09-09 22:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot 2017-09-09 22:05 - 2017-09-09 22:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-09 22:05 - 2017-09-11 02:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8 2017-09-09 22:05 - 2017-09-12 08:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\cdn.stickyadstv.com 2017-09-11 02:42 - 2017-09-11 02:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\cdncache-a.akamaihd.net 2017-09-11 02:42 - 2017-09-11 02:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\cdncache-a.akamaihd.net\items 2017-09-11 02:42 - 2017-09-11 02:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 02:42 - 2017-09-11 17:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 02:42 - 2017-09-11 17:28 - 000000489 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-09 22:05 - 2017-09-12 08:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\eereader.com 2017-09-09 22:06 - 2017-09-11 02:45 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\eereader.com\analytics.sol 2017-09-09 22:06 - 2017-09-12 08:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\efreader.com 2017-09-09 22:12 - 2017-09-12 08:43 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\efreader.com\analytics.sol 2017-09-09 22:05 - 2017-09-12 08:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\egreader.com 2017-09-09 22:06 - 2017-09-10 01:47 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\egreader.com\analytics.sol 2017-09-09 22:05 - 2017-09-09 22:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\macromedia.com 2017-09-09 22:05 - 2017-09-09 22:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\macromedia.com\support 2017-09-09 22:05 - 2017-09-09 22:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\macromedia.com\support\flashplayer 2017-09-09 22:05 - 2017-09-11 02:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\macromedia.com\support\flashplayer\sys 2017-09-09 22:05 - 2017-09-11 02:42 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-09 22:05 - 2017-09-09 22:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-09 22:05 - 2017-09-09 22:05 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 02:42 - 2017-09-11 02:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 02:42 - 2017-09-11 02:42 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-09 22:05 - 2017-09-09 22:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-09 22:05 - 2017-09-09 22:05 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-09 22:06 - 2017-09-09 22:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-09 22:06 - 2017-09-09 22:06 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-09 22:05 - 2017-09-09 22:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-09 22:05 - 2017-09-09 22:05 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data656\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SSUTRGR8\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 23:13 - 2017-09-11 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657 2017-09-10 23:13 - 2017-09-11 14:29 - 000323584 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Cookies 2017-09-10 23:13 - 2017-09-11 14:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Cookies-journal 2017-09-11 00:17 - 2017-09-11 00:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\databases 2017-09-11 00:17 - 2017-09-11 00:17 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\databases\Databases.db 2017-09-11 00:17 - 2017-09-11 00:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\databases\Databases.db-journal 2017-09-10 23:18 - 2017-09-11 13:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System 2017-09-10 23:18 - 2017-09-10 23:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\000 2017-09-10 23:18 - 2017-09-11 00:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\000\t 2017-09-11 00:17 - 2017-09-11 00:17 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\000\t\.usage 2017-09-11 00:17 - 2017-09-11 00:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\000\t\Paths 2017-09-11 00:17 - 2017-09-11 00:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\000\t\Paths\000003.log 2017-09-11 00:17 - 2017-09-11 00:17 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\000\t\Paths\CURRENT 2017-09-11 00:17 - 2017-09-11 00:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\000\t\Paths\LOCK 2017-09-11 00:17 - 2017-09-11 00:17 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\000\t\Paths\LOG 2017-09-11 00:17 - 2017-09-11 00:17 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\000\t\Paths\MANIFEST-000001 2017-09-11 00:15 - 2017-09-11 00:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\001 2017-09-11 00:15 - 2017-09-11 00:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\001\t 2017-09-11 00:17 - 2017-09-11 00:17 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\001\t\.usage 2017-09-11 00:17 - 2017-09-11 00:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\001\t\Paths 2017-09-11 00:17 - 2017-09-11 00:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\001\t\Paths\000003.log 2017-09-11 00:17 - 2017-09-11 00:17 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\001\t\Paths\CURRENT 2017-09-11 00:17 - 2017-09-11 00:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\001\t\Paths\LOCK 2017-09-11 00:17 - 2017-09-11 00:17 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\001\t\Paths\LOG 2017-09-11 00:17 - 2017-09-11 00:17 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\001\t\Paths\MANIFEST-000001 2017-09-11 13:43 - 2017-09-11 13:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\002 2017-09-11 13:43 - 2017-09-11 13:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\002\t 2017-09-10 23:18 - 2017-09-11 13:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\Origins 2017-09-10 23:18 - 2017-09-11 13:45 - 000000234 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\Origins\000003.log 2017-09-10 23:18 - 2017-09-10 23:18 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\Origins\CURRENT 2017-09-10 23:18 - 2017-09-10 23:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\Origins\LOCK 2017-09-10 23:18 - 2017-09-11 13:45 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\Origins\LOG 2017-09-10 23:18 - 2017-09-11 13:43 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\Origins\LOG.old 2017-09-10 23:18 - 2017-09-10 23:18 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\File System\Origins\MANIFEST-000001 2017-09-11 00:17 - 2017-09-11 00:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\IndexedDB 2017-09-11 00:17 - 2017-09-11 00:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\IndexedDB\http_www.lfpress.com_0.indexeddb.leveldb 2017-09-11 00:17 - 2017-09-11 00:17 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\IndexedDB\http_www.lfpress.com_0.indexeddb.leveldb\000003.log 2017-09-11 00:17 - 2017-09-11 00:17 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\IndexedDB\http_www.lfpress.com_0.indexeddb.leveldb\CURRENT 2017-09-11 00:17 - 2017-09-11 00:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\IndexedDB\http_www.lfpress.com_0.indexeddb.leveldb\LOCK 2017-09-11 00:17 - 2017-09-11 00:17 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\IndexedDB\http_www.lfpress.com_0.indexeddb.leveldb\LOG 2017-09-11 00:17 - 2017-09-11 00:17 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\IndexedDB\http_www.lfpress.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 23:13 - 2017-09-11 14:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage 2017-09-11 13:44 - 2017-09-11 13:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_ad.doubleclick.net_0.localstorage 2017-09-11 13:44 - 2017-09-11 13:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_ad.doubleclick.net_0.localstorage-journal 2017-09-11 13:45 - 2017-09-11 13:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_allrecipes.com_0.localstorage 2017-09-11 13:45 - 2017-09-11 13:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-11 14:26 - 2017-09-11 14:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-11 14:26 - 2017-09-11 14:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-11 00:15 - 2017-09-11 00:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 00:15 - 2017-09-11 00:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 13:42 - 2017-09-11 13:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_connexity.net_0.localstorage 2017-09-11 13:42 - 2017-09-11 13:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 23:19 - 2017-09-10 23:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_fr.reuters.com_0.localstorage 2017-09-10 23:19 - 2017-09-10 23:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_fr.reuters.com_0.localstorage-journal 2017-09-11 14:21 - 2017-09-11 14:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_ib.adnxs.com_0.localstorage 2017-09-11 14:21 - 2017-09-11 14:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_ib.adnxs.com_0.localstorage-journal 2017-09-11 13:40 - 2017-09-11 13:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_mhmileeo.lpgreenworld.com_0.localstorage 2017-09-11 13:40 - 2017-09-11 13:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_mhmileeo.lpgreenworld.com_0.localstorage-journal 2017-09-10 23:13 - 2017-09-11 13:40 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 23:13 - 2017-09-11 13:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 14:21 - 2017-09-11 14:22 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_video.losangelespost.com_0.localstorage 2017-09-11 14:21 - 2017-09-11 14:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_video.losangelespost.com_0.localstorage-journal 2017-09-11 13:45 - 2017-09-11 13:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.6play.fr_0.localstorage 2017-09-11 13:45 - 2017-09-11 13:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.6play.fr_0.localstorage-journal 2017-09-10 23:17 - 2017-09-10 23:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.belloflostsouls.net_0.localstorage 2017-09-10 23:17 - 2017-09-10 23:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.belloflostsouls.net_0.localstorage-journal 2017-09-10 23:18 - 2017-09-10 23:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.bendbulletin.com_0.localstorage 2017-09-10 23:18 - 2017-09-10 23:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.bendbulletin.com_0.localstorage-journal 2017-09-11 13:44 - 2017-09-11 13:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.blabbermouth.net_0.localstorage 2017-09-11 13:44 - 2017-09-11 13:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.blabbermouth.net_0.localstorage-journal 2017-09-10 23:15 - 2017-09-10 23:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 23:15 - 2017-09-10 23:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 00:18 - 2017-09-11 00:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.concordmonitor.com_0.localstorage 2017-09-11 00:18 - 2017-09-11 00:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.concordmonitor.com_0.localstorage-journal 2017-09-11 14:20 - 2017-09-11 14:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.countryliving.com_0.localstorage 2017-09-11 14:20 - 2017-09-11 14:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.countryliving.com_0.localstorage-journal 2017-09-11 00:17 - 2017-09-11 00:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.courant.com_0.localstorage 2017-09-11 00:17 - 2017-09-11 00:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-11 13:44 - 2017-09-11 13:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.crash.net_0.localstorage 2017-09-11 13:44 - 2017-09-11 13:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-11 00:18 - 2017-09-11 00:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.ehow.com_0.localstorage 2017-09-11 00:18 - 2017-09-11 00:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.ehow.com_0.localstorage-journal 2017-09-10 23:16 - 2017-09-11 14:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-10 23:16 - 2017-09-11 14:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-11 00:14 - 2017-09-11 00:15 - 000167936 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.goodhousekeeping.com_0.localstorage 2017-09-11 00:14 - 2017-09-11 00:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.goodhousekeeping.com_0.localstorage-journal 2017-09-10 23:16 - 2017-09-10 23:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.insideedition.com_0.localstorage 2017-09-10 23:16 - 2017-09-10 23:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.insideedition.com_0.localstorage-journal 2017-09-10 23:15 - 2017-09-10 23:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 23:15 - 2017-09-10 23:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 00:17 - 2017-09-11 00:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-11 00:17 - 2017-09-11 00:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-11 14:24 - 2017-09-11 14:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 14:24 - 2017-09-11 14:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-10 23:15 - 2017-09-11 13:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-10 23:15 - 2017-09-11 13:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-11 14:22 - 2017-09-11 14:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.nbc.com_0.localstorage 2017-09-11 14:22 - 2017-09-11 14:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.nbc.com_0.localstorage-journal 2017-09-10 23:15 - 2017-09-10 23:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 23:15 - 2017-09-10 23:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 13:43 - 2017-09-11 13:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.parents.com_0.localstorage 2017-09-11 13:43 - 2017-09-11 13:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-11 13:40 - 2017-09-11 13:41 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.radley.co.uk_0.localstorage 2017-09-11 13:40 - 2017-09-11 13:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.radley.co.uk_0.localstorage-journal 2017-09-10 23:13 - 2017-09-10 23:14 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.torrid.com_0.localstorage 2017-09-10 23:13 - 2017-09-10 23:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\http_www.torrid.com_0.localstorage-journal 2017-09-10 23:13 - 2017-09-10 23:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_a.zdbb.net_0.localstorage 2017-09-10 23:13 - 2017-09-10 23:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_a.zdbb.net_0.localstorage-journal 2017-09-11 00:14 - 2017-09-11 00:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_assets.alicdn.com_0.localstorage 2017-09-11 00:14 - 2017-09-11 00:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_assets.alicdn.com_0.localstorage-journal 2017-09-10 23:20 - 2017-09-10 23:20 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 23:20 - 2017-09-10 23:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 13:40 - 2017-09-11 13:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_config1.veinteractive.com_0.localstorage 2017-09-11 13:40 - 2017-09-11 13:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_config1.veinteractive.com_0.localstorage-journal 2017-09-11 13:42 - 2017-09-11 13:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_connexity.net_0.localstorage 2017-09-11 13:42 - 2017-09-11 13:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 13:40 - 2017-09-11 14:21 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 13:40 - 2017-09-11 14:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 00:14 - 2017-09-11 00:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_g.alicdn.com_0.localstorage 2017-09-11 00:14 - 2017-09-11 00:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_g.alicdn.com_0.localstorage-journal 2017-09-10 23:13 - 2017-09-10 23:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_gateway.foresee.com_0.localstorage 2017-09-10 23:13 - 2017-09-10 23:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_gateway.foresee.com_0.localstorage-journal 2017-09-11 00:14 - 2017-09-11 00:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 00:14 - 2017-09-11 00:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 23:13 - 2017-09-11 14:21 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 23:13 - 2017-09-11 14:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 00:14 - 2017-09-11 00:15 - 000204800 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_www.aliexpress.com_0.localstorage 2017-09-11 00:14 - 2017-09-11 00:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_www.aliexpress.com_0.localstorage-journal 2017-09-11 14:21 - 2017-09-11 14:21 - 000009216 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_www.richrelevance.com_0.localstorage 2017-09-11 14:21 - 2017-09-11 14:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_www.richrelevance.com_0.localstorage-journal 2017-09-10 23:13 - 2017-09-10 23:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_www.whattoexpect.com_0.localstorage 2017-09-10 23:13 - 2017-09-10 23:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_www.whattoexpect.com_0.localstorage-journal 2017-09-10 23:13 - 2017-09-10 23:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_www.youtube.com_0.localstorage 2017-09-10 23:13 - 2017-09-10 23:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-10 23:13 - 2017-09-10 23:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data 2017-09-10 23:13 - 2017-09-11 14:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash 2017-09-10 23:13 - 2017-09-10 23:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 23:13 - 2017-09-10 23:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 23:13 - 2017-09-10 23:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\RP8SW6L4 2017-09-10 23:13 - 2017-09-10 23:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 23:13 - 2017-09-10 23:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 23:13 - 2017-09-11 13:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL 2017-09-11 00:14 - 2017-09-11 00:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\assets.alicdn.com 2017-09-11 00:14 - 2017-09-11 00:14 - 000000172 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\assets.alicdn.com\alipay.com.sol 2017-09-10 23:13 - 2017-09-11 14:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\cdn.stickyadstv.com 2017-09-10 23:13 - 2017-09-10 23:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\cdncache-a.akamaihd.net 2017-09-10 23:13 - 2017-09-10 23:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\cdncache-a.akamaihd.net\items 2017-09-10 23:13 - 2017-09-10 23:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 23:13 - 2017-09-11 14:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 23:13 - 2017-09-11 14:26 - 000000475 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 23:13 - 2017-09-11 14:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\eereader.com 2017-09-10 23:18 - 2017-09-11 14:26 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\eereader.com\analytics.sol 2017-09-10 23:14 - 2017-09-11 14:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\efreader.com 2017-09-10 23:20 - 2017-09-11 14:26 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\efreader.com\analytics.sol 2017-09-10 23:13 - 2017-09-11 14:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\egreader.com 2017-09-11 00:14 - 2017-09-11 00:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\g.alicdn.com 2017-09-11 00:14 - 2017-09-11 00:14 - 000000087 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\g.alicdn.com\ali.flashcookie.sol 2017-09-11 13:41 - 2017-09-11 13:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\inread.anyclip.com 2017-09-11 13:41 - 2017-09-11 13:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\inread.anyclip.com\ac# 2017-09-11 13:41 - 2017-09-11 13:41 - 000000443 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-10 23:13 - 2017-09-10 23:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com 2017-09-10 23:13 - 2017-09-10 23:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support 2017-09-10 23:13 - 2017-09-10 23:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer 2017-09-10 23:13 - 2017-09-11 13:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer\sys 2017-09-10 23:13 - 2017-09-11 13:41 - 000000556 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 00:14 - 2017-09-11 00:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer\sys\#assets.alicdn.com 2017-09-11 00:14 - 2017-09-11 00:14 - 000000087 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer\sys\#assets.alicdn.com\settings.sol 2017-09-10 23:13 - 2017-09-10 23:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 23:13 - 2017-09-10 23:13 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 23:13 - 2017-09-10 23:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 23:13 - 2017-09-10 23:13 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 23:13 - 2017-09-10 23:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 23:13 - 2017-09-10 23:13 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 23:14 - 2017-09-10 23:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 23:14 - 2017-09-10 23:14 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 23:13 - 2017-09-10 23:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 23:13 - 2017-09-10 23:13 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 00:14 - 2017-09-11 00:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer\sys\#g.alicdn.com 2017-09-11 00:14 - 2017-09-11 00:14 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer\sys\#g.alicdn.com\settings.sol 2017-09-11 13:41 - 2017-09-11 13:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 13:41 - 2017-09-11 13:41 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-11 00:15 - 2017-09-11 00:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com 2017-09-11 00:15 - 2017-09-11 00:15 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com\settings.sol 2017-09-11 00:15 - 2017-09-11 00:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\objects.tremormedia.com 2017-09-11 00:15 - 2017-09-11 00:15 - 000000072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data657\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\G9XSULVL\objects.tremormedia.com\com.quantserve.sol 2017-09-11 11:33 - 2017-09-11 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658 2017-09-11 11:33 - 2017-09-11 13:27 - 000281600 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Cookies 2017-09-11 11:33 - 2017-09-11 13:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Cookies-journal 2017-09-11 11:35 - 2017-09-11 11:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\databases 2017-09-11 11:35 - 2017-09-11 11:35 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\databases\Databases.db 2017-09-11 11:35 - 2017-09-11 11:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\databases\Databases.db-journal 2017-09-11 11:34 - 2017-09-11 13:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\File System 2017-09-11 11:38 - 2017-09-11 11:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\File System\001 2017-09-11 11:38 - 2017-09-11 11:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\File System\001\t 2017-09-11 11:41 - 2017-09-11 11:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\File System\002 2017-09-11 11:41 - 2017-09-11 11:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\File System\002\t 2017-09-11 13:19 - 2017-09-11 13:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\File System\003 2017-09-11 13:19 - 2017-09-11 13:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\File System\003\t 2017-09-11 13:21 - 2017-09-11 13:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\File System\004 2017-09-11 13:21 - 2017-09-11 13:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\File System\004\t 2017-09-11 13:27 - 2017-09-11 13:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\File System\005 2017-09-11 13:27 - 2017-09-11 13:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\File System\005\t 2017-09-11 11:34 - 2017-09-11 13:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\File System\Origins 2017-09-11 11:34 - 2017-09-11 13:28 - 000000449 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\File System\Origins\000003.log 2017-09-11 11:34 - 2017-09-11 11:34 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\File System\Origins\CURRENT 2017-09-11 11:34 - 2017-09-11 11:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\File System\Origins\LOCK 2017-09-11 11:34 - 2017-09-11 13:27 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\File System\Origins\LOG 2017-09-11 11:34 - 2017-09-11 13:21 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\File System\Origins\LOG.old 2017-09-11 11:34 - 2017-09-11 11:34 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\File System\Origins\MANIFEST-000001 2017-09-11 11:36 - 2017-09-11 11:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\File System\Origins\lost 2017-09-11 11:35 - 2017-09-11 11:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\IndexedDB 2017-09-11 11:36 - 2017-09-11 11:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb 2017-09-11 11:36 - 2017-09-11 11:36 - 000000190 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb\000003.log 2017-09-11 11:36 - 2017-09-11 11:36 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb\CURRENT 2017-09-11 11:36 - 2017-09-11 11:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb\LOCK 2017-09-11 11:36 - 2017-09-11 11:36 - 000000164 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb\LOG 2017-09-11 11:36 - 2017-09-11 11:36 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 11:36 - 2017-09-11 11:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\IndexedDB\http_www.myrecipes.com_0.indexeddb.leveldb 2017-09-11 11:36 - 2017-09-11 11:36 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\IndexedDB\http_www.myrecipes.com_0.indexeddb.leveldb\000003.log 2017-09-11 11:36 - 2017-09-11 11:36 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\IndexedDB\http_www.myrecipes.com_0.indexeddb.leveldb\CURRENT 2017-09-11 11:36 - 2017-09-11 11:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\IndexedDB\http_www.myrecipes.com_0.indexeddb.leveldb\LOCK 2017-09-11 11:36 - 2017-09-11 11:36 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\IndexedDB\http_www.myrecipes.com_0.indexeddb.leveldb\LOG 2017-09-11 11:36 - 2017-09-11 11:36 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\IndexedDB\http_www.myrecipes.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 11:35 - 2017-09-11 11:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb 2017-09-11 11:35 - 2017-09-11 11:35 - 000000172 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\000003.log 2017-09-11 11:35 - 2017-09-11 11:35 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\CURRENT 2017-09-11 11:35 - 2017-09-11 11:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOCK 2017-09-11 11:35 - 2017-09-11 11:35 - 000000155 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOG 2017-09-11 11:35 - 2017-09-11 11:35 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 11:33 - 2017-09-11 13:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage 2017-09-11 11:35 - 2017-09-11 11:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 11:35 - 2017-09-11 11:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 11:33 - 2017-09-11 11:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_cdn.districtm.ca_0.localstorage 2017-09-11 11:33 - 2017-09-11 11:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_cdn.districtm.ca_0.localstorage-journal 2017-09-11 11:36 - 2017-09-11 11:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_connexity.net_0.localstorage 2017-09-11 11:36 - 2017-09-11 11:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 13:21 - 2017-09-11 13:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_davedameshek.nfl.com_0.localstorage 2017-09-11 13:21 - 2017-09-11 13:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_davedameshek.nfl.com_0.localstorage-journal 2017-09-11 11:39 - 2017-09-11 11:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_mashable.com_0.localstorage 2017-09-11 11:39 - 2017-09-11 11:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_mashable.com_0.localstorage-journal 2017-09-11 11:33 - 2017-09-11 13:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 11:33 - 2017-09-11 13:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 11:37 - 2017-09-11 11:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-11 11:37 - 2017-09-11 11:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-11 13:24 - 2017-09-11 13:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.bendbulletin.com_0.localstorage 2017-09-11 13:24 - 2017-09-11 13:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.bendbulletin.com_0.localstorage-journal 2017-09-11 11:35 - 2017-09-11 13:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 11:35 - 2017-09-11 13:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 11:36 - 2017-09-11 11:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.courant.com_0.localstorage 2017-09-11 11:36 - 2017-09-11 11:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-11 13:23 - 2017-09-11 13:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-11 13:23 - 2017-09-11 13:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-11 11:33 - 2017-09-11 11:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.havahart.com_0.localstorage 2017-09-11 11:33 - 2017-09-11 11:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.havahart.com_0.localstorage-journal 2017-09-11 13:23 - 2017-09-11 13:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.latimes.com_0.localstorage 2017-09-11 13:23 - 2017-09-11 13:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-11 13:25 - 2017-09-11 13:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.lifeandstylemag.com_0.localstorage 2017-09-11 13:25 - 2017-09-11 13:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.lifeandstylemag.com_0.localstorage-journal 2017-09-11 11:33 - 2017-09-11 11:34 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.mom365.com_0.localstorage 2017-09-11 11:33 - 2017-09-11 11:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.mom365.com_0.localstorage-journal 2017-09-11 11:36 - 2017-09-11 13:21 - 000009216 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-11 11:36 - 2017-09-11 13:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-11 11:35 - 2017-09-11 13:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 11:35 - 2017-09-11 13:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 13:22 - 2017-09-11 13:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-11 13:22 - 2017-09-11 13:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-11 11:36 - 2017-09-11 11:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\https_connexity.net_0.localstorage 2017-09-11 11:36 - 2017-09-11 11:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 11:33 - 2017-09-11 13:19 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 11:33 - 2017-09-11 13:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 13:19 - 2017-09-11 13:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 13:19 - 2017-09-11 13:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 11:33 - 2017-09-11 13:19 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 11:33 - 2017-09-11 13:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 13:19 - 2017-09-11 13:21 - 000008192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\https_www.overstock.com_0.localstorage 2017-09-11 13:19 - 2017-09-11 13:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Local Storage\https_www.overstock.com_0.localstorage-journal 2017-09-11 11:33 - 2017-09-11 11:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data 2017-09-11 11:33 - 2017-09-11 13:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash 2017-09-11 11:33 - 2017-09-11 11:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 11:33 - 2017-09-11 11:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 11:33 - 2017-09-11 11:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\X4VHLHPA 2017-09-11 11:33 - 2017-09-11 11:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 11:33 - 2017-09-11 11:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 11:33 - 2017-09-11 13:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A 2017-09-11 13:22 - 2017-09-11 13:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\aka.spotxcdn.com 2017-09-11 11:33 - 2017-09-11 13:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\cdn.stickyadstv.com 2017-09-11 11:33 - 2017-09-11 11:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\cdncache-a.akamaihd.net 2017-09-11 11:33 - 2017-09-11 11:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\cdncache-a.akamaihd.net\items 2017-09-11 11:33 - 2017-09-11 11:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 11:33 - 2017-09-11 13:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 11:33 - 2017-09-11 13:22 - 000000476 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 11:33 - 2017-09-11 13:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\eereader.com 2017-09-11 11:38 - 2017-09-11 11:38 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\eereader.com\analytics.sol 2017-09-11 11:34 - 2017-09-11 13:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\efreader.com 2017-09-11 11:40 - 2017-09-11 13:28 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\efreader.com\analytics.sol 2017-09-11 11:33 - 2017-09-11 13:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\egreader.com 2017-09-11 11:34 - 2017-09-11 11:40 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\egreader.com\analytics.sol 2017-09-11 13:25 - 2017-09-11 13:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\inread.anyclip.com 2017-09-11 13:25 - 2017-09-11 13:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\inread.anyclip.com\ac# 2017-09-11 13:25 - 2017-09-11 13:25 - 000000459 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-11 11:33 - 2017-09-11 11:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\macromedia.com 2017-09-11 11:33 - 2017-09-11 11:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\macromedia.com\support 2017-09-11 11:33 - 2017-09-11 11:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\macromedia.com\support\flashplayer 2017-09-11 11:33 - 2017-09-11 13:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\macromedia.com\support\flashplayer\sys 2017-09-11 11:33 - 2017-09-11 13:25 - 000000533 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 13:22 - 2017-09-11 13:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\macromedia.com\support\flashplayer\sys\#aka.spotxcdn.com 2017-09-11 13:22 - 2017-09-11 13:22 - 000000086 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\macromedia.com\support\flashplayer\sys\#aka.spotxcdn.com\settings.sol 2017-09-11 11:33 - 2017-09-11 11:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 11:33 - 2017-09-11 11:33 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 11:33 - 2017-09-11 11:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 11:33 - 2017-09-11 11:33 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 11:33 - 2017-09-11 11:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 11:33 - 2017-09-11 11:33 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 11:34 - 2017-09-11 11:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 11:34 - 2017-09-11 11:34 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 11:33 - 2017-09-11 11:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 11:33 - 2017-09-11 11:33 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 13:25 - 2017-09-11 13:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 13:25 - 2017-09-11 13:25 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data658\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9LS7WK3A\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-11 19:16 - 2017-09-12 09:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659 2017-09-11 19:16 - 2017-09-12 08:52 - 000325632 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Cookies 2017-09-11 19:16 - 2017-09-12 08:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Cookies-journal 2017-09-12 01:03 - 2017-09-12 01:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\databases 2017-09-12 01:03 - 2017-09-12 01:03 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\databases\Databases.db 2017-09-12 01:03 - 2017-09-12 01:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\databases\Databases.db-journal 2017-09-11 19:23 - 2017-09-12 01:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\File System 2017-09-11 19:23 - 2017-09-12 08:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\File System\Origins 2017-09-11 19:23 - 2017-09-12 01:04 - 000000306 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\File System\Origins\000003.log 2017-09-11 19:23 - 2017-09-11 19:23 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\File System\Origins\CURRENT 2017-09-11 19:23 - 2017-09-11 19:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\File System\Origins\LOCK 2017-09-11 19:23 - 2017-09-12 08:51 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\File System\Origins\LOG 2017-09-11 19:23 - 2017-09-12 07:06 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\File System\Origins\LOG.old 2017-09-11 19:23 - 2017-09-11 19:23 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\File System\Origins\MANIFEST-000001 2017-09-12 01:03 - 2017-09-12 01:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\File System\Origins\lost 2017-09-12 01:03 - 2017-09-12 08:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB 2017-09-12 07:06 - 2017-09-12 07:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\http_www.marthastewart.com_0.indexeddb.leveldb 2017-09-12 07:06 - 2017-09-12 07:06 - 000000192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\http_www.marthastewart.com_0.indexeddb.leveldb\000003.log 2017-09-12 07:06 - 2017-09-12 07:06 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\http_www.marthastewart.com_0.indexeddb.leveldb\CURRENT 2017-09-12 07:06 - 2017-09-12 07:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\http_www.marthastewart.com_0.indexeddb.leveldb\LOCK 2017-09-12 07:06 - 2017-09-12 07:06 - 000000164 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\http_www.marthastewart.com_0.indexeddb.leveldb\LOG 2017-09-12 07:06 - 2017-09-12 07:06 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\http_www.marthastewart.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 07:03 - 2017-09-12 07:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_79506418.va.cobrowse.liveperson.net_0.indexeddb.leveldb 2017-09-12 07:03 - 2017-09-12 07:03 - 000000587 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_79506418.va.cobrowse.liveperson.net_0.indexeddb.leveldb\000003.log 2017-09-12 07:03 - 2017-09-12 07:03 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_79506418.va.cobrowse.liveperson.net_0.indexeddb.leveldb\CURRENT 2017-09-12 07:03 - 2017-09-12 07:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_79506418.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOCK 2017-09-12 07:03 - 2017-09-12 07:03 - 000000179 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_79506418.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOG 2017-09-12 07:03 - 2017-09-12 07:03 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_79506418.va.cobrowse.liveperson.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 01:03 - 2017-09-12 01:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb 2017-09-12 01:03 - 2017-09-12 01:03 - 000000196 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\000003.log 2017-09-12 01:03 - 2017-09-12 01:03 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\CURRENT 2017-09-12 01:03 - 2017-09-12 01:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOCK 2017-09-12 01:03 - 2017-09-12 01:03 - 000000374 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOG 2017-09-12 01:03 - 2017-09-12 01:03 - 000000166 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOG.old 2017-09-12 01:03 - 2017-09-12 01:03 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 07:03 - 2017-09-12 07:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb 2017-09-12 07:03 - 2017-09-12 07:03 - 000001336 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\000003.log 2017-09-12 07:03 - 2017-09-12 07:03 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\CURRENT 2017-09-12 07:03 - 2017-09-12 07:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOCK 2017-09-12 07:03 - 2017-09-12 07:03 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOG 2017-09-12 07:03 - 2017-09-12 07:03 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 08:51 - 2017-09-12 08:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_westads.simpli.fi_0.indexeddb.leveldb 2017-09-12 08:51 - 2017-09-12 08:51 - 000000186 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_westads.simpli.fi_0.indexeddb.leveldb\000003.log 2017-09-12 08:51 - 2017-09-12 08:51 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_westads.simpli.fi_0.indexeddb.leveldb\CURRENT 2017-09-12 08:51 - 2017-09-12 08:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_westads.simpli.fi_0.indexeddb.leveldb\LOCK 2017-09-12 08:51 - 2017-09-12 08:51 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_westads.simpli.fi_0.indexeddb.leveldb\LOG 2017-09-12 08:51 - 2017-09-12 08:51 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\IndexedDB\https_westads.simpli.fi_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 19:17 - 2017-09-12 08:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage 2017-09-12 08:50 - 2017-09-12 08:52 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_allrecipes.com_0.localstorage 2017-09-12 08:50 - 2017-09-12 08:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-12 01:03 - 2017-09-12 01:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-12 01:03 - 2017-09-12 01:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-11 19:18 - 2017-09-11 19:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 19:18 - 2017-09-11 19:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-12 00:56 - 2017-09-12 00:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-12 00:56 - 2017-09-12 00:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-12 01:00 - 2017-09-12 01:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_connexity.net_0.localstorage 2017-09-12 01:00 - 2017-09-12 01:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-12 01:02 - 2017-09-12 01:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_diethood.com_0.localstorage 2017-09-12 01:02 - 2017-09-12 01:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_diethood.com_0.localstorage-journal 2017-09-12 08:49 - 2017-09-12 08:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-12 08:49 - 2017-09-12 08:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-12 01:01 - 2017-09-12 01:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.bendbulletin.com_0.localstorage 2017-09-12 01:01 - 2017-09-12 01:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.bendbulletin.com_0.localstorage-journal 2017-09-11 19:21 - 2017-09-11 19:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.blabbermouth.net_0.localstorage 2017-09-11 19:21 - 2017-09-11 19:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.blabbermouth.net_0.localstorage-journal 2017-09-11 19:19 - 2017-09-11 19:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 19:19 - 2017-09-11 19:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-12 07:07 - 2017-09-12 07:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.complex.com_0.localstorage 2017-09-12 07:07 - 2017-09-12 07:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-11 19:20 - 2017-09-12 07:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-11 19:20 - 2017-09-12 07:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-12 08:48 - 2017-09-12 08:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-12 08:48 - 2017-09-12 08:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-12 01:02 - 2017-09-12 01:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.food.com_0.localstorage 2017-09-12 01:02 - 2017-09-12 01:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-12 01:00 - 2017-09-12 01:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.foxnews.com_0.localstorage 2017-09-12 01:00 - 2017-09-12 01:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.foxnews.com_0.localstorage-journal 2017-09-12 01:00 - 2017-09-12 01:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-12 01:00 - 2017-09-12 01:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-12 07:08 - 2017-09-12 07:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.instyle.com_0.localstorage 2017-09-12 07:08 - 2017-09-12 07:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 19:18 - 2017-09-12 08:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 19:18 - 2017-09-12 08:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 19:20 - 2017-09-11 19:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-11 19:20 - 2017-09-11 19:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-11 19:17 - 2017-09-11 19:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.lang.com_0.localstorage 2017-09-11 19:17 - 2017-09-11 19:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.lang.com_0.localstorage-journal 2017-09-12 08:48 - 2017-09-12 08:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.latimes.com_0.localstorage 2017-09-12 08:48 - 2017-09-12 08:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-11 19:19 - 2017-09-12 08:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-11 19:19 - 2017-09-12 08:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-11 19:22 - 2017-09-11 19:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.macworld.com_0.localstorage 2017-09-11 19:22 - 2017-09-11 19:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-12 07:06 - 2017-09-12 07:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-12 07:06 - 2017-09-12 07:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-11 19:23 - 2017-09-12 07:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 19:23 - 2017-09-12 07:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-12 00:56 - 2017-09-12 00:58 - 000013312 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.parents.com_0.localstorage 2017-09-12 00:56 - 2017-09-12 00:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-12 00:57 - 2017-09-12 00:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.royaldoulton.com_0.localstorage 2017-09-12 00:57 - 2017-09-12 00:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.royaldoulton.com_0.localstorage-journal 2017-09-12 08:44 - 2017-09-12 08:46 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.techtimes.com_0.localstorage 2017-09-12 08:44 - 2017-09-12 08:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.techtimes.com_0.localstorage-journal 2017-09-11 19:22 - 2017-09-11 19:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.vogue.com_0.localstorage 2017-09-11 19:22 - 2017-09-11 19:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\http_www.vogue.com_0.localstorage-journal 2017-09-12 07:03 - 2017-09-12 07:03 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\https_c.betrad.com_0.localstorage 2017-09-12 07:03 - 2017-09-12 07:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-12 01:00 - 2017-09-12 01:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\https_connexity.net_0.localstorage 2017-09-12 01:00 - 2017-09-12 01:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-12 00:56 - 2017-09-12 00:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\https_gateway.foresee.com_0.localstorage 2017-09-12 00:56 - 2017-09-12 00:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\https_gateway.foresee.com_0.localstorage-journal 2017-09-11 19:17 - 2017-09-11 19:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 19:17 - 2017-09-11 19:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 19:17 - 2017-09-11 19:17 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 19:17 - 2017-09-11 19:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 19:17 - 2017-09-11 19:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\https_tpc.googlesyndication.com_0.localstorage 2017-09-11 19:17 - 2017-09-11 19:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\https_tpc.googlesyndication.com_0.localstorage-journal 2017-09-11 19:17 - 2017-09-11 19:18 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\https_www.cnet.com_0.localstorage 2017-09-11 19:17 - 2017-09-11 19:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\https_www.cnet.com_0.localstorage-journal 2017-09-12 07:03 - 2017-09-12 07:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\https_www.natori.com_0.localstorage 2017-09-12 07:03 - 2017-09-12 07:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Local Storage\https_www.natori.com_0.localstorage-journal 2017-09-11 19:17 - 2017-09-11 19:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data 2017-09-11 19:17 - 2017-09-12 08:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash 2017-09-11 19:17 - 2017-09-11 19:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 19:17 - 2017-09-11 19:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 19:17 - 2017-09-11 19:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\QA87HZ4H 2017-09-11 19:17 - 2017-09-11 19:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 19:17 - 2017-09-11 19:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 19:17 - 2017-09-11 19:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G 2017-09-11 19:17 - 2017-09-12 08:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\cdn.stickyadstv.com 2017-09-11 19:17 - 2017-09-11 19:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\cdncache-a.akamaihd.net 2017-09-11 19:17 - 2017-09-11 19:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\cdncache-a.akamaihd.net\items 2017-09-11 19:17 - 2017-09-11 19:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 19:17 - 2017-09-11 19:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 19:17 - 2017-09-11 19:22 - 000000476 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 19:17 - 2017-09-12 08:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\eereader.com 2017-09-11 19:18 - 2017-09-12 08:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\efreader.com 2017-09-11 19:25 - 2017-09-12 01:04 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\efreader.com\analytics.sol 2017-09-11 19:17 - 2017-09-12 08:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\egreader.com 2017-09-12 00:59 - 2017-09-12 00:59 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\egreader.com\analytics.sol 2017-09-11 19:17 - 2017-09-11 19:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\macromedia.com 2017-09-11 19:17 - 2017-09-11 19:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\macromedia.com\support 2017-09-11 19:17 - 2017-09-11 19:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\macromedia.com\support\flashplayer 2017-09-11 19:17 - 2017-09-11 19:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\macromedia.com\support\flashplayer\sys 2017-09-11 19:17 - 2017-09-11 19:18 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 19:17 - 2017-09-11 19:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 19:17 - 2017-09-11 19:17 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 19:17 - 2017-09-11 19:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 19:17 - 2017-09-11 19:17 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 19:17 - 2017-09-11 19:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 19:17 - 2017-09-11 19:17 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 19:18 - 2017-09-11 19:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 19:18 - 2017-09-11 19:18 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 19:17 - 2017-09-11 19:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 19:17 - 2017-09-11 19:17 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data659\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SBJMY22G\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 18:40 - 2017-09-11 19:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660 2017-09-10 18:40 - 2017-09-11 17:43 - 000272384 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Cookies 2017-09-10 18:40 - 2017-09-11 17:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Cookies-journal 2017-09-10 18:41 - 2017-09-10 18:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\databases 2017-09-10 18:41 - 2017-09-10 18:41 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\databases\Databases.db 2017-09-10 18:41 - 2017-09-10 18:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\databases\Databases.db-journal 2017-09-10 18:41 - 2017-09-11 17:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System 2017-09-11 03:38 - 2017-09-11 03:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\003 2017-09-11 03:38 - 2017-09-11 17:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\003\t 2017-09-11 17:41 - 2017-09-11 17:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\003\t\Paths 2017-09-11 17:41 - 2017-09-11 17:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\003\t\Paths\000003.log 2017-09-11 17:41 - 2017-09-11 17:41 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\003\t\Paths\CURRENT 2017-09-11 17:41 - 2017-09-11 17:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\003\t\Paths\LOCK 2017-09-11 17:41 - 2017-09-11 17:41 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\003\t\Paths\LOG 2017-09-11 17:41 - 2017-09-11 17:41 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\003\t\Paths\MANIFEST-000001 2017-09-11 17:38 - 2017-09-11 17:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\004 2017-09-11 17:38 - 2017-09-11 17:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\004\t 2017-09-11 17:41 - 2017-09-11 17:41 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\004\t\.usage 2017-09-11 17:41 - 2017-09-11 17:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\004\t\Paths 2017-09-11 17:41 - 2017-09-11 17:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\004\t\Paths\000003.log 2017-09-11 17:41 - 2017-09-11 17:41 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\004\t\Paths\CURRENT 2017-09-11 17:41 - 2017-09-11 17:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\004\t\Paths\LOCK 2017-09-11 17:41 - 2017-09-11 17:41 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\004\t\Paths\LOG 2017-09-11 17:41 - 2017-09-11 17:41 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\004\t\Paths\MANIFEST-000001 2017-09-10 18:41 - 2017-09-11 17:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\Origins 2017-09-10 18:41 - 2017-09-11 17:39 - 000000382 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\Origins\000003.log 2017-09-11 17:42 - 2017-09-11 17:42 - 000000288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\Origins\000004.ldb 2017-09-11 17:43 - 2017-09-11 17:43 - 000000288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\Origins\000005.ldb 2017-09-10 18:41 - 2017-09-10 18:41 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\Origins\CURRENT 2017-09-10 18:41 - 2017-09-10 18:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\Origins\LOCK 2017-09-10 18:41 - 2017-09-11 17:43 - 000000744 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\Origins\LOG 2017-09-10 18:41 - 2017-09-11 17:38 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\Origins\LOG.old 2017-09-10 18:41 - 2017-09-10 18:41 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\Origins\MANIFEST-000001 2017-09-10 18:41 - 2017-09-10 18:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\File System\Origins\lost 2017-09-10 18:41 - 2017-09-11 17:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB 2017-09-11 03:34 - 2017-09-11 03:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_thedroidguy.com_0.indexeddb.leveldb 2017-09-11 03:34 - 2017-09-11 03:34 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_thedroidguy.com_0.indexeddb.leveldb\000003.log 2017-09-11 03:34 - 2017-09-11 03:34 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_thedroidguy.com_0.indexeddb.leveldb\CURRENT 2017-09-11 03:34 - 2017-09-11 03:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_thedroidguy.com_0.indexeddb.leveldb\LOCK 2017-09-11 03:34 - 2017-09-11 03:34 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_thedroidguy.com_0.indexeddb.leveldb\LOG 2017-09-11 03:34 - 2017-09-11 03:34 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_thedroidguy.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 03:35 - 2017-09-11 03:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_www.dictionary.com_0.indexeddb.leveldb 2017-09-11 03:35 - 2017-09-11 03:35 - 000000186 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_www.dictionary.com_0.indexeddb.leveldb\000003.log 2017-09-11 03:35 - 2017-09-11 03:35 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_www.dictionary.com_0.indexeddb.leveldb\CURRENT 2017-09-11 03:35 - 2017-09-11 03:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_www.dictionary.com_0.indexeddb.leveldb\LOCK 2017-09-11 03:35 - 2017-09-11 03:35 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_www.dictionary.com_0.indexeddb.leveldb\LOG 2017-09-11 03:35 - 2017-09-11 03:35 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_www.dictionary.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 18:41 - 2017-09-10 18:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb 2017-09-10 18:41 - 2017-09-10 18:41 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb\000003.log 2017-09-10 18:41 - 2017-09-10 18:41 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb\CURRENT 2017-09-10 18:41 - 2017-09-10 18:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb\LOCK 2017-09-10 18:41 - 2017-09-10 18:41 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb\LOG 2017-09-10 18:41 - 2017-09-10 18:41 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 17:41 - 2017-09-11 17:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb 2017-09-11 17:41 - 2017-09-11 17:41 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb\000003.log 2017-09-11 17:41 - 2017-09-11 17:41 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb\CURRENT 2017-09-11 17:41 - 2017-09-11 17:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb\LOCK 2017-09-11 17:41 - 2017-09-11 17:41 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb\LOG 2017-09-11 17:41 - 2017-09-11 17:41 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\http_www.reuters.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 18:41 - 2017-09-10 18:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\https_www.bhphotovideo.com_0.indexeddb.leveldb 2017-09-10 18:41 - 2017-09-10 18:41 - 000000516 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\https_www.bhphotovideo.com_0.indexeddb.leveldb\000003.log 2017-09-10 18:41 - 2017-09-10 18:41 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\https_www.bhphotovideo.com_0.indexeddb.leveldb\CURRENT 2017-09-10 18:41 - 2017-09-10 18:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\https_www.bhphotovideo.com_0.indexeddb.leveldb\LOCK 2017-09-10 18:41 - 2017-09-10 18:41 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\https_www.bhphotovideo.com_0.indexeddb.leveldb\LOG 2017-09-10 18:41 - 2017-09-10 18:41 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\IndexedDB\https_www.bhphotovideo.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 18:40 - 2017-09-11 17:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage 2017-09-11 03:36 - 2017-09-11 03:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_allrecipes.com_0.localstorage 2017-09-11 03:36 - 2017-09-11 03:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-11 17:42 - 2017-09-11 17:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-11 17:42 - 2017-09-11 17:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-10 18:40 - 2017-09-10 18:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_cdn-gl.imrworldwide.com_0.localstorage 2017-09-10 18:40 - 2017-09-10 18:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_cdn-gl.imrworldwide.com_0.localstorage-journal 2017-09-11 03:34 - 2017-09-11 03:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_connexity.net_0.localstorage 2017-09-11 03:34 - 2017-09-11 03:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 18:46 - 2017-09-10 18:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_in.reuters.com_0.localstorage 2017-09-10 18:46 - 2017-09-10 18:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_in.reuters.com_0.localstorage-journal 2017-09-10 18:41 - 2017-09-10 18:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 18:41 - 2017-09-10 18:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 18:40 - 2017-09-10 18:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 18:40 - 2017-09-10 18:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 03:35 - 2017-09-11 17:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-11 03:35 - 2017-09-11 17:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-10 18:44 - 2017-09-10 18:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-10 18:44 - 2017-09-10 18:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-11 03:33 - 2017-09-11 17:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 03:33 - 2017-09-11 17:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 03:30 - 2017-09-11 03:32 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-11 03:30 - 2017-09-11 03:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-11 03:35 - 2017-09-11 03:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.dictionary.com_0.localstorage 2017-09-11 03:35 - 2017-09-11 03:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.dictionary.com_0.localstorage-journal 2017-09-10 18:43 - 2017-09-10 18:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.finecooking.com_0.localstorage 2017-09-10 18:43 - 2017-09-10 18:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.finecooking.com_0.localstorage-journal 2017-09-11 17:40 - 2017-09-11 17:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.foxnews.com_0.localstorage 2017-09-11 17:40 - 2017-09-11 17:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.foxnews.com_0.localstorage-journal 2017-09-10 18:40 - 2017-09-10 18:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.hollywood.com_0.localstorage 2017-09-10 18:40 - 2017-09-10 18:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.hollywood.com_0.localstorage-journal 2017-09-11 03:30 - 2017-09-11 03:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.honda.com_0.localstorage 2017-09-11 03:30 - 2017-09-11 03:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.honda.com_0.localstorage-journal 2017-09-11 17:38 - 2017-09-11 17:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.insideedition.com_0.localstorage 2017-09-11 17:38 - 2017-09-11 17:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.insideedition.com_0.localstorage-journal 2017-09-10 18:43 - 2017-09-10 18:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.instyle.com_0.localstorage 2017-09-10 18:43 - 2017-09-10 18:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 03:32 - 2017-09-11 03:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 03:32 - 2017-09-11 03:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 17:35 - 2017-09-11 17:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.livescore.com_0.localstorage 2017-09-11 17:35 - 2017-09-11 17:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.livescore.com_0.localstorage-journal 2017-09-11 17:40 - 2017-09-11 17:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 17:40 - 2017-09-11 17:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-11 17:38 - 2017-09-11 17:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.mylifetime.com_0.localstorage 2017-09-11 17:38 - 2017-09-11 17:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.mylifetime.com_0.localstorage-journal 2017-09-10 18:46 - 2017-09-11 17:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 18:46 - 2017-09-11 17:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 03:34 - 2017-09-11 03:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.parents.com_0.localstorage 2017-09-11 03:34 - 2017-09-11 03:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-10 18:43 - 2017-09-10 18:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-10 18:43 - 2017-09-10 18:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-10 18:45 - 2017-09-10 18:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.qvc.com_0.localstorage 2017-09-10 18:45 - 2017-09-10 18:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\http_www.qvc.com_0.localstorage-journal 2017-09-10 18:41 - 2017-09-10 18:41 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 18:41 - 2017-09-10 18:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 03:34 - 2017-09-11 03:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\https_connexity.net_0.localstorage 2017-09-11 03:34 - 2017-09-11 03:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 03:31 - 2017-09-11 17:35 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 03:31 - 2017-09-11 17:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 18:41 - 2017-09-11 17:36 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 18:41 - 2017-09-11 17:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 18:40 - 2017-09-11 17:35 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 18:40 - 2017-09-11 17:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 18:41 - 2017-09-10 18:42 - 000271360 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\https_www.bhphotovideo.com_0.localstorage 2017-09-10 18:41 - 2017-09-10 18:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\https_www.bhphotovideo.com_0.localstorage-journal 2017-09-11 17:35 - 2017-09-11 17:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\https_www.dylanscandybar.com_0.localstorage 2017-09-11 17:35 - 2017-09-11 17:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Local Storage\https_www.dylanscandybar.com_0.localstorage-journal 2017-09-10 18:40 - 2017-09-10 18:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data 2017-09-10 18:40 - 2017-09-11 17:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash 2017-09-10 18:40 - 2017-09-10 18:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 18:40 - 2017-09-10 18:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 18:40 - 2017-09-10 18:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\4RSEPDU6 2017-09-10 18:40 - 2017-09-10 18:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 18:40 - 2017-09-10 18:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 18:40 - 2017-09-10 18:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP 2017-09-10 18:41 - 2017-09-11 17:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\cdn.stickyadstv.com 2017-09-10 18:40 - 2017-09-10 18:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\cdncache-a.akamaihd.net 2017-09-10 18:40 - 2017-09-10 18:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\cdncache-a.akamaihd.net\items 2017-09-10 18:40 - 2017-09-10 18:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 18:40 - 2017-09-11 17:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 18:40 - 2017-09-11 17:39 - 000000555 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 18:40 - 2017-09-11 17:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\eereader.com 2017-09-11 03:36 - 2017-09-11 03:36 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\eereader.com\analytics.sol 2017-09-10 18:43 - 2017-09-11 17:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\efreader.com 2017-09-11 03:36 - 2017-09-11 17:44 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\efreader.com\analytics.sol 2017-09-10 18:41 - 2017-09-11 17:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\egreader.com 2017-09-11 03:32 - 2017-09-11 03:35 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\egreader.com\analytics.sol 2017-09-10 18:43 - 2017-09-10 18:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\inread.anyclip.com 2017-09-10 18:43 - 2017-09-10 18:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\inread.anyclip.com\ac# 2017-09-10 18:43 - 2017-09-10 18:43 - 000000457 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-10 18:40 - 2017-09-10 18:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\macromedia.com 2017-09-10 18:40 - 2017-09-10 18:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\macromedia.com\support 2017-09-10 18:40 - 2017-09-10 18:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\macromedia.com\support\flashplayer 2017-09-10 18:40 - 2017-09-10 18:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\macromedia.com\support\flashplayer\sys 2017-09-10 18:40 - 2017-09-10 18:43 - 000000513 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 18:41 - 2017-09-10 18:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 18:41 - 2017-09-10 18:41 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 18:40 - 2017-09-10 18:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 18:40 - 2017-09-10 18:40 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 18:40 - 2017-09-10 18:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 18:40 - 2017-09-10 18:40 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 18:43 - 2017-09-10 18:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 18:43 - 2017-09-10 18:43 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 18:41 - 2017-09-10 18:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 18:41 - 2017-09-10 18:41 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 18:43 - 2017-09-10 18:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-10 18:43 - 2017-09-10 18:43 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data660\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HDUSZ4PP\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-10 16:39 - 2017-09-11 01:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661 2017-09-10 16:39 - 2017-09-10 23:51 - 000214016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Cookies 2017-09-10 16:39 - 2017-09-10 23:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Cookies-journal 2017-09-10 16:39 - 2017-09-10 16:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\databases 2017-09-10 16:39 - 2017-09-10 16:39 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\databases\Databases.db 2017-09-10 16:39 - 2017-09-10 16:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\databases\Databases.db-journal 2017-09-10 23:47 - 2017-09-10 23:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\File System 2017-09-10 23:47 - 2017-09-10 23:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\File System\000 2017-09-10 23:47 - 2017-09-10 23:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\File System\000\t 2017-09-10 23:47 - 2017-09-10 23:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\File System\001 2017-09-10 23:47 - 2017-09-10 23:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\File System\001\t 2017-09-10 23:48 - 2017-09-10 23:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\File System\002 2017-09-10 23:48 - 2017-09-10 23:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\File System\002\t 2017-09-10 23:47 - 2017-09-10 23:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\File System\Origins 2017-09-10 23:47 - 2017-09-10 23:50 - 000000237 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\File System\Origins\000003.log 2017-09-10 23:47 - 2017-09-10 23:47 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\File System\Origins\CURRENT 2017-09-10 23:47 - 2017-09-10 23:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\File System\Origins\LOCK 2017-09-10 23:47 - 2017-09-10 23:49 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\File System\Origins\LOG 2017-09-10 23:47 - 2017-09-10 23:47 - 000000128 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\File System\Origins\LOG.old 2017-09-10 23:47 - 2017-09-10 23:47 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\File System\Origins\MANIFEST-000001 2017-09-10 16:39 - 2017-09-10 23:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\IndexedDB 2017-09-10 16:39 - 2017-09-10 16:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\IndexedDB\http_tpc.googlesyndication.com_0.indexeddb.leveldb 2017-09-10 16:39 - 2017-09-10 16:39 - 000000200 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\IndexedDB\http_tpc.googlesyndication.com_0.indexeddb.leveldb\000003.log 2017-09-10 16:39 - 2017-09-10 16:39 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\IndexedDB\http_tpc.googlesyndication.com_0.indexeddb.leveldb\CURRENT 2017-09-10 16:39 - 2017-09-10 16:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\IndexedDB\http_tpc.googlesyndication.com_0.indexeddb.leveldb\LOCK 2017-09-10 16:39 - 2017-09-10 16:40 - 000000167 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\IndexedDB\http_tpc.googlesyndication.com_0.indexeddb.leveldb\LOG 2017-09-10 16:39 - 2017-09-10 16:39 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\IndexedDB\http_tpc.googlesyndication.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 23:44 - 2017-09-10 23:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\IndexedDB\http_www.activewearusa.com_0.indexeddb.leveldb 2017-09-10 23:44 - 2017-09-10 23:44 - 000000192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\IndexedDB\http_www.activewearusa.com_0.indexeddb.leveldb\000003.log 2017-09-10 23:44 - 2017-09-10 23:44 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\IndexedDB\http_www.activewearusa.com_0.indexeddb.leveldb\CURRENT 2017-09-10 23:44 - 2017-09-10 23:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\IndexedDB\http_www.activewearusa.com_0.indexeddb.leveldb\LOCK 2017-09-10 23:44 - 2017-09-10 23:44 - 000000164 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\IndexedDB\http_www.activewearusa.com_0.indexeddb.leveldb\LOG 2017-09-10 23:44 - 2017-09-10 23:44 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\IndexedDB\http_www.activewearusa.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 16:39 - 2017-09-10 23:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage 2017-09-10 16:40 - 2017-09-10 16:41 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_6960094.fls.doubleclick.net_0.localstorage 2017-09-10 16:40 - 2017-09-10 16:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_6960094.fls.doubleclick.net_0.localstorage-journal 2017-09-10 16:42 - 2017-09-10 16:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 16:42 - 2017-09-10 16:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 16:43 - 2017-09-10 16:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 16:43 - 2017-09-10 16:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 23:45 - 2017-09-10 23:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_connexity.net_0.localstorage 2017-09-10 23:45 - 2017-09-10 23:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 16:40 - 2017-09-10 16:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 16:40 - 2017-09-10 16:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 16:39 - 2017-09-10 16:43 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_tpc.googlesyndication.com_0.localstorage 2017-09-10 16:39 - 2017-09-10 16:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_tpc.googlesyndication.com_0.localstorage-journal 2017-09-10 23:44 - 2017-09-10 23:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.activewearusa.com_0.localstorage 2017-09-10 23:44 - 2017-09-10 23:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.activewearusa.com_0.localstorage-journal 2017-09-10 16:44 - 2017-09-10 16:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.blabbermouth.net_0.localstorage 2017-09-10 16:44 - 2017-09-10 16:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.blabbermouth.net_0.localstorage-journal 2017-09-10 16:42 - 2017-09-10 16:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 16:42 - 2017-09-10 16:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 23:47 - 2017-09-10 23:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.complex.com_0.localstorage 2017-09-10 23:47 - 2017-09-10 23:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-10 23:48 - 2017-09-10 23:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.diariocordoba.com_0.localstorage 2017-09-10 23:48 - 2017-09-10 23:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.diariocordoba.com_0.localstorage-journal 2017-09-10 23:47 - 2017-09-10 23:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.finecooking.com_0.localstorage 2017-09-10 23:47 - 2017-09-10 23:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.finecooking.com_0.localstorage-journal 2017-09-10 16:45 - 2017-09-10 16:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.flare.com_0.localstorage 2017-09-10 16:45 - 2017-09-10 16:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.flare.com_0.localstorage-journal 2017-09-10 23:49 - 2017-09-10 23:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-10 23:49 - 2017-09-10 23:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-10 16:44 - 2017-09-10 16:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.instyle.com_0.localstorage 2017-09-10 16:44 - 2017-09-10 16:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-10 16:42 - 2017-09-10 23:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 16:42 - 2017-09-10 23:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 23:46 - 2017-09-10 23:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.latimes.com_0.localstorage 2017-09-10 23:46 - 2017-09-10 23:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-10 23:43 - 2017-09-10 23:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.livescore.com_0.localstorage 2017-09-10 23:43 - 2017-09-10 23:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.livescore.com_0.localstorage-journal 2017-09-10 16:40 - 2017-09-10 16:41 - 000020480 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.ninewest.com_0.localstorage 2017-09-10 16:40 - 2017-09-10 16:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.ninewest.com_0.localstorage-journal 2017-09-10 23:46 - 2017-09-10 23:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-10 23:46 - 2017-09-10 23:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-10 23:47 - 2017-09-10 23:47 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 23:47 - 2017-09-10 23:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 23:45 - 2017-09-10 23:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\https_connexity.net_0.localstorage 2017-09-10 23:45 - 2017-09-10 23:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 23:43 - 2017-09-10 23:43 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 23:43 - 2017-09-10 23:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 23:47 - 2017-09-10 23:49 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-10 23:47 - 2017-09-10 23:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-10 16:40 - 2017-09-10 23:43 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 16:40 - 2017-09-10 23:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 16:39 - 2017-09-10 16:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data 2017-09-10 16:39 - 2017-09-10 23:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash 2017-09-10 16:39 - 2017-09-10 16:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 16:39 - 2017-09-10 16:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 16:39 - 2017-09-10 16:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\C5ATQBK8 2017-09-10 16:39 - 2017-09-10 16:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 16:39 - 2017-09-10 16:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 16:39 - 2017-09-10 16:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K 2017-09-10 16:44 - 2017-09-10 16:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\cdn.dashbid.io 2017-09-10 16:44 - 2017-09-10 16:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\cdn.dashbid.io\prod 2017-09-10 16:44 - 2017-09-10 23:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-10 16:44 - 2017-09-10 23:45 - 000000086 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-10 16:40 - 2017-09-10 23:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\cdn.stickyadstv.com 2017-09-10 16:40 - 2017-09-10 16:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\cdncache-a.akamaihd.net 2017-09-10 16:40 - 2017-09-10 16:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\cdncache-a.akamaihd.net\items 2017-09-10 16:40 - 2017-09-10 16:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 16:40 - 2017-09-10 23:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 16:40 - 2017-09-10 23:49 - 000000490 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 16:39 - 2017-09-10 23:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\eereader.com 2017-09-10 16:41 - 2017-09-10 23:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\efreader.com 2017-09-10 23:50 - 2017-09-10 23:50 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\efreader.com\analytics.sol 2017-09-10 16:40 - 2017-09-10 23:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\egreader.com 2017-09-10 23:48 - 2017-09-10 23:48 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\egreader.com\analytics.sol 2017-09-10 16:39 - 2017-09-10 16:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\macromedia.com 2017-09-10 16:39 - 2017-09-10 16:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\macromedia.com\support 2017-09-10 16:39 - 2017-09-10 16:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\macromedia.com\support\flashplayer 2017-09-10 16:39 - 2017-09-10 16:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\macromedia.com\support\flashplayer\sys 2017-09-10 16:39 - 2017-09-10 16:44 - 000000509 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 16:44 - 2017-09-10 16:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-10 16:44 - 2017-09-10 16:44 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-10 16:40 - 2017-09-10 16:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 16:40 - 2017-09-10 16:40 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 16:40 - 2017-09-10 16:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 16:40 - 2017-09-10 16:40 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 16:39 - 2017-09-10 16:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 16:39 - 2017-09-10 16:39 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 16:41 - 2017-09-10 16:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 16:41 - 2017-09-10 16:41 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 16:40 - 2017-09-10 16:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 16:40 - 2017-09-10 16:40 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data661\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R9XPLZ8K\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 20:58 - 2017-09-11 22:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662 2017-09-11 20:58 - 2017-09-11 22:40 - 000223232 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Cookies 2017-09-11 20:58 - 2017-09-11 22:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Cookies-journal 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\databases 2017-09-11 20:58 - 2017-09-11 20:58 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\databases\Databases.db 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\databases\Databases.db-journal 2017-09-11 20:58 - 2017-09-11 22:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\File System 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\File System\000 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\File System\000\t 2017-09-11 22:35 - 2017-09-11 22:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\File System\001 2017-09-11 22:35 - 2017-09-11 22:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\File System\001\t 2017-09-11 22:38 - 2017-09-11 22:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\File System\002 2017-09-11 22:38 - 2017-09-11 22:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\File System\002\t 2017-09-11 22:40 - 2017-09-11 22:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\File System\003 2017-09-11 22:40 - 2017-09-11 22:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\File System\003\t 2017-09-11 20:58 - 2017-09-11 22:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\File System\Origins 2017-09-11 20:58 - 2017-09-11 22:41 - 000000302 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\File System\Origins\000003.log 2017-09-11 20:58 - 2017-09-11 20:58 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\File System\Origins\CURRENT 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\File System\Origins\LOCK 2017-09-11 20:58 - 2017-09-11 22:40 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\File System\Origins\LOG 2017-09-11 20:58 - 2017-09-11 22:38 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\File System\Origins\LOG.old 2017-09-11 20:58 - 2017-09-11 20:58 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\File System\Origins\MANIFEST-000001 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\IndexedDB 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\IndexedDB\https_www.autodesk.com_0.indexeddb.leveldb 2017-09-11 20:58 - 2017-09-11 20:58 - 000199923 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\IndexedDB\https_www.autodesk.com_0.indexeddb.leveldb\000003.log 2017-09-11 20:58 - 2017-09-11 20:58 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\IndexedDB\https_www.autodesk.com_0.indexeddb.leveldb\CURRENT 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\IndexedDB\https_www.autodesk.com_0.indexeddb.leveldb\LOCK 2017-09-11 20:58 - 2017-09-11 20:58 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\IndexedDB\https_www.autodesk.com_0.indexeddb.leveldb\LOG 2017-09-11 20:58 - 2017-09-11 20:58 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\IndexedDB\https_www.autodesk.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 20:58 - 2017-09-11 22:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage 2017-09-11 22:38 - 2017-09-11 22:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_allrecipes.com_0.localstorage 2017-09-11 22:38 - 2017-09-11 22:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-11 22:40 - 2017-09-11 22:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-11 22:40 - 2017-09-11 22:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-11 22:34 - 2017-09-11 22:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 22:34 - 2017-09-11 22:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 21:04 - 2017-09-11 21:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_breakfast.food.com_0.localstorage 2017-09-11 21:04 - 2017-09-11 21:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_breakfast.food.com_0.localstorage-journal 2017-09-11 22:36 - 2017-09-11 22:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 22:36 - 2017-09-11 22:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-11 20:58 - 2017-09-11 20:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-11 22:33 - 2017-09-11 22:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_pokemonshowdown.com_0.localstorage 2017-09-11 22:33 - 2017-09-11 22:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_pokemonshowdown.com_0.localstorage-journal 2017-09-11 20:58 - 2017-09-11 20:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 22:36 - 2017-09-11 22:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_tpc.googlesyndication.com_0.localstorage 2017-09-11 22:36 - 2017-09-11 22:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_tpc.googlesyndication.com_0.localstorage-journal 2017-09-11 20:59 - 2017-09-11 20:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_wintuneuppro.com_0.localstorage 2017-09-11 20:59 - 2017-09-11 20:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_wintuneuppro.com_0.localstorage-journal 2017-09-11 22:35 - 2017-09-11 22:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 22:35 - 2017-09-11 22:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 22:37 - 2017-09-11 22:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_www.complex.com_0.localstorage 2017-09-11 22:37 - 2017-09-11 22:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-11 22:36 - 2017-09-11 22:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-11 22:36 - 2017-09-11 22:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-11 22:33 - 2017-09-11 22:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_www.drschollsshoes.com_0.localstorage 2017-09-11 22:33 - 2017-09-11 22:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_www.drschollsshoes.com_0.localstorage-journal 2017-09-11 22:36 - 2017-09-11 22:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_www.instyle.com_0.localstorage 2017-09-11 22:36 - 2017-09-11 22:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 22:34 - 2017-09-11 22:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 22:34 - 2017-09-11 22:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 22:38 - 2017-09-11 22:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_www.marketwatch.com_0.localstorage 2017-09-11 22:38 - 2017-09-11 22:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_www.marketwatch.com_0.localstorage-journal 2017-09-11 22:35 - 2017-09-11 22:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-11 22:35 - 2017-09-11 22:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-11 20:58 - 2017-09-11 20:59 - 000009216 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_www.wikihow.com_0.localstorage 2017-09-11 20:58 - 2017-09-11 20:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\http_www.wikihow.com_0.localstorage-journal 2017-09-11 20:58 - 2017-09-11 20:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\https_accounts.google.com_0.localstorage 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\https_accounts.google.com_0.localstorage-journal 2017-09-11 22:37 - 2017-09-11 22:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\https_auid.adledge.com_0.localstorage 2017-09-11 22:37 - 2017-09-11 22:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\https_auid.adledge.com_0.localstorage-journal 2017-09-11 22:37 - 2017-09-11 22:37 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 22:37 - 2017-09-11 22:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 20:58 - 2017-09-11 20:58 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 22:37 - 2017-09-11 22:38 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-11 22:37 - 2017-09-11 22:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-11 20:58 - 2017-09-11 20:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\https_gateway.answerscloud.com_0.localstorage 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\https_gateway.answerscloud.com_0.localstorage-journal 2017-09-11 20:58 - 2017-09-11 20:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 22:34 - 2017-09-11 22:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\https_serveads.co_0.localstorage 2017-09-11 22:34 - 2017-09-11 22:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\https_serveads.co_0.localstorage-journal 2017-09-11 20:58 - 2017-09-11 20:58 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 20:58 - 2017-09-11 21:00 - 000012288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\https_www.autodesk.com_0.localstorage 2017-09-11 20:58 - 2017-09-11 21:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Local Storage\https_www.autodesk.com_0.localstorage-journal 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data 2017-09-11 20:58 - 2017-09-11 22:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash 2017-09-11 20:58 - 2017-09-11 20:58 - 000004096 ____T () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\203A.tmp 2017-09-11 20:59 - 2017-09-11 20:59 - 000004096 ____T () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\E053.tmp 2017-09-11 20:58 - 2017-09-11 20:58 - 000004096 ____T () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\F2EF.tmp 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\8FAF9HVH 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 20:58 - 2017-09-11 22:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8 2017-09-11 22:38 - 2017-09-11 22:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\cdn.dashbid.io 2017-09-11 22:38 - 2017-09-11 22:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\cdn.dashbid.io\prod 2017-09-11 22:38 - 2017-09-11 22:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-11 22:38 - 2017-09-11 22:38 - 000000069 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-11 20:58 - 2017-09-11 22:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\cdn.stickyadstv.com 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\cdncache-a.akamaihd.net 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\cdncache-a.akamaihd.net\items 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 20:58 - 2017-09-11 20:58 - 000000505 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 20:58 - 2017-09-11 22:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\eereader.com 2017-09-11 22:34 - 2017-09-11 22:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\efreader.com 2017-09-11 22:39 - 2017-09-11 22:41 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\efreader.com\analytics.sol 2017-09-11 20:58 - 2017-09-11 22:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\egreader.com 2017-09-11 22:36 - 2017-09-11 22:36 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\egreader.com\analytics.sol 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\macromedia.com 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\macromedia.com\support 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\macromedia.com\support\flashplayer 2017-09-11 20:58 - 2017-09-11 22:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\macromedia.com\support\flashplayer\sys 2017-09-11 20:58 - 2017-09-11 22:38 - 000000509 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 22:38 - 2017-09-11 22:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-11 22:38 - 2017-09-11 22:38 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 20:58 - 2017-09-11 20:58 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 20:58 - 2017-09-11 20:58 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 20:58 - 2017-09-11 20:58 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 22:34 - 2017-09-11 22:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 22:34 - 2017-09-11 22:34 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 20:58 - 2017-09-11 20:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 20:58 - 2017-09-11 20:58 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data662\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\9US8WZA8\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 11:53 - 2017-09-11 13:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663 2017-09-11 11:53 - 2017-09-11 12:01 - 000180224 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Cookies 2017-09-11 11:53 - 2017-09-11 12:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Cookies-journal 2017-09-11 11:54 - 2017-09-11 11:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\databases 2017-09-11 11:54 - 2017-09-11 11:54 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\databases\Databases.db 2017-09-11 11:54 - 2017-09-11 11:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\databases\Databases.db-journal 2017-09-11 11:54 - 2017-09-11 11:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\File System 2017-09-11 11:54 - 2017-09-11 11:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\File System\000 2017-09-11 11:54 - 2017-09-11 11:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\File System\000\t 2017-09-11 11:54 - 2017-09-11 11:54 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\File System\000\t\.usage 2017-09-11 11:54 - 2017-09-11 11:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\File System\000\t\Paths 2017-09-11 11:54 - 2017-09-11 11:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\File System\000\t\Paths\000003.log 2017-09-11 11:54 - 2017-09-11 11:54 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\File System\000\t\Paths\CURRENT 2017-09-11 11:54 - 2017-09-11 11:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\File System\000\t\Paths\LOCK 2017-09-11 11:54 - 2017-09-11 11:54 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\File System\000\t\Paths\LOG 2017-09-11 11:54 - 2017-09-11 11:54 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\File System\000\t\Paths\MANIFEST-000001 2017-09-11 11:59 - 2017-09-11 11:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\File System\001 2017-09-11 11:59 - 2017-09-11 11:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\File System\001\t 2017-09-11 11:54 - 2017-09-11 11:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\File System\Origins 2017-09-11 11:54 - 2017-09-11 12:00 - 000000176 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\File System\Origins\000003.log 2017-09-11 11:54 - 2017-09-11 11:54 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\File System\Origins\CURRENT 2017-09-11 11:54 - 2017-09-11 11:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\File System\Origins\LOCK 2017-09-11 11:54 - 2017-09-11 11:59 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\File System\Origins\LOG 2017-09-11 11:54 - 2017-09-11 11:54 - 000000128 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\File System\Origins\LOG.old 2017-09-11 11:54 - 2017-09-11 11:54 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\File System\Origins\MANIFEST-000001 2017-09-11 11:54 - 2017-09-11 11:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\IndexedDB 2017-09-11 11:54 - 2017-09-11 11:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb 2017-09-11 11:54 - 2017-09-11 11:54 - 000000206 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\000003.log 2017-09-11 11:54 - 2017-09-11 11:54 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\CURRENT 2017-09-11 11:54 - 2017-09-11 11:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\LOCK 2017-09-11 11:54 - 2017-09-11 11:54 - 000000168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\LOG 2017-09-11 11:54 - 2017-09-11 11:54 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\IndexedDB\https_www.fitnessmagazine.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 11:53 - 2017-09-11 11:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage 2017-09-11 11:59 - 2017-09-11 12:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\http_mashable.com_0.localstorage 2017-09-11 11:59 - 2017-09-11 12:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\http_mashable.com_0.localstorage-journal 2017-09-11 11:56 - 2017-09-11 11:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 11:56 - 2017-09-11 11:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 11:58 - 2017-09-11 11:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\http_www.complex.com_0.localstorage 2017-09-11 11:58 - 2017-09-11 11:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-11 11:57 - 2017-09-11 11:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-11 11:57 - 2017-09-11 11:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-11 11:57 - 2017-09-11 11:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\http_www.instyle.com_0.localstorage 2017-09-11 11:57 - 2017-09-11 11:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 11:55 - 2017-09-11 11:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 11:55 - 2017-09-11 11:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 11:56 - 2017-09-11 11:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-11 11:56 - 2017-09-11 11:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-11 11:53 - 2017-09-11 11:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\https_cdn.krxd.net_0.localstorage 2017-09-11 11:53 - 2017-09-11 11:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\https_cdn.krxd.net_0.localstorage-journal 2017-09-11 11:54 - 2017-09-11 11:54 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 11:54 - 2017-09-11 11:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 11:53 - 2017-09-11 11:54 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 11:53 - 2017-09-11 11:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 11:53 - 2017-09-11 11:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\https_sb.monetate.net_0.localstorage 2017-09-11 11:53 - 2017-09-11 11:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\https_sb.monetate.net_0.localstorage-journal 2017-09-11 11:53 - 2017-09-11 11:54 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 11:53 - 2017-09-11 11:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 11:53 - 2017-09-11 11:54 - 000011264 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\https_www.fitnessmagazine.com_0.localstorage 2017-09-11 11:53 - 2017-09-11 11:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\https_www.fitnessmagazine.com_0.localstorage-journal 2017-09-11 11:53 - 2017-09-11 11:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\https_www.revzilla.com_0.localstorage 2017-09-11 11:53 - 2017-09-11 11:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Local Storage\https_www.revzilla.com_0.localstorage-journal 2017-09-11 11:53 - 2017-09-11 11:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data 2017-09-11 11:53 - 2017-09-11 12:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash 2017-09-11 11:53 - 2017-09-11 11:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 11:53 - 2017-09-11 11:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 11:53 - 2017-09-11 11:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\ZM9PPG3Z 2017-09-11 11:53 - 2017-09-11 11:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 11:53 - 2017-09-11 11:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 11:53 - 2017-09-11 11:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D 2017-09-11 11:54 - 2017-09-11 12:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\cdn.stickyadstv.com 2017-09-11 11:53 - 2017-09-11 11:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\cdncache-a.akamaihd.net 2017-09-11 11:53 - 2017-09-11 11:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\cdncache-a.akamaihd.net\items 2017-09-11 11:53 - 2017-09-11 11:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 11:53 - 2017-09-11 11:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 11:53 - 2017-09-11 11:56 - 000000416 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 11:53 - 2017-09-11 11:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\eereader.com 2017-09-11 11:58 - 2017-09-11 11:58 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\eereader.com\analytics.sol 2017-09-11 11:55 - 2017-09-11 12:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\efreader.com 2017-09-11 12:00 - 2017-09-11 12:00 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\efreader.com\analytics.sol 2017-09-11 11:53 - 2017-09-11 11:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\egreader.com 2017-09-11 11:54 - 2017-09-11 11:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\inread.anyclip.com 2017-09-11 11:54 - 2017-09-11 11:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\inread.anyclip.com\ac# 2017-09-11 11:54 - 2017-09-11 11:54 - 000000437 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-11 11:53 - 2017-09-11 11:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\macromedia.com 2017-09-11 11:53 - 2017-09-11 11:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\macromedia.com\support 2017-09-11 11:53 - 2017-09-11 11:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\macromedia.com\support\flashplayer 2017-09-11 11:53 - 2017-09-11 11:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\macromedia.com\support\flashplayer\sys 2017-09-11 11:53 - 2017-09-11 11:56 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 11:54 - 2017-09-11 11:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 11:54 - 2017-09-11 11:54 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 11:53 - 2017-09-11 11:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 11:53 - 2017-09-11 11:53 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 11:53 - 2017-09-11 11:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 11:53 - 2017-09-11 11:53 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 11:55 - 2017-09-11 11:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 11:55 - 2017-09-11 11:55 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 11:53 - 2017-09-11 11:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 11:53 - 2017-09-11 11:53 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 11:54 - 2017-09-11 11:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 11:54 - 2017-09-11 11:54 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data663\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VNGWT62D\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-09 22:46 - 2017-09-12 09:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665 2017-09-09 22:46 - 2017-09-12 09:35 - 000332800 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Cookies 2017-09-09 22:46 - 2017-09-12 09:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Cookies-journal 2017-09-09 22:53 - 2017-09-09 22:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\databases 2017-09-09 22:53 - 2017-09-09 22:53 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\databases\Databases.db 2017-09-09 22:53 - 2017-09-09 22:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\databases\Databases.db-journal 2017-09-09 22:52 - 2017-09-11 13:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System 2017-09-10 01:43 - 2017-09-10 01:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\000 2017-09-10 01:43 - 2017-09-10 01:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\000\t 2017-09-09 22:54 - 2017-09-09 22:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\001 2017-09-09 22:54 - 2017-09-10 01:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\001\t 2017-09-10 01:39 - 2017-09-10 01:39 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\001\t\.usage 2017-09-10 01:39 - 2017-09-10 01:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\001\t\Paths 2017-09-10 01:39 - 2017-09-10 01:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\001\t\Paths\000003.log 2017-09-10 01:39 - 2017-09-10 01:39 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\001\t\Paths\CURRENT 2017-09-10 01:39 - 2017-09-10 01:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\001\t\Paths\LOCK 2017-09-10 01:39 - 2017-09-10 01:40 - 000000131 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\001\t\Paths\LOG 2017-09-10 01:39 - 2017-09-10 01:39 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\001\t\Paths\MANIFEST-000001 2017-09-10 01:39 - 2017-09-10 01:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\002 2017-09-10 01:39 - 2017-09-10 01:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\002\t 2017-09-10 01:39 - 2017-09-10 01:39 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\002\t\.usage 2017-09-10 01:39 - 2017-09-10 01:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\002\t\Paths 2017-09-10 01:39 - 2017-09-10 01:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\002\t\Paths\000003.log 2017-09-10 01:39 - 2017-09-10 01:39 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\002\t\Paths\CURRENT 2017-09-10 01:39 - 2017-09-10 01:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\002\t\Paths\LOCK 2017-09-10 01:39 - 2017-09-10 01:40 - 000000131 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\002\t\Paths\LOG 2017-09-10 01:39 - 2017-09-10 01:39 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\002\t\Paths\MANIFEST-000001 2017-09-11 00:28 - 2017-09-11 00:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\003 2017-09-11 00:28 - 2017-09-11 00:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\003\t 2017-09-11 00:29 - 2017-09-11 00:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\004 2017-09-11 00:29 - 2017-09-11 00:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\004\t 2017-09-11 00:31 - 2017-09-11 00:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\005 2017-09-11 00:31 - 2017-09-11 00:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\005\t 2017-09-11 13:02 - 2017-09-11 13:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\006 2017-09-11 13:02 - 2017-09-11 13:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\006\t 2017-09-09 22:52 - 2017-09-11 13:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\Origins 2017-09-09 22:52 - 2017-09-11 13:03 - 000000515 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\Origins\000003.log 2017-09-09 22:52 - 2017-09-09 22:52 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\Origins\CURRENT 2017-09-09 22:52 - 2017-09-09 22:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\Origins\LOCK 2017-09-09 22:52 - 2017-09-11 13:07 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\Origins\LOG 2017-09-09 22:52 - 2017-09-11 13:05 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\Origins\LOG.old 2017-09-09 22:52 - 2017-09-09 22:52 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\Origins\MANIFEST-000001 2017-09-09 22:53 - 2017-09-09 22:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\File System\Origins\lost 2017-09-09 22:53 - 2017-09-10 01:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\IndexedDB 2017-09-09 22:53 - 2017-09-09 22:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\IndexedDB\http_www.food.com_0.indexeddb.leveldb 2017-09-09 22:53 - 2017-09-09 22:53 - 000000174 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\IndexedDB\http_www.food.com_0.indexeddb.leveldb\000003.log 2017-09-09 22:53 - 2017-09-09 22:53 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\IndexedDB\http_www.food.com_0.indexeddb.leveldb\CURRENT 2017-09-09 22:53 - 2017-09-09 22:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\IndexedDB\http_www.food.com_0.indexeddb.leveldb\LOCK 2017-09-09 22:53 - 2017-09-09 22:53 - 000000156 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\IndexedDB\http_www.food.com_0.indexeddb.leveldb\LOG 2017-09-09 22:53 - 2017-09-09 22:53 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\IndexedDB\http_www.food.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 01:39 - 2017-09-10 01:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb 2017-09-10 01:39 - 2017-09-10 01:39 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\000003.log 2017-09-10 01:39 - 2017-09-10 01:39 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\CURRENT 2017-09-10 01:39 - 2017-09-10 01:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\LOCK 2017-09-10 01:39 - 2017-09-10 01:40 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\LOG 2017-09-10 01:39 - 2017-09-10 01:39 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-09 22:46 - 2017-09-12 09:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage 2017-09-11 00:31 - 2017-09-11 00:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-11 00:31 - 2017-09-11 00:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-09 22:52 - 2017-09-09 22:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-09 22:52 - 2017-09-09 22:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-09 22:46 - 2017-09-11 12:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_cdn-gl.imrworldwide.com_0.localstorage 2017-09-09 22:46 - 2017-09-11 12:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_cdn-gl.imrworldwide.com_0.localstorage-journal 2017-09-10 01:38 - 2017-09-10 01:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_nflfilms.nfl.com_0.localstorage 2017-09-10 01:38 - 2017-09-10 01:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_nflfilms.nfl.com_0.localstorage-journal 2017-09-11 12:59 - 2017-09-11 12:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_secure-us.imrworldwide.com_0.localstorage 2017-09-11 12:59 - 2017-09-11 12:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_secure-us.imrworldwide.com_0.localstorage-journal 2017-09-11 13:04 - 2017-09-11 13:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_thebiglead.com_0.localstorage 2017-09-11 13:04 - 2017-09-11 13:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_thebiglead.com_0.localstorage-journal 2017-09-10 01:40 - 2017-09-10 01:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-10 01:40 - 2017-09-10 01:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-11 13:04 - 2017-09-11 13:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.blessyouboys.com_0.localstorage 2017-09-11 13:04 - 2017-09-11 13:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.blessyouboys.com_0.localstorage-journal 2017-09-09 22:51 - 2017-09-09 22:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.bounty.com_0.localstorage 2017-09-09 22:51 - 2017-09-09 22:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.bounty.com_0.localstorage-journal 2017-09-10 01:43 - 2017-09-10 01:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.cbs.com_0.localstorage 2017-09-10 01:43 - 2017-09-10 01:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.cbs.com_0.localstorage-journal 2017-09-09 22:48 - 2017-09-11 13:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-09 22:48 - 2017-09-11 13:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-09 22:51 - 2017-09-09 22:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-09 22:51 - 2017-09-09 22:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-12 09:35 - 2017-09-12 09:35 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.detroitnews.com_0.localstorage 2017-09-12 09:35 - 2017-09-12 09:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.detroitnews.com_0.localstorage-journal 2017-09-11 00:29 - 2017-09-11 00:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-11 00:29 - 2017-09-11 00:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-10 01:39 - 2017-09-10 01:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-10 01:39 - 2017-09-10 01:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-09 22:52 - 2017-09-09 22:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.food.com_0.localstorage 2017-09-09 22:52 - 2017-09-09 22:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-11 12:59 - 2017-09-11 13:01 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.foxsports.com_0.localstorage 2017-09-11 12:59 - 2017-09-11 13:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.foxsports.com_0.localstorage-journal 2017-09-10 01:36 - 2017-09-10 01:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.fragrancex.com_0.localstorage 2017-09-10 01:36 - 2017-09-10 01:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.fragrancex.com_0.localstorage-journal 2017-09-11 13:03 - 2017-09-11 13:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-11 13:03 - 2017-09-11 13:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-11 00:29 - 2017-09-11 00:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.golfdigest.com_0.localstorage 2017-09-11 00:29 - 2017-09-11 00:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.golfdigest.com_0.localstorage-journal 2017-09-11 00:27 - 2017-09-11 00:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.innerself.com_0.localstorage 2017-09-11 00:27 - 2017-09-11 00:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.innerself.com_0.localstorage-journal 2017-09-11 13:05 - 2017-09-11 13:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-11 13:05 - 2017-09-11 13:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-09 22:48 - 2017-09-10 01:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-09 22:48 - 2017-09-10 01:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 13:02 - 2017-09-11 13:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.islandpacket.com_0.localstorage 2017-09-11 13:02 - 2017-09-11 13:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.islandpacket.com_0.localstorage-journal 2017-09-09 22:50 - 2017-09-09 22:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.latimes.com_0.localstorage 2017-09-09 22:50 - 2017-09-09 22:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-11 00:27 - 2017-09-11 00:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-11 00:27 - 2017-09-11 00:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-10 01:41 - 2017-09-10 01:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.mtv.com_0.localstorage 2017-09-10 01:41 - 2017-09-10 01:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.mtv.com_0.localstorage-journal 2017-09-11 13:02 - 2017-09-11 13:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.nbcconnecticut.com_0.localstorage 2017-09-11 13:02 - 2017-09-11 13:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.nbcconnecticut.com_0.localstorage-journal 2017-09-09 22:52 - 2017-09-09 22:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.newsru.com_0.localstorage 2017-09-09 22:52 - 2017-09-09 22:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.newsru.com_0.localstorage-journal 2017-09-09 22:48 - 2017-09-09 22:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.nfl.com_0.localstorage 2017-09-09 22:48 - 2017-09-09 22:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-09 22:46 - 2017-09-09 22:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.nydailynews.com_0.localstorage 2017-09-09 22:46 - 2017-09-09 22:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.nydailynews.com_0.localstorage-journal 2017-09-09 22:49 - 2017-09-10 01:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-09 22:49 - 2017-09-10 01:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-12 09:35 - 2017-09-12 09:35 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\https_assets.bounceexchange.com_0.localstorage 2017-09-12 09:35 - 2017-09-12 09:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\https_assets.bounceexchange.com_0.localstorage-journal 2017-09-10 01:40 - 2017-09-10 01:40 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 01:40 - 2017-09-10 01:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 00:24 - 2017-09-11 00:24 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 00:24 - 2017-09-11 00:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 00:24 - 2017-09-11 00:25 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 00:24 - 2017-09-11 00:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 12:59 - 2017-09-11 13:01 - 000033792 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\https_www.barnesandnoble.com_0.localstorage 2017-09-11 12:59 - 2017-09-11 13:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\https_www.barnesandnoble.com_0.localstorage-journal 2017-09-11 00:24 - 2017-09-11 00:25 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\https_www.bostonstore.com_0.localstorage 2017-09-11 00:24 - 2017-09-11 00:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\https_www.bostonstore.com_0.localstorage-journal 2017-09-10 01:36 - 2017-09-10 01:37 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\https_www.facebook.com_0.localstorage 2017-09-10 01:36 - 2017-09-10 01:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\https_www.facebook.com_0.localstorage-journal 2017-09-09 22:46 - 2017-09-09 22:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\https_www.paypal.com_0.localstorage 2017-09-09 22:46 - 2017-09-09 22:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\https_www.paypal.com_0.localstorage-journal 2017-09-11 00:24 - 2017-09-11 00:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\https_www.shmoop.com_0.localstorage 2017-09-11 00:24 - 2017-09-11 00:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\https_www.shmoop.com_0.localstorage-journal 2017-09-09 22:46 - 2017-09-09 22:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\https_www.talbots.com_0.localstorage 2017-09-09 22:46 - 2017-09-09 22:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Local Storage\https_www.talbots.com_0.localstorage-journal 2017-09-09 22:46 - 2017-09-09 22:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data 2017-09-09 22:46 - 2017-09-12 09:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash 2017-09-09 22:46 - 2017-09-09 22:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-09 22:46 - 2017-09-09 22:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-09 22:46 - 2017-09-09 22:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\EGMA7WQR 2017-09-09 22:46 - 2017-09-09 22:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot 2017-09-09 22:46 - 2017-09-09 22:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-09 22:46 - 2017-09-11 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42 2017-09-09 22:48 - 2017-09-11 13:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\cdn.stickyadstv.com 2017-09-11 00:24 - 2017-09-11 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\cdncache-a.akamaihd.net 2017-09-11 00:24 - 2017-09-11 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\cdncache-a.akamaihd.net\items 2017-09-11 00:24 - 2017-09-11 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 00:24 - 2017-09-11 13:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 00:24 - 2017-09-11 13:05 - 000000429 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 00:24 - 2017-09-11 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\cdn-secure.videohub.tv 2017-09-11 00:24 - 2017-09-11 00:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\cdn-ssl.vidible.tv 2017-09-11 00:24 - 2017-09-11 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\cdn-ssl.vidible.tv\##1B2F68AF7F9CFF8C 2017-09-09 22:46 - 2017-09-12 09:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\eereader.com 2017-09-10 01:41 - 2017-09-10 01:41 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\eereader.com\analytics.sol 2017-09-09 22:48 - 2017-09-11 13:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\efreader.com 2017-09-09 22:53 - 2017-09-11 13:09 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\efreader.com\analytics.sol 2017-09-09 22:46 - 2017-09-11 13:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\egreader.com 2017-09-09 22:47 - 2017-09-09 22:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\inread.anyclip.com 2017-09-09 22:47 - 2017-09-09 22:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\inread.anyclip.com\ac# 2017-09-09 22:47 - 2017-09-09 22:47 - 000000445 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-09 22:46 - 2017-09-09 22:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com 2017-09-09 22:46 - 2017-09-09 22:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support 2017-09-09 22:46 - 2017-09-09 22:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer 2017-09-09 22:46 - 2017-09-11 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer\sys 2017-09-09 22:46 - 2017-09-11 00:24 - 000000588 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-09 22:48 - 2017-09-09 22:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-09 22:48 - 2017-09-09 22:48 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 00:24 - 2017-09-11 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 00:24 - 2017-09-11 00:24 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 00:24 - 2017-09-11 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer\sys\#cdn-secure.videohub.tv 2017-09-11 00:24 - 2017-09-11 00:24 - 000000092 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer\sys\#cdn-secure.videohub.tv\settings.sol 2017-09-11 00:24 - 2017-09-11 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer\sys\#cdn-ssl.vidible.tv 2017-09-11 00:24 - 2017-09-11 00:24 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer\sys\#cdn-ssl.vidible.tv\settings.sol 2017-09-09 22:46 - 2017-09-09 22:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-09 22:46 - 2017-09-09 22:46 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-09 22:48 - 2017-09-09 22:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-09 22:48 - 2017-09-09 22:48 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-09 22:46 - 2017-09-09 22:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-09 22:46 - 2017-09-09 22:46 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-09 22:47 - 2017-09-09 22:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-09 22:47 - 2017-09-09 22:47 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-09 22:52 - 2017-09-09 22:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com 2017-09-09 22:52 - 2017-09-09 22:52 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com\settings.sol 2017-09-09 22:52 - 2017-09-09 22:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\objects.tremormedia.com 2017-09-09 22:52 - 2017-09-09 22:52 - 000000072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data665\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\EH4DRU42\objects.tremormedia.com\com.quantserve.sol 2017-09-10 01:26 - 2017-09-11 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666 2017-09-10 01:26 - 2017-09-11 15:09 - 000253952 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Cookies 2017-09-10 01:26 - 2017-09-11 15:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Cookies-journal 2017-09-10 01:33 - 2017-09-11 15:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\databases 2017-09-10 01:33 - 2017-09-11 15:01 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\databases\Databases.db 2017-09-10 01:33 - 2017-09-11 15:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\databases\Databases.db-journal 2017-09-11 15:01 - 2017-09-11 15:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\databases\http_www.journeyed.com_0 2017-09-11 15:01 - 2017-09-11 15:01 - 000028672 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\databases\http_www.journeyed.com_0\1 2017-09-10 01:28 - 2017-09-11 15:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\File System 2017-09-10 01:28 - 2017-09-11 15:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\File System\Origins 2017-09-10 01:28 - 2017-09-10 19:10 - 000000382 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\File System\Origins\000003.log 2017-09-11 15:05 - 2017-09-11 15:05 - 000000292 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\File System\Origins\000004.ldb 2017-09-11 15:05 - 2017-09-11 15:05 - 000000292 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\File System\Origins\000005.ldb 2017-09-10 01:28 - 2017-09-10 01:28 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\File System\Origins\CURRENT 2017-09-10 01:28 - 2017-09-10 01:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\File System\Origins\LOCK 2017-09-10 01:28 - 2017-09-11 15:05 - 000000744 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\File System\Origins\LOG 2017-09-10 01:28 - 2017-09-11 15:02 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\File System\Origins\LOG.old 2017-09-10 01:28 - 2017-09-10 01:28 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\File System\Origins\MANIFEST-000001 2017-09-10 01:29 - 2017-09-10 01:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\File System\Origins\lost 2017-09-10 01:33 - 2017-09-11 15:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB 2017-09-11 15:05 - 2017-09-11 15:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\http_www.foodnetwork.com_0.indexeddb.leveldb 2017-09-11 15:05 - 2017-09-11 15:05 - 000000188 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\http_www.foodnetwork.com_0.indexeddb.leveldb\000003.log 2017-09-11 15:05 - 2017-09-11 15:05 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\http_www.foodnetwork.com_0.indexeddb.leveldb\CURRENT 2017-09-11 15:05 - 2017-09-11 15:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\http_www.foodnetwork.com_0.indexeddb.leveldb\LOCK 2017-09-11 15:05 - 2017-09-11 15:05 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\http_www.foodnetwork.com_0.indexeddb.leveldb\LOG 2017-09-11 15:05 - 2017-09-11 15:05 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\http_www.foodnetwork.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 01:33 - 2017-09-10 01:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\http_www.history.com_0.indexeddb.leveldb 2017-09-10 01:33 - 2017-09-10 01:33 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\http_www.history.com_0.indexeddb.leveldb\000003.log 2017-09-10 01:33 - 2017-09-10 01:33 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\http_www.history.com_0.indexeddb.leveldb\CURRENT 2017-09-10 01:33 - 2017-09-10 01:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\http_www.history.com_0.indexeddb.leveldb\LOCK 2017-09-10 01:33 - 2017-09-10 01:33 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\http_www.history.com_0.indexeddb.leveldb\LOG 2017-09-10 01:33 - 2017-09-10 01:33 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\http_www.history.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 19:04 - 2017-09-11 15:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\http_www.insidenova.com_0.indexeddb.leveldb 2017-09-10 19:04 - 2017-09-10 19:04 - 000000186 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\http_www.insidenova.com_0.indexeddb.leveldb\000003.log 2017-09-10 19:04 - 2017-09-10 19:04 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\http_www.insidenova.com_0.indexeddb.leveldb\CURRENT 2017-09-10 19:04 - 2017-09-10 19:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\http_www.insidenova.com_0.indexeddb.leveldb\LOCK 2017-09-10 19:04 - 2017-09-11 15:05 - 000000367 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\http_www.insidenova.com_0.indexeddb.leveldb\LOG 2017-09-10 19:04 - 2017-09-10 19:04 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\http_www.insidenova.com_0.indexeddb.leveldb\LOG.old 2017-09-10 19:04 - 2017-09-10 19:04 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\http_www.insidenova.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 19:01 - 2017-09-10 19:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\https_www.babycentre.co.uk_0.indexeddb.leveldb 2017-09-10 19:01 - 2017-09-10 19:01 - 000000192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\https_www.babycentre.co.uk_0.indexeddb.leveldb\000003.log 2017-09-10 19:01 - 2017-09-10 19:01 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\https_www.babycentre.co.uk_0.indexeddb.leveldb\CURRENT 2017-09-10 19:01 - 2017-09-10 19:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\https_www.babycentre.co.uk_0.indexeddb.leveldb\LOCK 2017-09-10 19:01 - 2017-09-10 19:01 - 000000164 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\https_www.babycentre.co.uk_0.indexeddb.leveldb\LOG 2017-09-10 19:01 - 2017-09-10 19:01 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\IndexedDB\https_www.babycentre.co.uk_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 01:27 - 2017-09-11 15:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage 2017-09-11 15:08 - 2017-09-11 15:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-11 15:08 - 2017-09-11 15:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-10 19:03 - 2017-09-10 19:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 19:03 - 2017-09-10 19:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 15:05 - 2017-09-11 15:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_connexity.net_0.localstorage 2017-09-11 15:05 - 2017-09-11 15:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 15:02 - 2017-09-11 15:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_edata.ndtv.com_0.localstorage 2017-09-11 15:02 - 2017-09-11 15:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_edata.ndtv.com_0.localstorage-journal 2017-09-11 15:01 - 2017-09-11 15:02 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 15:01 - 2017-09-11 15:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 01:31 - 2017-09-10 01:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-10 01:31 - 2017-09-10 01:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-11 15:02 - 2017-09-11 15:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_tpc.googlesyndication.com_0.localstorage 2017-09-11 15:02 - 2017-09-11 15:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_tpc.googlesyndication.com_0.localstorage-journal 2017-09-11 15:06 - 2017-09-11 15:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.bendbulletin.com_0.localstorage 2017-09-11 15:06 - 2017-09-11 15:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.bendbulletin.com_0.localstorage-journal 2017-09-10 19:05 - 2017-09-10 19:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-10 19:05 - 2017-09-10 19:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-11 15:04 - 2017-09-11 15:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.businessinsider.com_0.localstorage 2017-09-11 15:04 - 2017-09-11 15:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.businessinsider.com_0.localstorage-journal 2017-09-10 19:08 - 2017-09-10 19:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.cbs.com_0.localstorage 2017-09-10 19:08 - 2017-09-10 19:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.cbs.com_0.localstorage-journal 2017-09-10 01:28 - 2017-09-10 19:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 01:28 - 2017-09-10 19:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 01:29 - 2017-09-10 01:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-10 01:29 - 2017-09-10 01:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-11 15:05 - 2017-09-11 15:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-11 15:05 - 2017-09-11 15:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-10 01:31 - 2017-09-10 01:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.history.com_0.localstorage 2017-09-10 01:31 - 2017-09-10 01:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.history.com_0.localstorage-journal 2017-09-10 01:29 - 2017-09-10 01:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.innerself.com_0.localstorage 2017-09-10 01:29 - 2017-09-10 01:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.innerself.com_0.localstorage-journal 2017-09-10 19:04 - 2017-09-10 19:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-10 19:04 - 2017-09-10 19:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-10 19:06 - 2017-09-10 19:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.instyle.com_0.localstorage 2017-09-10 19:06 - 2017-09-10 19:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-10 01:28 - 2017-09-10 01:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 01:28 - 2017-09-10 01:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 15:02 - 2017-09-11 15:03 - 000008192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.journeyed.com_0.localstorage 2017-09-11 15:02 - 2017-09-11 15:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.journeyed.com_0.localstorage-journal 2017-09-10 19:06 - 2017-09-10 19:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.macworld.com_0.localstorage 2017-09-10 19:06 - 2017-09-10 19:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-11 15:04 - 2017-09-11 15:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 15:04 - 2017-09-11 15:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-11 15:07 - 2017-09-11 15:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.motherearthliving.com_0.localstorage 2017-09-11 15:07 - 2017-09-11 15:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.motherearthliving.com_0.localstorage-journal 2017-09-10 01:29 - 2017-09-10 01:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.mylifetime.com_0.localstorage 2017-09-10 01:29 - 2017-09-10 01:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.mylifetime.com_0.localstorage-journal 2017-09-11 15:01 - 2017-09-11 15:03 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.ndtv.com_0.localstorage 2017-09-11 15:01 - 2017-09-11 15:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.ndtv.com_0.localstorage-journal 2017-09-10 01:27 - 2017-09-10 19:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 01:27 - 2017-09-10 19:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 19:03 - 2017-09-10 19:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-10 19:03 - 2017-09-10 19:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-10 19:00 - 2017-09-10 19:00 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 19:00 - 2017-09-10 19:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 19:00 - 2017-09-10 19:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\https_cdn-gl.imrworldwide.com_0.localstorage 2017-09-10 19:00 - 2017-09-10 19:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\https_cdn-gl.imrworldwide.com_0.localstorage-journal 2017-09-11 15:05 - 2017-09-11 15:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\https_connexity.net_0.localstorage 2017-09-11 15:05 - 2017-09-11 15:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 15:02 - 2017-09-11 15:02 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 15:02 - 2017-09-11 15:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 19:00 - 2017-09-10 19:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\https_secure-au.imrworldwide.com_0.localstorage 2017-09-10 19:00 - 2017-09-10 19:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\https_secure-au.imrworldwide.com_0.localstorage-journal 2017-09-11 15:01 - 2017-09-11 15:02 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 15:01 - 2017-09-11 15:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 19:00 - 2017-09-10 19:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\https_www.babycentre.co.uk_0.localstorage 2017-09-10 19:00 - 2017-09-10 19:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Local Storage\https_www.babycentre.co.uk_0.localstorage-journal 2017-09-10 01:27 - 2017-09-10 01:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data 2017-09-10 01:27 - 2017-09-11 15:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash 2017-09-10 01:27 - 2017-09-10 01:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 01:27 - 2017-09-10 01:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 01:27 - 2017-09-10 01:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\FNG62SX2 2017-09-10 01:27 - 2017-09-10 01:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 01:27 - 2017-09-10 01:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 01:27 - 2017-09-11 15:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT 2017-09-10 01:28 - 2017-09-11 15:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\cdn.stickyadstv.com 2017-09-10 19:03 - 2017-09-10 19:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\cdncache-a.akamaihd.net 2017-09-10 19:03 - 2017-09-10 19:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\cdncache-a.akamaihd.net\items 2017-09-10 19:03 - 2017-09-10 19:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 19:03 - 2017-09-11 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 19:03 - 2017-09-11 15:07 - 000000475 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 01:29 - 2017-09-11 15:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\eereader.com 2017-09-10 01:31 - 2017-09-10 19:02 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\eereader.com\analytics.sol 2017-09-10 01:27 - 2017-09-11 15:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\efreader.com 2017-09-10 01:33 - 2017-09-10 19:10 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\efreader.com\analytics.sol 2017-09-10 01:27 - 2017-09-11 15:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\egreader.com 2017-09-10 19:05 - 2017-09-10 19:05 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\egreader.com\analytics.sol 2017-09-10 19:03 - 2017-09-10 19:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\inread.anyclip.com 2017-09-10 19:03 - 2017-09-10 19:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\inread.anyclip.com\ac# 2017-09-10 19:03 - 2017-09-10 19:03 - 000000441 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-10 01:27 - 2017-09-10 01:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\macromedia.com 2017-09-10 01:27 - 2017-09-10 01:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\macromedia.com\support 2017-09-10 01:27 - 2017-09-10 01:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\macromedia.com\support\flashplayer 2017-09-10 01:27 - 2017-09-11 15:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\macromedia.com\support\flashplayer\sys 2017-09-10 01:27 - 2017-09-11 15:03 - 000000529 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 01:28 - 2017-09-10 01:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 01:28 - 2017-09-10 01:28 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 19:03 - 2017-09-10 19:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 19:03 - 2017-09-10 19:03 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 01:29 - 2017-09-10 01:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 01:29 - 2017-09-10 01:29 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 01:27 - 2017-09-10 01:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 01:27 - 2017-09-10 01:27 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 01:27 - 2017-09-10 01:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 01:27 - 2017-09-10 01:27 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 19:03 - 2017-09-10 19:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-10 19:03 - 2017-09-10 19:03 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-11 15:03 - 2017-09-11 15:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\macromedia.com\support\flashplayer\sys\#www.ndtv.com 2017-09-11 15:03 - 2017-09-11 15:03 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\macromedia.com\support\flashplayer\sys\#www.ndtv.com\settings.sol 2017-09-11 15:03 - 2017-09-11 15:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\www.ndtv.com 2017-09-11 15:03 - 2017-09-11 15:03 - 000000419 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\www.ndtv.com\analytics.sol 2017-09-11 15:03 - 2017-09-11 15:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\www.ndtv.com\##4A95D6CB62F88CA0 2017-09-11 15:03 - 2017-09-11 15:03 - 000000193 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\www.ndtv.com\##4A95D6CB62F88CA0\00000001.sol 2017-09-11 15:03 - 2017-09-11 15:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data666\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\RSVGKGWT\www.ndtv.com\##610BBE2DF05E761F 2017-09-10 14:27 - 2017-09-12 04:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667 2017-09-10 14:27 - 2017-09-12 03:28 - 000293888 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Cookies 2017-09-10 14:27 - 2017-09-12 03:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Cookies-journal 2017-09-10 14:27 - 2017-09-10 14:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\databases 2017-09-10 14:27 - 2017-09-10 14:27 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\databases\Databases.db 2017-09-10 14:27 - 2017-09-10 14:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\databases\Databases.db-journal 2017-09-10 14:29 - 2017-09-12 03:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\File System 2017-09-12 03:26 - 2017-09-12 03:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\File System\006 2017-09-12 03:26 - 2017-09-12 03:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\File System\006\t 2017-09-10 14:29 - 2017-09-12 03:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\File System\Origins 2017-09-10 14:29 - 2017-09-12 03:26 - 000000534 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\File System\Origins\000003.log 2017-09-12 03:26 - 2017-09-12 03:26 - 000000351 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\File System\Origins\000004.ldb 2017-09-12 03:26 - 2017-09-12 03:26 - 000000351 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\File System\Origins\000005.ldb 2017-09-10 14:29 - 2017-09-10 14:29 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\File System\Origins\CURRENT 2017-09-10 14:29 - 2017-09-10 14:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\File System\Origins\LOCK 2017-09-10 14:29 - 2017-09-12 03:26 - 000000744 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\File System\Origins\LOG 2017-09-10 14:29 - 2017-09-11 23:05 - 000000388 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\File System\Origins\LOG.old 2017-09-10 14:29 - 2017-09-10 14:29 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\File System\Origins\MANIFEST-000001 2017-09-11 23:03 - 2017-09-11 23:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\File System\Origins\lost 2017-09-10 14:27 - 2017-09-11 23:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\IndexedDB 2017-09-11 23:03 - 2017-09-11 23:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\IndexedDB\http_diethood.com_0.indexeddb.leveldb 2017-09-11 23:03 - 2017-09-11 23:03 - 000000174 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\IndexedDB\http_diethood.com_0.indexeddb.leveldb\000003.log 2017-09-11 23:03 - 2017-09-11 23:03 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\IndexedDB\http_diethood.com_0.indexeddb.leveldb\CURRENT 2017-09-11 23:03 - 2017-09-11 23:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\IndexedDB\http_diethood.com_0.indexeddb.leveldb\LOCK 2017-09-11 23:03 - 2017-09-11 23:03 - 000000155 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\IndexedDB\http_diethood.com_0.indexeddb.leveldb\LOG 2017-09-11 23:03 - 2017-09-11 23:03 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\IndexedDB\http_diethood.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 14:27 - 2017-09-10 14:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\IndexedDB\https_www.westernjournalism.com_0.indexeddb.leveldb 2017-09-10 14:27 - 2017-09-10 14:27 - 000002503 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\IndexedDB\https_www.westernjournalism.com_0.indexeddb.leveldb\000003.log 2017-09-10 14:27 - 2017-09-10 14:27 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\IndexedDB\https_www.westernjournalism.com_0.indexeddb.leveldb\CURRENT 2017-09-10 14:27 - 2017-09-10 14:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\IndexedDB\https_www.westernjournalism.com_0.indexeddb.leveldb\LOCK 2017-09-10 14:27 - 2017-09-10 14:27 - 000000170 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\IndexedDB\https_www.westernjournalism.com_0.indexeddb.leveldb\LOG 2017-09-10 14:27 - 2017-09-10 14:27 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\IndexedDB\https_www.westernjournalism.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 14:27 - 2017-09-12 03:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage 2017-09-12 03:26 - 2017-09-12 03:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_allrecipes.com_0.localstorage 2017-09-12 03:26 - 2017-09-12 03:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-12 03:22 - 2017-09-12 03:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-12 03:22 - 2017-09-12 03:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 14:30 - 2017-09-10 14:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_connexity.net_0.localstorage 2017-09-10 14:30 - 2017-09-10 14:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 23:02 - 2017-09-11 23:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_diethood.com_0.localstorage 2017-09-11 23:02 - 2017-09-11 23:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_diethood.com_0.localstorage-journal 2017-09-12 03:20 - 2017-09-12 03:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_secure-us.imrworldwide.com_0.localstorage 2017-09-12 03:20 - 2017-09-12 03:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_secure-us.imrworldwide.com_0.localstorage-journal 2017-09-12 03:25 - 2017-09-12 03:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_thebiglead.com_0.localstorage 2017-09-12 03:25 - 2017-09-12 03:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_thebiglead.com_0.localstorage-journal 2017-09-10 14:27 - 2017-09-10 14:28 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_us.topshop.com_0.localstorage 2017-09-10 14:27 - 2017-09-10 14:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_us.topshop.com_0.localstorage-journal 2017-09-11 22:57 - 2017-09-11 22:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_video-static.tunnl.com_0.localstorage 2017-09-11 22:57 - 2017-09-11 22:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_video-static.tunnl.com_0.localstorage-journal 2017-09-12 03:25 - 2017-09-12 03:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-12 03:25 - 2017-09-12 03:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-11 23:02 - 2017-09-11 23:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.blessyouboys.com_0.localstorage 2017-09-11 23:02 - 2017-09-11 23:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.blessyouboys.com_0.localstorage-journal 2017-09-11 23:05 - 2017-09-11 23:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.cbs.com_0.localstorage 2017-09-11 23:05 - 2017-09-11 23:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.cbs.com_0.localstorage-journal 2017-09-10 14:29 - 2017-09-10 14:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 14:29 - 2017-09-10 14:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 14:30 - 2017-09-10 14:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.courant.com_0.localstorage 2017-09-10 14:30 - 2017-09-10 14:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-10 14:33 - 2017-09-10 14:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-10 14:33 - 2017-09-10 14:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-10 14:32 - 2017-09-10 14:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.espn.co.uk_0.localstorage 2017-09-10 14:32 - 2017-09-10 14:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.espn.co.uk_0.localstorage-journal 2017-09-11 23:01 - 2017-09-12 03:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.finecooking.com_0.localstorage 2017-09-11 23:01 - 2017-09-12 03:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.finecooking.com_0.localstorage-journal 2017-09-12 03:24 - 2017-09-12 03:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.innerself.com_0.localstorage 2017-09-12 03:24 - 2017-09-12 03:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.innerself.com_0.localstorage-journal 2017-09-10 14:30 - 2017-09-10 14:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.insideedition.com_0.localstorage 2017-09-10 14:30 - 2017-09-10 14:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.insideedition.com_0.localstorage-journal 2017-09-10 14:28 - 2017-09-10 14:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 14:28 - 2017-09-10 14:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-12 03:20 - 2017-09-12 03:20 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.lang.com_0.localstorage 2017-09-12 03:20 - 2017-09-12 03:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.lang.com_0.localstorage-journal 2017-09-11 23:01 - 2017-09-11 23:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.latimes.com_0.localstorage 2017-09-11 23:01 - 2017-09-11 23:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-11 23:00 - 2017-09-11 23:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 23:00 - 2017-09-11 23:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-12 03:20 - 2017-09-12 03:22 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.metacritic.com_0.localstorage 2017-09-12 03:20 - 2017-09-12 03:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.metacritic.com_0.localstorage-journal 2017-09-11 22:57 - 2017-09-11 22:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.motherhood.com_0.localstorage 2017-09-11 22:57 - 2017-09-11 22:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.motherhood.com_0.localstorage-journal 2017-09-12 03:22 - 2017-09-12 03:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.nbc.com_0.localstorage 2017-09-12 03:22 - 2017-09-12 03:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.nbc.com_0.localstorage-journal 2017-09-12 03:23 - 2017-09-12 03:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.nbcconnecticut.com_0.localstorage 2017-09-12 03:23 - 2017-09-12 03:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.nbcconnecticut.com_0.localstorage-journal 2017-09-10 14:32 - 2017-09-11 22:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 14:32 - 2017-09-11 22:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 22:57 - 2017-09-11 22:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.wordgames.com_0.localstorage 2017-09-11 22:57 - 2017-09-11 22:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\http_www.wordgames.com_0.localstorage-journal 2017-09-11 22:57 - 2017-09-11 22:57 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\https_assets.bounceexchange.com_0.localstorage 2017-09-11 22:57 - 2017-09-11 22:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\https_assets.bounceexchange.com_0.localstorage-journal 2017-09-11 23:03 - 2017-09-11 23:03 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 23:03 - 2017-09-11 23:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 14:28 - 2017-09-10 14:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\https_cdn-gl.imrworldwide.com_0.localstorage 2017-09-10 14:28 - 2017-09-10 14:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\https_cdn-gl.imrworldwide.com_0.localstorage-journal 2017-09-10 14:30 - 2017-09-10 14:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\https_connexity.net_0.localstorage 2017-09-10 14:30 - 2017-09-10 14:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 22:59 - 2017-09-11 22:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-11 22:59 - 2017-09-11 22:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-11 22:57 - 2017-09-11 22:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\https_monkey.tunnl.com_0.localstorage 2017-09-11 22:57 - 2017-09-11 22:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\https_monkey.tunnl.com_0.localstorage-journal 2017-09-10 14:27 - 2017-09-10 14:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\https_www.youtube.com_0.localstorage 2017-09-10 14:27 - 2017-09-10 14:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-10 14:27 - 2017-09-10 14:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data 2017-09-10 14:27 - 2017-09-12 03:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash 2017-09-10 14:27 - 2017-09-10 14:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 14:27 - 2017-09-10 14:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 14:27 - 2017-09-10 14:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\B39AHM2E 2017-09-10 14:27 - 2017-09-10 14:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 14:27 - 2017-09-10 14:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 14:27 - 2017-09-10 14:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MBM58KND 2017-09-10 14:27 - 2017-09-12 03:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MBM58KND\cdn.stickyadstv.com 2017-09-10 14:27 - 2017-09-12 03:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MBM58KND\eereader.com 2017-09-10 14:28 - 2017-09-12 03:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MBM58KND\efreader.com 2017-09-10 14:31 - 2017-09-12 03:27 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MBM58KND\efreader.com\analytics.sol 2017-09-10 14:27 - 2017-09-12 03:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MBM58KND\egreader.com 2017-09-10 14:30 - 2017-09-11 23:04 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MBM58KND\egreader.com\analytics.sol 2017-09-10 14:27 - 2017-09-10 14:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MBM58KND\macromedia.com 2017-09-10 14:27 - 2017-09-10 14:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MBM58KND\macromedia.com\support 2017-09-10 14:27 - 2017-09-10 14:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MBM58KND\macromedia.com\support\flashplayer 2017-09-10 14:27 - 2017-09-10 14:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MBM58KND\macromedia.com\support\flashplayer\sys 2017-09-10 14:27 - 2017-09-10 14:28 - 000000464 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MBM58KND\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 14:27 - 2017-09-10 14:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MBM58KND\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 14:27 - 2017-09-10 14:27 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MBM58KND\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 14:27 - 2017-09-10 14:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MBM58KND\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 14:27 - 2017-09-10 14:27 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MBM58KND\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 14:28 - 2017-09-10 14:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MBM58KND\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 14:28 - 2017-09-10 14:28 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MBM58KND\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 14:27 - 2017-09-10 14:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MBM58KND\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 14:27 - 2017-09-10 14:27 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data667\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\MBM58KND\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 21:42 - 2017-09-11 11:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668 2017-09-10 21:42 - 2017-09-11 08:29 - 000287744 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Cookies 2017-09-10 21:42 - 2017-09-11 08:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Cookies-journal 2017-09-10 21:49 - 2017-09-10 21:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\databases 2017-09-10 21:49 - 2017-09-10 21:49 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\databases\Databases.db 2017-09-10 21:49 - 2017-09-10 21:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\databases\Databases.db-journal 2017-09-10 21:42 - 2017-09-11 08:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\File System 2017-09-10 21:42 - 2017-09-11 08:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\File System\Origins 2017-09-10 21:42 - 2017-09-11 08:29 - 000000389 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\File System\Origins\000003.log 2017-09-11 08:28 - 2017-09-11 08:28 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\File System\Origins\000004.ldb 2017-09-11 08:29 - 2017-09-11 08:29 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\File System\Origins\000005.ldb 2017-09-10 21:42 - 2017-09-10 21:42 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\File System\Origins\CURRENT 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\File System\Origins\LOCK 2017-09-10 21:42 - 2017-09-11 08:29 - 000000744 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\File System\Origins\LOG 2017-09-10 21:42 - 2017-09-11 08:25 - 000000953 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\File System\Origins\LOG.old 2017-09-10 21:42 - 2017-09-10 21:42 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\File System\Origins\MANIFEST-000001 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\File System\Origins\lost 2017-09-10 21:49 - 2017-09-11 08:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\IndexedDB 2017-09-11 08:24 - 2017-09-11 08:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\IndexedDB\http_www.crash.net_0.indexeddb.leveldb 2017-09-11 08:24 - 2017-09-11 08:24 - 000000176 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\IndexedDB\http_www.crash.net_0.indexeddb.leveldb\000003.log 2017-09-11 08:24 - 2017-09-11 08:24 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\IndexedDB\http_www.crash.net_0.indexeddb.leveldb\CURRENT 2017-09-11 08:24 - 2017-09-11 08:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\IndexedDB\http_www.crash.net_0.indexeddb.leveldb\LOCK 2017-09-11 08:24 - 2017-09-11 08:24 - 000000156 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\IndexedDB\http_www.crash.net_0.indexeddb.leveldb\LOG 2017-09-11 08:24 - 2017-09-11 08:24 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\IndexedDB\http_www.crash.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 08:24 - 2017-09-11 08:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb 2017-09-11 08:24 - 2017-09-11 08:24 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\000003.log 2017-09-11 08:24 - 2017-09-11 08:24 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\CURRENT 2017-09-11 08:24 - 2017-09-11 08:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\LOCK 2017-09-11 08:24 - 2017-09-11 08:24 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\LOG 2017-09-11 08:24 - 2017-09-11 08:24 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 21:49 - 2017-09-10 21:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\IndexedDB\http_www.investors.com_0.indexeddb.leveldb 2017-09-10 21:49 - 2017-09-10 21:49 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\IndexedDB\http_www.investors.com_0.indexeddb.leveldb\000003.log 2017-09-10 21:49 - 2017-09-10 21:49 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\IndexedDB\http_www.investors.com_0.indexeddb.leveldb\CURRENT 2017-09-10 21:49 - 2017-09-10 21:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\IndexedDB\http_www.investors.com_0.indexeddb.leveldb\LOCK 2017-09-10 21:49 - 2017-09-10 21:49 - 000000160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\IndexedDB\http_www.investors.com_0.indexeddb.leveldb\LOG 2017-09-10 21:49 - 2017-09-10 21:49 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\IndexedDB\http_www.investors.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 21:42 - 2017-09-11 08:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage 2017-09-11 01:10 - 2017-09-11 01:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_allrecipes.com_0.localstorage 2017-09-11 01:10 - 2017-09-11 01:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-11 01:09 - 2017-09-11 01:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-11 01:09 - 2017-09-11 01:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-10 21:44 - 2017-09-10 21:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 21:44 - 2017-09-10 21:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 01:04 - 2017-09-11 01:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 01:04 - 2017-09-11 01:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 21:45 - 2017-09-10 21:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_connexity.net_0.localstorage 2017-09-10 21:45 - 2017-09-10 21:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 21:42 - 2017-09-10 21:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-11 08:21 - 2017-09-11 08:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 08:21 - 2017-09-11 08:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 01:09 - 2017-09-11 08:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-11 01:09 - 2017-09-11 08:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-10 21:44 - 2017-09-10 21:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 21:44 - 2017-09-10 21:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 21:46 - 2017-09-10 21:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.complex.com_0.localstorage 2017-09-10 21:46 - 2017-09-10 21:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-11 08:24 - 2017-09-11 08:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.crash.net_0.localstorage 2017-09-11 08:24 - 2017-09-11 08:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-11 08:21 - 2017-09-11 08:22 - 000008192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.detroitnews.com_0.localstorage 2017-09-11 08:21 - 2017-09-11 08:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.detroitnews.com_0.localstorage-journal 2017-09-10 21:46 - 2017-09-10 21:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-10 21:46 - 2017-09-10 21:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-11 01:08 - 2017-09-11 01:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-11 01:08 - 2017-09-11 01:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-11 01:04 - 2017-09-11 01:05 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.fox5vegas.com_0.localstorage 2017-09-11 01:04 - 2017-09-11 01:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.fox5vegas.com_0.localstorage-journal 2017-09-10 21:45 - 2017-09-11 01:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.innerself.com_0.localstorage 2017-09-10 21:45 - 2017-09-11 01:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.innerself.com_0.localstorage-journal 2017-09-10 21:48 - 2017-09-10 21:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.instyle.com_0.localstorage 2017-09-10 21:48 - 2017-09-10 21:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-10 21:44 - 2017-09-11 08:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 21:44 - 2017-09-11 08:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 21:47 - 2017-09-10 21:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.investors.com_0.localstorage 2017-09-10 21:47 - 2017-09-10 21:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.investors.com_0.localstorage-journal 2017-09-11 01:12 - 2017-09-11 01:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.latimes.com_0.localstorage 2017-09-11 01:12 - 2017-09-11 01:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-11 01:07 - 2017-09-11 01:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 01:07 - 2017-09-11 01:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-11 01:11 - 2017-09-11 01:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 01:11 - 2017-09-11 01:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 21:45 - 2017-09-10 21:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-10 21:45 - 2017-09-10 21:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-11 08:26 - 2017-09-11 08:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.reuters.com_0.localstorage 2017-09-11 08:26 - 2017-09-11 08:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-10 21:42 - 2017-09-10 21:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_a.zdbb.net_0.localstorage 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_a.zdbb.net_0.localstorage-journal 2017-09-10 21:48 - 2017-09-10 21:48 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 21:48 - 2017-09-10 21:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 21:45 - 2017-09-10 21:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_connexity.net_0.localstorage 2017-09-10 21:45 - 2017-09-10 21:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 21:42 - 2017-09-11 08:21 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 21:42 - 2017-09-11 08:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 08:21 - 2017-09-11 08:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_embed.sendtonews.com_0.localstorage 2017-09-11 08:21 - 2017-09-11 08:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_embed.sendtonews.com_0.localstorage-journal 2017-09-11 08:21 - 2017-09-11 08:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_hades.srvtrck.com_0.localstorage 2017-09-11 08:21 - 2017-09-11 08:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_hades.srvtrck.com_0.localstorage-journal 2017-09-11 01:10 - 2017-09-11 01:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_player.mediabong.net_0.localstorage 2017-09-11 01:10 - 2017-09-11 01:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_player.mediabong.net_0.localstorage-journal 2017-09-10 21:42 - 2017-09-10 21:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 21:42 - 2017-09-11 08:21 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 21:42 - 2017-09-11 08:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 08:21 - 2017-09-11 08:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_sv.hotels.com_0.localstorage 2017-09-11 08:21 - 2017-09-11 08:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_sv.hotels.com_0.localstorage-journal 2017-09-11 01:04 - 2017-09-11 01:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_www.adaware.com_0.localstorage 2017-09-11 01:04 - 2017-09-11 01:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_www.adaware.com_0.localstorage-journal 2017-09-11 08:21 - 2017-09-11 08:22 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_www.hotels.com_0.localstorage 2017-09-11 08:21 - 2017-09-11 08:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_www.hotels.com_0.localstorage-journal 2017-09-10 21:42 - 2017-09-10 21:42 - 000014336 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_www.myperfectresume.com_0.localstorage 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_www.myperfectresume.com_0.localstorage-journal 2017-09-10 21:42 - 2017-09-10 21:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_www.resumerabbit.com_0.localstorage 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_www.resumerabbit.com_0.localstorage-journal 2017-09-10 21:42 - 2017-09-10 21:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_www.whattoexpect.com_0.localstorage 2017-09-10 21:42 - 2017-09-10 21:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Local Storage\https_www.whattoexpect.com_0.localstorage-journal 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data 2017-09-10 21:42 - 2017-09-11 08:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\TVJPKFQY 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 21:42 - 2017-09-11 08:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY 2017-09-10 21:42 - 2017-09-11 08:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\cdn.stickyadstv.com 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\cdncache-a.akamaihd.net 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\cdncache-a.akamaihd.net\items 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 21:42 - 2017-09-11 08:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 21:42 - 2017-09-11 08:24 - 000000580 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 21:42 - 2017-09-11 08:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\eereader.com 2017-09-11 08:26 - 2017-09-11 08:26 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\eereader.com\analytics.sol 2017-09-10 21:44 - 2017-09-11 08:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\efreader.com 2017-09-10 21:46 - 2017-09-11 08:30 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\efreader.com\analytics.sol 2017-09-10 21:42 - 2017-09-11 08:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\egreader.com 2017-09-11 01:07 - 2017-09-11 08:26 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\egreader.com\analytics.sol 2017-09-11 08:25 - 2017-09-11 08:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\inread.anyclip.com 2017-09-11 08:25 - 2017-09-11 08:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\inread.anyclip.com\ac# 2017-09-11 08:25 - 2017-09-11 08:25 - 000000473 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\macromedia.com 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\macromedia.com\support 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\macromedia.com\support\flashplayer 2017-09-10 21:42 - 2017-09-11 08:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\macromedia.com\support\flashplayer\sys 2017-09-10 21:42 - 2017-09-11 08:25 - 000000532 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 21:42 - 2017-09-10 21:42 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 21:42 - 2017-09-10 21:42 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 21:42 - 2017-09-10 21:42 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 21:44 - 2017-09-10 21:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 21:44 - 2017-09-10 21:44 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 21:42 - 2017-09-10 21:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 21:42 - 2017-09-10 21:42 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 08:25 - 2017-09-11 08:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 08:25 - 2017-09-11 08:25 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-11 08:21 - 2017-09-11 08:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\macromedia.com\support\flashplayer\sys\#www.cdn-net.com 2017-09-11 08:21 - 2017-09-11 08:21 - 000000085 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\macromedia.com\support\flashplayer\sys\#www.cdn-net.com\settings.sol 2017-09-11 08:21 - 2017-09-11 08:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\www.cdn-net.com 2017-09-11 08:21 - 2017-09-11 08:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\www.cdn-net.com\s.swf 2017-09-11 08:21 - 2017-09-11 08:21 - 000000054 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data668\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GYZZ8PPY\www.cdn-net.com\s.swf\_cc.sol 2017-09-11 01:14 - 2017-09-12 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669 2017-09-11 01:14 - 2017-09-12 05:29 - 000342016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Cookies 2017-09-11 01:14 - 2017-09-12 05:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Cookies-journal 2017-09-11 07:52 - 2017-09-11 07:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\databases 2017-09-11 07:52 - 2017-09-11 07:52 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\databases\Databases.db 2017-09-11 07:52 - 2017-09-11 07:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\databases\Databases.db-journal 2017-09-11 01:16 - 2017-09-12 05:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System 2017-09-11 01:16 - 2017-09-11 01:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\000 2017-09-11 01:16 - 2017-09-11 07:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\000\t 2017-09-11 07:52 - 2017-09-11 07:52 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\000\t\.usage 2017-09-11 07:52 - 2017-09-11 07:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\000\t\Paths 2017-09-11 07:52 - 2017-09-11 07:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\000\t\Paths\000003.log 2017-09-11 07:52 - 2017-09-11 07:52 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\000\t\Paths\CURRENT 2017-09-11 07:52 - 2017-09-11 07:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\000\t\Paths\LOCK 2017-09-11 07:52 - 2017-09-11 07:52 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\000\t\Paths\LOG 2017-09-11 07:52 - 2017-09-11 07:52 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\000\t\Paths\MANIFEST-000001 2017-09-11 07:51 - 2017-09-11 07:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\001 2017-09-11 07:51 - 2017-09-11 07:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\001\t 2017-09-11 07:52 - 2017-09-11 07:52 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\001\t\.usage 2017-09-11 07:52 - 2017-09-11 07:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\001\t\Paths 2017-09-11 07:52 - 2017-09-11 07:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\001\t\Paths\000003.log 2017-09-11 07:52 - 2017-09-11 07:52 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\001\t\Paths\CURRENT 2017-09-11 07:52 - 2017-09-11 07:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\001\t\Paths\LOCK 2017-09-11 07:52 - 2017-09-11 07:52 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\001\t\Paths\LOG 2017-09-11 07:52 - 2017-09-11 07:52 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\001\t\Paths\MANIFEST-000001 2017-09-11 10:36 - 2017-09-11 10:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\002 2017-09-11 10:36 - 2017-09-11 10:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\002\t 2017-09-11 10:36 - 2017-09-11 10:36 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\002\t\.usage 2017-09-11 10:36 - 2017-09-11 10:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\002\t\Paths 2017-09-11 10:36 - 2017-09-11 10:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\002\t\Paths\000003.log 2017-09-11 10:36 - 2017-09-11 10:36 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\002\t\Paths\CURRENT 2017-09-11 10:36 - 2017-09-11 10:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\002\t\Paths\LOCK 2017-09-11 10:36 - 2017-09-11 10:36 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\002\t\Paths\LOG 2017-09-11 10:36 - 2017-09-11 10:36 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\002\t\Paths\MANIFEST-000001 2017-09-12 05:26 - 2017-09-12 05:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\003 2017-09-12 05:26 - 2017-09-12 05:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\003\t 2017-09-11 01:16 - 2017-09-12 05:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\Origins 2017-09-11 01:16 - 2017-09-12 05:26 - 000000309 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\Origins\000003.log 2017-09-11 01:16 - 2017-09-11 01:16 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\Origins\CURRENT 2017-09-11 01:16 - 2017-09-11 01:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\Origins\LOCK 2017-09-11 01:16 - 2017-09-12 05:26 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\Origins\LOG 2017-09-11 01:16 - 2017-09-11 10:47 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\Origins\LOG.old 2017-09-11 01:16 - 2017-09-11 01:16 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\File System\Origins\MANIFEST-000001 2017-09-11 07:52 - 2017-09-11 10:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\IndexedDB 2017-09-11 10:36 - 2017-09-11 10:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\IndexedDB\http_www.myrecipes.com_0.indexeddb.leveldb 2017-09-11 10:36 - 2017-09-11 10:36 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\IndexedDB\http_www.myrecipes.com_0.indexeddb.leveldb\000003.log 2017-09-11 10:36 - 2017-09-11 10:36 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\IndexedDB\http_www.myrecipes.com_0.indexeddb.leveldb\CURRENT 2017-09-11 10:36 - 2017-09-11 10:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\IndexedDB\http_www.myrecipes.com_0.indexeddb.leveldb\LOCK 2017-09-11 10:36 - 2017-09-11 10:36 - 000000160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\IndexedDB\http_www.myrecipes.com_0.indexeddb.leveldb\LOG 2017-09-11 10:36 - 2017-09-11 10:36 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\IndexedDB\http_www.myrecipes.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 07:52 - 2017-09-11 07:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\IndexedDB\https_plarium.com_0.indexeddb.leveldb 2017-09-11 07:52 - 2017-09-11 07:52 - 000000174 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\IndexedDB\https_plarium.com_0.indexeddb.leveldb\000003.log 2017-09-11 07:52 - 2017-09-11 07:52 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\IndexedDB\https_plarium.com_0.indexeddb.leveldb\CURRENT 2017-09-11 07:52 - 2017-09-11 07:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\IndexedDB\https_plarium.com_0.indexeddb.leveldb\LOCK 2017-09-11 07:52 - 2017-09-11 07:52 - 000000155 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\IndexedDB\https_plarium.com_0.indexeddb.leveldb\LOG 2017-09-11 07:52 - 2017-09-11 07:52 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\IndexedDB\https_plarium.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 10:33 - 2017-09-11 10:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\IndexedDB\https_www.fandango.com_0.indexeddb.leveldb 2017-09-11 10:33 - 2017-09-11 10:33 - 000222852 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\IndexedDB\https_www.fandango.com_0.indexeddb.leveldb\000003.log 2017-09-11 10:33 - 2017-09-11 10:33 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\IndexedDB\https_www.fandango.com_0.indexeddb.leveldb\CURRENT 2017-09-11 10:33 - 2017-09-11 10:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\IndexedDB\https_www.fandango.com_0.indexeddb.leveldb\LOCK 2017-09-11 10:33 - 2017-09-11 10:33 - 000000160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\IndexedDB\https_www.fandango.com_0.indexeddb.leveldb\LOG 2017-09-11 10:33 - 2017-09-11 10:33 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\IndexedDB\https_www.fandango.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 01:14 - 2017-09-12 05:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage 2017-09-11 10:48 - 2017-09-11 10:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_allrecipes.com_0.localstorage 2017-09-11 10:48 - 2017-09-11 10:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-12 05:28 - 2017-09-12 05:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-12 05:28 - 2017-09-12 05:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-11 07:57 - 2017-09-11 07:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 07:57 - 2017-09-11 07:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 10:36 - 2017-09-11 10:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 10:36 - 2017-09-11 10:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-11 01:18 - 2017-09-11 01:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_connexity.net_0.localstorage 2017-09-11 01:18 - 2017-09-11 01:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 01:21 - 2017-09-11 01:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_jobs.mashable.com_0.localstorage 2017-09-11 01:21 - 2017-09-11 01:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_jobs.mashable.com_0.localstorage-journal 2017-09-11 07:57 - 2017-09-11 10:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_mashable.com_0.localstorage 2017-09-11 07:57 - 2017-09-11 10:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_mashable.com_0.localstorage-journal 2017-09-11 07:53 - 2017-09-12 05:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_nflfilms.nfl.com_0.localstorage 2017-09-11 07:53 - 2017-09-12 05:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_nflfilms.nfl.com_0.localstorage-journal 2017-09-11 01:15 - 2017-09-11 01:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 01:15 - 2017-09-11 01:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 10:47 - 2017-09-11 10:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-11 10:47 - 2017-09-11 10:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-11 10:36 - 2017-09-11 10:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_tpc.googlesyndication.com_0.localstorage 2017-09-11 10:36 - 2017-09-11 10:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_tpc.googlesyndication.com_0.localstorage-journal 2017-09-11 10:37 - 2017-09-11 10:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.bendbulletin.com_0.localstorage 2017-09-11 10:37 - 2017-09-11 10:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.bendbulletin.com_0.localstorage-journal 2017-09-11 07:57 - 2017-09-11 07:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.bhg.com_0.localstorage 2017-09-11 07:57 - 2017-09-11 07:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.bhg.com_0.localstorage-journal 2017-09-11 01:17 - 2017-09-11 01:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 01:17 - 2017-09-11 01:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 07:56 - 2017-09-11 07:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.complex.com_0.localstorage 2017-09-11 07:56 - 2017-09-11 07:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-11 01:19 - 2017-09-12 05:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.crash.net_0.localstorage 2017-09-11 01:19 - 2017-09-12 05:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-11 07:55 - 2017-09-11 07:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-11 07:55 - 2017-09-11 07:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-11 10:47 - 2017-09-11 10:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.espnfc.us_0.localstorage 2017-09-11 10:47 - 2017-09-11 10:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.espnfc.us_0.localstorage-journal 2017-09-11 07:51 - 2017-09-11 07:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.gamepedia.com_0.localstorage 2017-09-11 07:51 - 2017-09-11 07:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.gamepedia.com_0.localstorage-journal 2017-09-11 10:38 - 2017-09-11 10:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.history.com_0.localstorage 2017-09-11 10:38 - 2017-09-11 10:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.history.com_0.localstorage-journal 2017-09-11 07:54 - 2017-09-11 10:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.innerself.com_0.localstorage 2017-09-11 07:54 - 2017-09-11 10:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.innerself.com_0.localstorage-journal 2017-09-11 01:18 - 2017-09-11 01:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.insurancejournal.tv_0.localstorage 2017-09-11 01:18 - 2017-09-11 01:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.insurancejournal.tv_0.localstorage-journal 2017-09-11 01:17 - 2017-09-12 05:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 01:17 - 2017-09-12 05:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 10:45 - 2017-09-11 10:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.islandpacket.com_0.localstorage 2017-09-11 10:45 - 2017-09-11 10:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.islandpacket.com_0.localstorage-journal 2017-09-12 05:24 - 2017-09-12 05:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.latimes.com_0.localstorage 2017-09-12 05:24 - 2017-09-12 05:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-11 10:45 - 2017-09-11 10:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-11 10:45 - 2017-09-11 10:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-12 05:27 - 2017-09-12 05:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.macworld.com_0.localstorage 2017-09-12 05:27 - 2017-09-12 05:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-12 05:24 - 2017-09-12 05:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-12 05:24 - 2017-09-12 05:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-11 10:36 - 2017-09-11 10:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-11 10:36 - 2017-09-11 10:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-11 01:17 - 2017-09-11 10:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 01:17 - 2017-09-11 10:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 07:54 - 2017-09-11 07:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.parents.com_0.localstorage 2017-09-11 07:54 - 2017-09-11 07:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-11 01:18 - 2017-09-11 01:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-11 01:18 - 2017-09-11 01:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-11 10:43 - 2017-09-11 10:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.rosettastone.com_0.localstorage 2017-09-11 10:43 - 2017-09-11 10:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.rosettastone.com_0.localstorage-journal 2017-09-12 05:26 - 2017-09-12 05:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.washingtonmonthly.com_0.localstorage 2017-09-12 05:26 - 2017-09-12 05:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.washingtonmonthly.com_0.localstorage-journal 2017-09-11 01:14 - 2017-09-11 01:16 - 000009216 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.wikihow.com_0.localstorage 2017-09-11 01:14 - 2017-09-11 01:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.wikihow.com_0.localstorage-journal 2017-09-11 10:43 - 2017-09-11 10:44 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.worldlifestyle.com_0.localstorage 2017-09-11 10:43 - 2017-09-11 10:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\http_www.worldlifestyle.com_0.localstorage-journal 2017-09-11 10:43 - 2017-09-11 10:44 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_assets.bounceexchange.com_0.localstorage 2017-09-11 10:43 - 2017-09-11 10:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_assets.bounceexchange.com_0.localstorage-journal 2017-09-11 07:51 - 2017-09-11 07:51 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 07:51 - 2017-09-11 07:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 10:33 - 2017-09-11 10:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_cdn.krxd.net_0.localstorage 2017-09-11 10:33 - 2017-09-11 10:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_cdn.krxd.net_0.localstorage-journal 2017-09-11 01:18 - 2017-09-11 01:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_connexity.net_0.localstorage 2017-09-11 01:18 - 2017-09-11 01:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 01:15 - 2017-09-11 10:43 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 01:15 - 2017-09-11 10:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-12 05:21 - 2017-09-12 05:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_disqus.com_0.localstorage 2017-09-12 05:21 - 2017-09-12 05:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_disqus.com_0.localstorage-journal 2017-09-11 07:52 - 2017-09-11 07:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_hades.srvtrck.com_0.localstorage 2017-09-11 07:52 - 2017-09-11 07:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_hades.srvtrck.com_0.localstorage-journal 2017-09-11 07:52 - 2017-09-11 07:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_plarium.com_0.localstorage 2017-09-11 07:52 - 2017-09-11 07:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_plarium.com_0.localstorage-journal 2017-09-11 01:22 - 2017-09-11 01:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_player.mediabong.net_0.localstorage 2017-09-11 01:22 - 2017-09-11 01:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_player.mediabong.net_0.localstorage-journal 2017-09-11 01:15 - 2017-09-11 07:52 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 01:15 - 2017-09-11 07:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 01:15 - 2017-09-11 10:43 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 01:15 - 2017-09-11 10:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 01:15 - 2017-09-11 01:16 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_tie.app.247-inc.net_0.localstorage 2017-09-11 01:15 - 2017-09-11 01:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_tie.app.247-inc.net_0.localstorage-journal 2017-09-11 01:15 - 2017-09-11 01:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_www.cashnetusa.com_0.localstorage 2017-09-11 01:15 - 2017-09-11 01:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_www.cashnetusa.com_0.localstorage-journal 2017-09-11 10:33 - 2017-09-11 10:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_www.crutchfield.com_0.localstorage 2017-09-11 10:33 - 2017-09-11 10:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_www.crutchfield.com_0.localstorage-journal 2017-09-11 10:33 - 2017-09-11 10:34 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_www.fandango.com_0.localstorage 2017-09-11 10:33 - 2017-09-11 10:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_www.fandango.com_0.localstorage-journal 2017-09-11 07:51 - 2017-09-11 07:53 - 000012288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_www.livingsocial.com_0.localstorage 2017-09-11 07:51 - 2017-09-11 07:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_www.livingsocial.com_0.localstorage-journal 2017-09-12 05:22 - 2017-09-12 05:23 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_www.sportchek.ca_0.localstorage 2017-09-12 05:22 - 2017-09-12 05:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_www.sportchek.ca_0.localstorage-journal 2017-09-12 05:21 - 2017-09-12 05:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_www.thisisanfield.com_0.localstorage 2017-09-12 05:21 - 2017-09-12 05:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Local Storage\https_www.thisisanfield.com_0.localstorage-journal 2017-09-11 01:14 - 2017-09-11 01:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data 2017-09-11 01:14 - 2017-09-12 05:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash 2017-09-11 01:14 - 2017-09-11 01:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 01:14 - 2017-09-11 01:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 01:14 - 2017-09-11 01:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\4B93Z4FZ 2017-09-11 01:14 - 2017-09-11 01:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 01:14 - 2017-09-11 01:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 01:14 - 2017-09-11 07:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY 2017-09-11 07:53 - 2017-09-11 07:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\cdn.dashbid.io 2017-09-11 07:53 - 2017-09-11 07:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\cdn.dashbid.io\prod 2017-09-11 07:53 - 2017-09-11 10:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-11 07:53 - 2017-09-11 10:40 - 000000145 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-11 01:15 - 2017-09-12 05:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\cdn.stickyadstv.com 2017-09-11 01:14 - 2017-09-11 01:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\cdncache-a.akamaihd.net 2017-09-11 01:14 - 2017-09-11 01:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\cdncache-a.akamaihd.net\items 2017-09-11 01:14 - 2017-09-11 01:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 01:14 - 2017-09-11 10:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 01:14 - 2017-09-11 10:45 - 000000475 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 01:14 - 2017-09-12 05:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\eereader.com 2017-09-11 10:47 - 2017-09-12 05:26 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\eereader.com\analytics.sol 2017-09-11 01:16 - 2017-09-12 05:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\efreader.com 2017-09-11 01:17 - 2017-09-11 10:49 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\efreader.com\analytics.sol 2017-09-11 01:15 - 2017-09-12 05:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\egreader.com 2017-09-11 01:14 - 2017-09-11 01:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\macromedia.com 2017-09-11 01:14 - 2017-09-11 01:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\macromedia.com\support 2017-09-11 01:14 - 2017-09-11 01:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\macromedia.com\support\flashplayer 2017-09-11 01:14 - 2017-09-11 07:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\macromedia.com\support\flashplayer\sys 2017-09-11 01:14 - 2017-09-11 07:53 - 000000536 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 07:53 - 2017-09-11 07:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-11 07:53 - 2017-09-11 07:53 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-11 01:15 - 2017-09-11 01:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 01:15 - 2017-09-11 01:15 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 01:14 - 2017-09-11 01:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 01:14 - 2017-09-11 01:14 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 01:14 - 2017-09-11 01:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 01:14 - 2017-09-11 01:14 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 01:16 - 2017-09-11 01:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 01:16 - 2017-09-11 01:16 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 01:15 - 2017-09-11 01:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 01:15 - 2017-09-11 01:15 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 01:16 - 2017-09-11 01:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com 2017-09-11 01:16 - 2017-09-11 01:16 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com\settings.sol 2017-09-11 01:16 - 2017-09-11 01:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\objects.tremormedia.com 2017-09-11 01:16 - 2017-09-11 01:16 - 000000073 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data669\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5X3KYRYY\objects.tremormedia.com\com.quantserve.sol 2017-09-11 06:47 - 2017-09-11 17:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670 2017-09-11 06:47 - 2017-09-11 15:51 - 000141312 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Cookies 2017-09-11 06:47 - 2017-09-11 15:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Cookies-journal 2017-09-11 06:47 - 2017-09-11 06:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\File System 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\File System\000 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\File System\000\t 2017-09-11 06:50 - 2017-09-11 06:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\File System\001 2017-09-11 06:50 - 2017-09-11 06:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\File System\001\t 2017-09-11 06:47 - 2017-09-11 06:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\File System\Origins 2017-09-11 06:47 - 2017-09-11 06:50 - 000000169 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\File System\Origins\000003.log 2017-09-11 06:47 - 2017-09-11 06:47 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\File System\Origins\CURRENT 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\File System\Origins\LOCK 2017-09-11 06:47 - 2017-09-11 06:50 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\File System\Origins\LOG 2017-09-11 06:47 - 2017-09-11 06:47 - 000000128 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\File System\Origins\LOG.old 2017-09-11 06:47 - 2017-09-11 06:47 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\File System\Origins\MANIFEST-000001 2017-09-11 06:47 - 2017-09-11 15:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage 2017-09-11 15:50 - 2017-09-11 15:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-11 15:50 - 2017-09-11 15:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-11 06:47 - 2017-09-11 06:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 06:47 - 2017-09-11 06:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-11 06:47 - 2017-09-11 06:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 15:44 - 2017-09-11 15:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_shop.safeway.com_0.localstorage 2017-09-11 15:44 - 2017-09-11 15:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_shop.safeway.com_0.localstorage-journal 2017-09-11 15:47 - 2017-09-11 15:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-11 15:47 - 2017-09-11 15:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-11 06:49 - 2017-09-11 06:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 06:49 - 2017-09-11 06:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 06:51 - 2017-09-11 06:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.complex.com_0.localstorage 2017-09-11 06:51 - 2017-09-11 06:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-11 06:50 - 2017-09-11 06:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.crash.net_0.localstorage 2017-09-11 06:50 - 2017-09-11 06:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-11 15:47 - 2017-09-11 15:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.foxnews.com_0.localstorage 2017-09-11 15:47 - 2017-09-11 15:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.foxnews.com_0.localstorage-journal 2017-09-11 06:53 - 2017-09-11 06:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.goal.com_0.localstorage 2017-09-11 06:53 - 2017-09-11 06:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.goal.com_0.localstorage-journal 2017-09-11 06:50 - 2017-09-11 06:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.innerself.com_0.localstorage 2017-09-11 06:50 - 2017-09-11 06:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.innerself.com_0.localstorage-journal 2017-09-11 06:49 - 2017-09-11 06:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 06:49 - 2017-09-11 06:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 15:48 - 2017-09-11 15:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.latimes.com_0.localstorage 2017-09-11 15:48 - 2017-09-11 15:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-11 15:46 - 2017-09-11 15:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 15:46 - 2017-09-11 15:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-11 06:50 - 2017-09-11 06:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-11 06:50 - 2017-09-11 06:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-11 06:48 - 2017-09-11 06:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 06:48 - 2017-09-11 06:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 06:47 - 2017-09-11 06:48 - 000008192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.tmz.com_0.localstorage 2017-09-11 06:47 - 2017-09-11 06:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\http_www.tmz.com_0.localstorage-journal 2017-09-11 15:43 - 2017-09-11 15:43 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\https_a8385363.cdn.optimizely.com_0.localstorage 2017-09-11 15:43 - 2017-09-11 15:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\https_a8385363.cdn.optimizely.com_0.localstorage-journal 2017-09-11 06:47 - 2017-09-11 06:47 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 15:43 - 2017-09-11 15:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\https_disqus.com_0.localstorage 2017-09-11 15:43 - 2017-09-11 15:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\https_disqus.com_0.localstorage-journal 2017-09-11 06:47 - 2017-09-11 06:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 15:43 - 2017-09-11 15:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\https_secure-us.imrworldwide.com_0.localstorage 2017-09-11 15:43 - 2017-09-11 15:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\https_secure-us.imrworldwide.com_0.localstorage-journal 2017-09-11 06:47 - 2017-09-11 15:44 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 06:47 - 2017-09-11 15:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 15:43 - 2017-09-11 15:44 - 000012288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\https_www.cbssports.com_0.localstorage 2017-09-11 15:43 - 2017-09-11 15:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\https_www.cbssports.com_0.localstorage-journal 2017-09-11 06:47 - 2017-09-11 06:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\https_www.dermstore.com_0.localstorage 2017-09-11 06:47 - 2017-09-11 06:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Local Storage\https_www.dermstore.com_0.localstorage-journal 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data 2017-09-11 06:47 - 2017-09-11 15:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\RU6RFHZX 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 06:47 - 2017-09-11 06:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN 2017-09-11 06:47 - 2017-09-11 15:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\cdn.stickyadstv.com 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\cdncache-a.akamaihd.net 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\cdncache-a.akamaihd.net\items 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 06:47 - 2017-09-11 15:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 06:47 - 2017-09-11 15:43 - 000000476 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 06:47 - 2017-09-11 15:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\eereader.com 2017-09-11 06:48 - 2017-09-11 15:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\efreader.com 2017-09-11 06:47 - 2017-09-11 15:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\egreader.com 2017-09-11 06:50 - 2017-09-11 06:54 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\egreader.com\analytics.sol 2017-09-11 06:48 - 2017-09-11 06:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\inread.anyclip.com 2017-09-11 06:48 - 2017-09-11 06:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\inread.anyclip.com\ac# 2017-09-11 06:48 - 2017-09-11 06:48 - 000000615 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\macromedia.com 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\macromedia.com\support 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\macromedia.com\support\flashplayer 2017-09-11 06:47 - 2017-09-11 06:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\macromedia.com\support\flashplayer\sys 2017-09-11 06:47 - 2017-09-11 06:48 - 000000513 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 06:47 - 2017-09-11 06:47 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 06:47 - 2017-09-11 06:47 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 06:47 - 2017-09-11 06:47 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 06:48 - 2017-09-11 06:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 06:48 - 2017-09-11 06:48 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 06:47 - 2017-09-11 06:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 06:47 - 2017-09-11 06:47 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 06:48 - 2017-09-11 06:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 06:48 - 2017-09-11 06:48 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data670\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XCMPPAMN\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-10 20:32 - 2017-09-11 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671 2017-09-10 20:32 - 2017-09-11 13:37 - 000333824 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Cookies 2017-09-10 20:32 - 2017-09-11 13:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Cookies-journal 2017-09-10 20:35 - 2017-09-11 13:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\File System 2017-09-10 20:35 - 2017-09-10 20:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\File System\000 2017-09-10 20:35 - 2017-09-10 20:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\File System\000\t 2017-09-10 21:12 - 2017-09-10 21:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\File System\001 2017-09-10 21:12 - 2017-09-10 21:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\File System\001\t 2017-09-10 21:12 - 2017-09-10 21:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\File System\002 2017-09-10 21:12 - 2017-09-10 21:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\File System\002\t 2017-09-10 21:14 - 2017-09-10 21:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\File System\003 2017-09-10 21:14 - 2017-09-10 21:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\File System\003\t 2017-09-11 13:35 - 2017-09-11 13:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\File System\004 2017-09-11 13:35 - 2017-09-11 13:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\File System\004\t 2017-09-10 20:35 - 2017-09-11 13:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\File System\Origins 2017-09-10 20:35 - 2017-09-11 13:37 - 000000377 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\File System\Origins\000003.log 2017-09-10 20:35 - 2017-09-10 20:35 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\File System\Origins\CURRENT 2017-09-10 20:35 - 2017-09-10 20:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\File System\Origins\LOCK 2017-09-10 20:35 - 2017-09-11 13:35 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\File System\Origins\LOG 2017-09-10 20:35 - 2017-09-10 21:15 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\File System\Origins\LOG.old 2017-09-10 20:35 - 2017-09-10 20:35 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\File System\Origins\MANIFEST-000001 2017-09-10 20:32 - 2017-09-11 13:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage 2017-09-10 21:13 - 2017-09-10 21:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 21:13 - 2017-09-10 21:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 21:15 - 2017-09-10 21:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 21:15 - 2017-09-10 21:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 20:35 - 2017-09-10 20:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_connexity.net_0.localstorage 2017-09-10 20:35 - 2017-09-10 20:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 20:38 - 2017-09-10 20:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_jobs.mashable.com_0.localstorage 2017-09-10 20:38 - 2017-09-10 20:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_jobs.mashable.com_0.localstorage-journal 2017-09-11 13:35 - 2017-09-11 13:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_mashable.com_0.localstorage 2017-09-11 13:35 - 2017-09-11 13:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_mashable.com_0.localstorage-journal 2017-09-10 20:37 - 2017-09-10 20:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_ottawacitizen.com_0.localstorage 2017-09-10 20:37 - 2017-09-10 20:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_ottawacitizen.com_0.localstorage-journal 2017-09-10 21:12 - 2017-09-10 21:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 21:12 - 2017-09-10 21:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 20:32 - 2017-09-10 21:13 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 20:32 - 2017-09-10 21:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 21:15 - 2017-09-10 21:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_tpc.googlesyndication.com_0.localstorage 2017-09-10 21:15 - 2017-09-10 21:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_tpc.googlesyndication.com_0.localstorage-journal 2017-09-11 13:30 - 2017-09-11 13:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_travelwireasia.com_0.localstorage 2017-09-11 13:30 - 2017-09-11 13:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_travelwireasia.com_0.localstorage-journal 2017-09-10 21:16 - 2017-09-10 21:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-10 21:16 - 2017-09-10 21:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-10 20:36 - 2017-09-10 20:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.blessyouboys.com_0.localstorage 2017-09-10 20:36 - 2017-09-10 20:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.blessyouboys.com_0.localstorage-journal 2017-09-10 20:32 - 2017-09-11 13:31 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.brides.com_0.localstorage 2017-09-10 20:32 - 2017-09-11 13:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.brides.com_0.localstorage-journal 2017-09-10 20:34 - 2017-09-10 20:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 20:34 - 2017-09-10 20:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 21:12 - 2017-09-10 21:13 - 000100352 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.cleveland.com_0.localstorage 2017-09-10 21:12 - 2017-09-10 21:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.cleveland.com_0.localstorage-journal 2017-09-10 21:15 - 2017-09-10 21:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.crash.net_0.localstorage 2017-09-10 21:15 - 2017-09-10 21:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-10 20:35 - 2017-09-10 20:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-10 20:35 - 2017-09-10 20:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-10 21:17 - 2017-09-10 21:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.fandango.com_0.localstorage 2017-09-10 21:17 - 2017-09-10 21:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.fandango.com_0.localstorage-journal 2017-09-11 13:34 - 2017-09-11 13:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.food.com_0.localstorage 2017-09-11 13:34 - 2017-09-11 13:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-10 21:15 - 2017-09-10 21:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 21:15 - 2017-09-10 21:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 13:33 - 2017-09-11 13:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.islandpacket.com_0.localstorage 2017-09-11 13:33 - 2017-09-11 13:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.islandpacket.com_0.localstorage-journal 2017-09-10 20:35 - 2017-09-10 20:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.latimes.com_0.localstorage 2017-09-10 20:35 - 2017-09-10 20:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-10 21:12 - 2017-09-10 21:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.lisaleonard.com_0.localstorage 2017-09-10 21:12 - 2017-09-10 21:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.lisaleonard.com_0.localstorage-journal 2017-09-10 21:14 - 2017-09-10 21:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-10 21:14 - 2017-09-10 21:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-10 20:34 - 2017-09-10 20:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 20:34 - 2017-09-10 20:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 13:35 - 2017-09-11 13:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.qvc.com_0.localstorage 2017-09-11 13:35 - 2017-09-11 13:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.qvc.com_0.localstorage-journal 2017-09-10 20:35 - 2017-09-10 20:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.reuters.com_0.localstorage 2017-09-10 20:35 - 2017-09-10 20:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-10 20:35 - 2017-09-10 20:35 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 20:35 - 2017-09-10 20:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 20:35 - 2017-09-10 20:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\https_connexity.net_0.localstorage 2017-09-10 20:35 - 2017-09-10 20:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 21:12 - 2017-09-11 13:31 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 21:12 - 2017-09-11 13:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 13:32 - 2017-09-11 13:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-11 13:32 - 2017-09-11 13:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-11 13:30 - 2017-09-11 13:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\https_hades.srvtrck.com_0.localstorage 2017-09-11 13:30 - 2017-09-11 13:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\https_hades.srvtrck.com_0.localstorage-journal 2017-09-10 20:32 - 2017-09-10 20:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 20:32 - 2017-09-10 20:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 20:32 - 2017-09-11 13:31 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 20:32 - 2017-09-11 13:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 13:30 - 2017-09-11 13:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\https_www.blackhalo.com_0.localstorage 2017-09-11 13:30 - 2017-09-11 13:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\https_www.blackhalo.com_0.localstorage-journal 2017-09-10 20:32 - 2017-09-10 20:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\https_www.homewetbar.com_0.localstorage 2017-09-10 20:32 - 2017-09-10 20:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\https_www.homewetbar.com_0.localstorage-journal 2017-09-10 20:34 - 2017-09-10 21:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\https_www.youtube.com_0.localstorage 2017-09-10 20:34 - 2017-09-10 21:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-10 20:32 - 2017-09-10 20:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data 2017-09-10 20:32 - 2017-09-11 13:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash 2017-09-10 20:32 - 2017-09-10 20:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 20:32 - 2017-09-10 20:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 20:32 - 2017-09-10 20:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\3CWUH9RE 2017-09-10 20:32 - 2017-09-10 20:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 20:32 - 2017-09-10 20:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 20:32 - 2017-09-10 21:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX 2017-09-10 20:33 - 2017-09-11 13:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\cdn.stickyadstv.com 2017-09-10 20:32 - 2017-09-10 20:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\cdncache-a.akamaihd.net 2017-09-10 20:32 - 2017-09-10 20:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\cdncache-a.akamaihd.net\items 2017-09-10 20:32 - 2017-09-10 20:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 20:32 - 2017-09-11 13:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 20:32 - 2017-09-11 13:34 - 000000542 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 20:32 - 2017-09-11 13:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\eereader.com 2017-09-10 21:13 - 2017-09-10 21:13 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\eereader.com\analytics.sol 2017-09-10 20:33 - 2017-09-11 13:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\efreader.com 2017-09-11 13:37 - 2017-09-11 13:37 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\efreader.com\analytics.sol 2017-09-10 20:32 - 2017-09-11 13:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\egreader.com 2017-09-10 20:32 - 2017-09-10 20:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\macromedia.com 2017-09-10 20:32 - 2017-09-10 20:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\macromedia.com\support 2017-09-10 20:32 - 2017-09-10 20:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\macromedia.com\support\flashplayer 2017-09-10 20:32 - 2017-09-10 21:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\macromedia.com\support\flashplayer\sys 2017-09-10 20:32 - 2017-09-10 21:12 - 000000518 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 20:33 - 2017-09-10 20:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 20:33 - 2017-09-10 20:33 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 20:32 - 2017-09-10 20:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 20:32 - 2017-09-10 20:32 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 20:32 - 2017-09-10 20:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 20:32 - 2017-09-10 20:32 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 20:33 - 2017-09-10 20:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 20:33 - 2017-09-10 20:33 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 20:32 - 2017-09-10 20:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 20:32 - 2017-09-10 20:32 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 21:12 - 2017-09-10 21:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com 2017-09-10 21:12 - 2017-09-10 21:12 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com\settings.sol 2017-09-10 21:12 - 2017-09-10 21:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\objects.tremormedia.com 2017-09-10 21:12 - 2017-09-10 21:12 - 000000072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data671\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JCBFKTJX\objects.tremormedia.com\com.quantserve.sol 2017-09-09 23:54 - 2017-09-12 02:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672 2017-09-09 23:54 - 2017-09-12 01:45 - 000328704 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Cookies 2017-09-09 23:54 - 2017-09-12 01:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Cookies-journal 2017-09-12 01:40 - 2017-09-12 01:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\databases 2017-09-12 01:40 - 2017-09-12 01:40 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\databases\Databases.db 2017-09-12 01:40 - 2017-09-12 01:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\databases\Databases.db-journal 2017-09-09 23:54 - 2017-09-12 01:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System 2017-09-11 16:20 - 2017-09-11 16:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\004 2017-09-11 16:20 - 2017-09-12 01:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\004\t 2017-09-12 01:40 - 2017-09-12 01:40 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\004\t\.usage 2017-09-12 01:40 - 2017-09-12 01:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\004\t\Paths 2017-09-12 01:40 - 2017-09-12 01:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\004\t\Paths\000003.log 2017-09-12 01:40 - 2017-09-12 01:40 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\004\t\Paths\CURRENT 2017-09-12 01:40 - 2017-09-12 01:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\004\t\Paths\LOCK 2017-09-12 01:40 - 2017-09-12 01:40 - 000000131 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\004\t\Paths\LOG 2017-09-12 01:40 - 2017-09-12 01:40 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\004\t\Paths\MANIFEST-000001 2017-09-11 19:57 - 2017-09-11 19:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\005 2017-09-11 19:57 - 2017-09-12 01:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\005\t 2017-09-12 01:40 - 2017-09-12 01:40 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\005\t\.usage 2017-09-12 01:40 - 2017-09-12 01:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\005\t\Paths 2017-09-12 01:40 - 2017-09-12 01:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\005\t\Paths\000003.log 2017-09-12 01:40 - 2017-09-12 01:40 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\005\t\Paths\CURRENT 2017-09-12 01:40 - 2017-09-12 01:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\005\t\Paths\LOCK 2017-09-12 01:40 - 2017-09-12 01:40 - 000000131 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\005\t\Paths\LOG 2017-09-12 01:40 - 2017-09-12 01:40 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\005\t\Paths\MANIFEST-000001 2017-09-12 01:38 - 2017-09-12 01:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\006 2017-09-12 01:38 - 2017-09-12 01:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\006\t 2017-09-12 01:40 - 2017-09-12 01:40 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\006\t\.usage 2017-09-12 01:40 - 2017-09-12 01:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\006\t\Paths 2017-09-12 01:40 - 2017-09-12 01:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\006\t\Paths\000003.log 2017-09-12 01:40 - 2017-09-12 01:40 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\006\t\Paths\CURRENT 2017-09-12 01:40 - 2017-09-12 01:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\006\t\Paths\LOCK 2017-09-12 01:40 - 2017-09-12 01:40 - 000000131 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\006\t\Paths\LOG 2017-09-12 01:40 - 2017-09-12 01:40 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\006\t\Paths\MANIFEST-000001 2017-09-09 23:54 - 2017-09-12 01:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\Origins 2017-09-09 23:54 - 2017-09-12 01:39 - 000000527 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\Origins\000003.log 2017-09-09 23:54 - 2017-09-09 23:54 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\Origins\CURRENT 2017-09-09 23:54 - 2017-09-09 23:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\Origins\LOCK 2017-09-09 23:54 - 2017-09-12 01:44 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\Origins\LOG 2017-09-09 23:54 - 2017-09-12 01:40 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\Origins\LOG.old 2017-09-09 23:54 - 2017-09-09 23:54 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\Origins\MANIFEST-000001 2017-09-09 23:59 - 2017-09-09 23:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\File System\Origins\lost 2017-09-12 01:40 - 2017-09-12 01:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\IndexedDB 2017-09-12 01:40 - 2017-09-12 01:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb 2017-09-12 01:40 - 2017-09-12 01:40 - 000000190 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb\000003.log 2017-09-12 01:40 - 2017-09-12 01:40 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb\CURRENT 2017-09-12 01:40 - 2017-09-12 01:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb\LOCK 2017-09-12 01:40 - 2017-09-12 01:40 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb\LOG 2017-09-12 01:40 - 2017-09-12 01:40 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\IndexedDB\http_www.investopedia.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-09 23:54 - 2017-09-12 01:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage 2017-09-11 14:36 - 2017-09-12 01:45 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_allrecipes.com_0.localstorage 2017-09-11 14:36 - 2017-09-12 01:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-09 23:56 - 2017-09-12 01:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-09 23:56 - 2017-09-12 01:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 16:15 - 2017-09-11 16:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_connexity.net_0.localstorage 2017-09-11 16:15 - 2017-09-11 16:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 16:13 - 2017-09-11 16:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 16:13 - 2017-09-11 16:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 14:31 - 2017-09-11 14:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_secure-us.imrworldwide.com_0.localstorage 2017-09-11 14:31 - 2017-09-11 14:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_secure-us.imrworldwide.com_0.localstorage-journal 2017-09-11 16:18 - 2017-09-11 16:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-11 16:18 - 2017-09-11 16:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-12 01:42 - 2017-09-12 01:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.blessyouboys.com_0.localstorage 2017-09-12 01:42 - 2017-09-12 01:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.blessyouboys.com_0.localstorage-journal 2017-09-09 23:58 - 2017-09-11 14:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.bounty.com_0.localstorage 2017-09-09 23:58 - 2017-09-11 14:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.bounty.com_0.localstorage-journal 2017-09-12 01:44 - 2017-09-12 01:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.caranddriver.com_0.localstorage 2017-09-12 01:44 - 2017-09-12 01:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.caranddriver.com_0.localstorage-journal 2017-09-11 20:02 - 2017-09-11 20:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.cartoonnetworkasia.com_0.localstorage 2017-09-11 20:02 - 2017-09-11 20:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.cartoonnetworkasia.com_0.localstorage-journal 2017-09-09 23:56 - 2017-09-09 23:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-09 23:56 - 2017-09-09 23:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 20:01 - 2017-09-11 20:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.complex.com_0.localstorage 2017-09-11 20:01 - 2017-09-11 20:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-11 20:01 - 2017-09-11 20:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.courant.com_0.localstorage 2017-09-11 20:01 - 2017-09-11 20:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-09 23:58 - 2017-09-09 23:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.crash.net_0.localstorage 2017-09-09 23:58 - 2017-09-09 23:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-11 14:34 - 2017-09-11 14:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-11 14:34 - 2017-09-11 14:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-12 01:41 - 2017-09-12 01:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.finecooking.com_0.localstorage 2017-09-12 01:41 - 2017-09-12 01:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.finecooking.com_0.localstorage-journal 2017-09-11 16:18 - 2017-09-11 16:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.food.com_0.localstorage 2017-09-11 16:18 - 2017-09-11 16:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-11 14:30 - 2017-09-11 14:31 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.foxsports.com_0.localstorage 2017-09-11 14:30 - 2017-09-11 14:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.foxsports.com_0.localstorage-journal 2017-09-11 16:13 - 2017-09-11 16:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.gemplers.com_0.localstorage 2017-09-11 16:13 - 2017-09-11 16:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.gemplers.com_0.localstorage-journal 2017-09-11 14:34 - 2017-09-11 14:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-11 14:34 - 2017-09-11 14:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-09 23:57 - 2017-09-09 23:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.instyle.com_0.localstorage 2017-09-09 23:57 - 2017-09-09 23:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 16:15 - 2017-09-12 01:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 16:15 - 2017-09-12 01:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 20:00 - 2017-09-11 20:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.islandpacket.com_0.localstorage 2017-09-11 20:00 - 2017-09-11 20:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.islandpacket.com_0.localstorage-journal 2017-09-09 23:57 - 2017-09-11 16:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-09 23:57 - 2017-09-11 16:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-10 00:00 - 2017-09-10 00:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.macworld.com_0.localstorage 2017-09-10 00:00 - 2017-09-10 00:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-09 23:59 - 2017-09-09 23:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.mtv.com_0.localstorage 2017-09-09 23:59 - 2017-09-09 23:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.mtv.com_0.localstorage-journal 2017-09-11 14:33 - 2017-09-11 14:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.mylifetime.com_0.localstorage 2017-09-11 14:33 - 2017-09-11 14:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.mylifetime.com_0.localstorage-journal 2017-09-09 23:56 - 2017-09-11 16:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.nfl.com_0.localstorage 2017-09-09 23:56 - 2017-09-11 16:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 20:00 - 2017-09-11 20:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.parents.com_0.localstorage 2017-09-11 20:00 - 2017-09-11 20:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-12 01:40 - 2017-09-12 01:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.reuters.com_0.localstorage 2017-09-12 01:40 - 2017-09-12 01:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-11 19:57 - 2017-09-11 19:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.terrysvillage.com_0.localstorage 2017-09-11 19:57 - 2017-09-11 19:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.terrysvillage.com_0.localstorage-journal 2017-09-09 23:54 - 2017-09-09 23:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.thecricketmonthly.com_0.localstorage 2017-09-09 23:54 - 2017-09-09 23:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.thecricketmonthly.com_0.localstorage-journal 2017-09-12 01:37 - 2017-09-12 01:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.theflexbelt.com_0.localstorage 2017-09-12 01:37 - 2017-09-12 01:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.theflexbelt.com_0.localstorage-journal 2017-09-11 16:20 - 2017-09-11 16:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.torontosun.com_0.localstorage 2017-09-11 16:20 - 2017-09-11 16:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.torontosun.com_0.localstorage-journal 2017-09-11 19:57 - 2017-09-11 19:58 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.worldlifestyle.com_0.localstorage 2017-09-11 19:57 - 2017-09-11 19:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\http_www.worldlifestyle.com_0.localstorage-journal 2017-09-11 19:57 - 2017-09-11 19:58 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\https_assets.bounceexchange.com_0.localstorage 2017-09-11 19:57 - 2017-09-11 19:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\https_assets.bounceexchange.com_0.localstorage-journal 2017-09-10 00:00 - 2017-09-10 00:00 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 00:00 - 2017-09-10 00:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 16:15 - 2017-09-11 16:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\https_connexity.net_0.localstorage 2017-09-11 16:15 - 2017-09-11 16:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 19:57 - 2017-09-11 19:57 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 19:57 - 2017-09-11 19:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 16:13 - 2017-09-11 16:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\https_pokemondb.net_0.localstorage 2017-09-11 16:13 - 2017-09-11 16:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\https_pokemondb.net_0.localstorage-journal 2017-09-11 16:13 - 2017-09-11 19:57 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 16:13 - 2017-09-11 19:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-09 23:54 - 2017-09-09 23:55 - 000012288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\https_www.designbyhumans.com_0.localstorage 2017-09-09 23:54 - 2017-09-09 23:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\https_www.designbyhumans.com_0.localstorage-journal 2017-09-11 14:31 - 2017-09-11 14:32 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\https_www.onestopfanshop.com_0.localstorage 2017-09-11 14:31 - 2017-09-11 14:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\https_www.onestopfanshop.com_0.localstorage-journal 2017-09-12 01:37 - 2017-09-12 01:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\https_www.self.com_0.localstorage 2017-09-12 01:37 - 2017-09-12 01:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Local Storage\https_www.self.com_0.localstorage-journal 2017-09-09 23:54 - 2017-09-09 23:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data 2017-09-09 23:54 - 2017-09-12 01:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash 2017-09-09 23:54 - 2017-09-09 23:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-09 23:54 - 2017-09-09 23:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-09 23:54 - 2017-09-09 23:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\EQCG9BMF 2017-09-09 23:54 - 2017-09-09 23:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot 2017-09-09 23:54 - 2017-09-09 23:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-09 23:54 - 2017-09-11 14:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52 2017-09-11 14:34 - 2017-09-11 14:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\aka.spotxcdn.com 2017-09-09 23:54 - 2017-09-12 01:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\cdn.stickyadstv.com 2017-09-11 14:34 - 2017-09-11 14:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\cdncache-a.akamaihd.net 2017-09-11 14:34 - 2017-09-11 14:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\cdncache-a.akamaihd.net\items 2017-09-11 14:34 - 2017-09-11 14:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 14:34 - 2017-09-11 20:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 14:34 - 2017-09-11 20:00 - 000000429 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-09 23:54 - 2017-09-12 01:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\eereader.com 2017-09-09 23:55 - 2017-09-12 01:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\efreader.com 2017-09-09 23:59 - 2017-09-12 01:45 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\efreader.com\analytics.sol 2017-09-09 23:56 - 2017-09-12 01:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\egreader.com 2017-09-11 14:33 - 2017-09-12 01:39 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\egreader.com\analytics.sol 2017-09-09 23:57 - 2017-09-09 23:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\inread.anyclip.com 2017-09-09 23:57 - 2017-09-09 23:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\inread.anyclip.com\ac# 2017-09-09 23:57 - 2017-09-09 23:57 - 000000459 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-09 23:54 - 2017-09-09 23:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\macromedia.com 2017-09-09 23:54 - 2017-09-09 23:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\macromedia.com\support 2017-09-09 23:54 - 2017-09-09 23:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\macromedia.com\support\flashplayer 2017-09-09 23:54 - 2017-09-11 14:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\macromedia.com\support\flashplayer\sys 2017-09-09 23:54 - 2017-09-11 14:34 - 000000533 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 14:34 - 2017-09-11 14:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\macromedia.com\support\flashplayer\sys\#aka.spotxcdn.com 2017-09-11 14:34 - 2017-09-11 14:34 - 000000086 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\macromedia.com\support\flashplayer\sys\#aka.spotxcdn.com\settings.sol 2017-09-09 23:54 - 2017-09-09 23:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-09 23:54 - 2017-09-09 23:54 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 14:34 - 2017-09-11 14:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 14:34 - 2017-09-11 14:34 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-09 23:54 - 2017-09-09 23:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-09 23:54 - 2017-09-09 23:54 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-09 23:55 - 2017-09-09 23:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-09 23:55 - 2017-09-09 23:55 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-09 23:56 - 2017-09-09 23:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-09 23:56 - 2017-09-09 23:56 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-09 23:57 - 2017-09-09 23:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-09 23:57 - 2017-09-09 23:57 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data672\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\QGK8ET52\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-11 15:11 - 2017-09-12 02:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673 2017-09-11 15:11 - 2017-09-12 02:26 - 000250880 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Cookies 2017-09-11 15:11 - 2017-09-12 02:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Cookies-journal 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\databases 2017-09-11 15:11 - 2017-09-11 15:11 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\databases\Databases.db 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\databases\Databases.db-journal 2017-09-11 15:14 - 2017-09-12 02:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\File System 2017-09-12 02:26 - 2017-09-12 02:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\File System\005 2017-09-12 02:26 - 2017-09-12 02:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\File System\005\t 2017-09-11 15:14 - 2017-09-12 02:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\File System\Origins 2017-09-11 15:14 - 2017-09-12 02:28 - 000000438 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\File System\Origins\000003.log 2017-09-11 15:14 - 2017-09-11 15:14 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\File System\Origins\CURRENT 2017-09-11 15:14 - 2017-09-11 15:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\File System\Origins\LOCK 2017-09-11 15:14 - 2017-09-12 02:26 - 000000393 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\File System\Origins\LOG 2017-09-11 15:14 - 2017-09-12 02:26 - 000000744 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\File System\Origins\LOG.old 2017-09-11 15:14 - 2017-09-11 15:14 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\File System\Origins\MANIFEST-000001 2017-09-12 02:26 - 2017-09-12 02:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\File System\Origins\lost 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\IndexedDB 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\IndexedDB\https_www.avis.com_0.indexeddb.leveldb 2017-09-11 15:11 - 2017-09-11 15:11 - 000000341 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\IndexedDB\https_www.avis.com_0.indexeddb.leveldb\000003.log 2017-09-11 15:11 - 2017-09-11 15:11 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\IndexedDB\https_www.avis.com_0.indexeddb.leveldb\CURRENT 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\IndexedDB\https_www.avis.com_0.indexeddb.leveldb\LOCK 2017-09-11 15:11 - 2017-09-11 15:11 - 000000157 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\IndexedDB\https_www.avis.com_0.indexeddb.leveldb\LOG 2017-09-11 15:11 - 2017-09-11 15:11 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\IndexedDB\https_www.avis.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 15:11 - 2017-09-12 02:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage 2017-09-11 17:00 - 2017-09-11 17:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_allrecipes.com_0.localstorage 2017-09-11 17:00 - 2017-09-11 17:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-11 15:14 - 2017-09-11 15:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 15:14 - 2017-09-11 15:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 16:55 - 2017-09-11 16:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 16:55 - 2017-09-11 16:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-11 23:50 - 2017-09-11 23:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_connexity.net_0.localstorage 2017-09-11 23:50 - 2017-09-11 23:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 15:11 - 2017-09-11 15:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 23:52 - 2017-09-11 23:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_washingtonmonthly.com_0.localstorage 2017-09-11 23:52 - 2017-09-11 23:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_washingtonmonthly.com_0.localstorage-journal 2017-09-12 02:23 - 2017-09-12 02:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-12 02:23 - 2017-09-12 02:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-11 15:15 - 2017-09-11 16:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.blessyouboys.com_0.localstorage 2017-09-11 15:15 - 2017-09-11 16:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.blessyouboys.com_0.localstorage-journal 2017-09-11 15:17 - 2017-09-11 15:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.bunsinmyoven.com_0.localstorage 2017-09-11 15:17 - 2017-09-11 15:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.bunsinmyoven.com_0.localstorage-journal 2017-09-11 15:13 - 2017-09-11 16:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 15:13 - 2017-09-11 16:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-12 02:23 - 2017-09-12 02:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.cnbc.com_0.localstorage 2017-09-12 02:23 - 2017-09-12 02:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.cnbc.com_0.localstorage-journal 2017-09-11 23:52 - 2017-09-11 23:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-11 23:52 - 2017-09-11 23:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-12 02:24 - 2017-09-12 02:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-12 02:24 - 2017-09-12 02:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-11 15:15 - 2017-09-11 15:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.finecooking.com_0.localstorage 2017-09-11 15:15 - 2017-09-11 15:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.finecooking.com_0.localstorage-journal 2017-09-12 02:22 - 2017-09-12 02:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-12 02:22 - 2017-09-12 02:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-11 16:59 - 2017-09-11 16:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-11 16:59 - 2017-09-11 16:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-11 17:00 - 2017-09-11 17:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.golfdigest.com_0.localstorage 2017-09-11 17:00 - 2017-09-11 17:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.golfdigest.com_0.localstorage-journal 2017-09-12 02:22 - 2017-09-12 02:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-12 02:22 - 2017-09-12 02:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-11 16:58 - 2017-09-11 16:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.instyle.com_0.localstorage 2017-09-11 16:58 - 2017-09-11 16:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 15:15 - 2017-09-11 15:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 15:15 - 2017-09-11 15:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 23:51 - 2017-09-11 23:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-11 23:51 - 2017-09-11 23:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-11 16:57 - 2017-09-11 16:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-11 16:57 - 2017-09-11 16:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-12 02:21 - 2017-09-12 02:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.macworld.com_0.localstorage 2017-09-12 02:21 - 2017-09-12 02:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-11 23:51 - 2017-09-11 23:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-11 23:51 - 2017-09-11 23:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-11 16:55 - 2017-09-11 16:55 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.nba.com_0.localstorage 2017-09-11 16:55 - 2017-09-11 16:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.nba.com_0.localstorage-journal 2017-09-11 17:01 - 2017-09-11 17:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 17:01 - 2017-09-11 17:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 15:11 - 2017-09-11 15:12 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.turnto23.com_0.localstorage 2017-09-11 15:11 - 2017-09-11 15:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\http_www.turnto23.com_0.localstorage-journal 2017-09-11 23:50 - 2017-09-11 23:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\https_connexity.net_0.localstorage 2017-09-11 23:50 - 2017-09-11 23:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 15:11 - 2017-09-11 15:11 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-12 02:18 - 2017-09-12 02:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\https_pokemondb.net_0.localstorage 2017-09-12 02:18 - 2017-09-12 02:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\https_pokemondb.net_0.localstorage-journal 2017-09-11 15:11 - 2017-09-11 15:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 15:11 - 2017-09-11 15:11 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 15:11 - 2017-09-11 15:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\https_widgets.outbrain.com_0.localstorage 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\https_widgets.outbrain.com_0.localstorage-journal 2017-09-11 15:11 - 2017-09-11 15:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\https_www.avis.com_0.localstorage 2017-09-11 15:11 - 2017-09-11 15:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\https_www.avis.com_0.localstorage-journal 2017-09-12 02:19 - 2017-09-12 02:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\https_www.cesarsway.com_0.localstorage 2017-09-12 02:19 - 2017-09-12 02:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\https_www.cesarsway.com_0.localstorage-journal 2017-09-11 23:48 - 2017-09-11 23:48 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\https_www.trivago.com_0.localstorage 2017-09-11 23:48 - 2017-09-11 23:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Local Storage\https_www.trivago.com_0.localstorage-journal 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data 2017-09-11 15:11 - 2017-09-12 02:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\EH3EJXX8 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 15:11 - 2017-09-11 15:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4 2017-09-11 15:11 - 2017-09-12 02:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\cdn.stickyadstv.com 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\cdncache-a.akamaihd.net 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\cdncache-a.akamaihd.net\items 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 15:11 - 2017-09-11 15:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 15:11 - 2017-09-11 15:14 - 000000336 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 15:11 - 2017-09-12 02:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\eereader.com 2017-09-11 15:13 - 2017-09-12 02:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\efreader.com 2017-09-11 15:15 - 2017-09-12 02:28 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\efreader.com\analytics.sol 2017-09-11 15:13 - 2017-09-12 02:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\egreader.com 2017-09-11 15:12 - 2017-09-11 15:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\inread.anyclip.com 2017-09-11 15:12 - 2017-09-11 15:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\inread.anyclip.com\ac# 2017-09-11 15:12 - 2017-09-11 15:12 - 000000441 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\macromedia.com 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\macromedia.com\support 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\macromedia.com\support\flashplayer 2017-09-11 15:11 - 2017-09-11 15:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\macromedia.com\support\flashplayer\sys 2017-09-11 15:11 - 2017-09-11 15:14 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 15:11 - 2017-09-11 15:11 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 15:11 - 2017-09-11 15:11 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 15:11 - 2017-09-11 15:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 15:11 - 2017-09-11 15:11 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 15:13 - 2017-09-11 15:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 15:13 - 2017-09-11 15:13 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 15:13 - 2017-09-11 15:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 15:13 - 2017-09-11 15:13 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 15:12 - 2017-09-11 15:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 15:12 - 2017-09-11 15:12 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data673\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\DA5CJRQ4\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-09 23:06 - 2017-09-11 17:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674 2017-09-09 23:06 - 2017-09-11 17:23 - 000359424 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Cookies 2017-09-09 23:06 - 2017-09-11 17:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Cookies-journal 2017-09-10 13:59 - 2017-09-10 13:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\databases 2017-09-10 13:59 - 2017-09-10 13:59 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\databases\Databases.db 2017-09-10 13:59 - 2017-09-10 13:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\databases\Databases.db-journal 2017-09-09 23:08 - 2017-09-11 17:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\File System 2017-09-09 23:08 - 2017-09-11 17:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\File System\Origins 2017-09-09 23:08 - 2017-09-11 17:19 - 000000450 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\File System\Origins\000003.log 2017-09-11 17:22 - 2017-09-11 17:22 - 000000313 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\File System\Origins\000004.ldb 2017-09-11 17:22 - 2017-09-11 17:22 - 000000313 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\File System\Origins\000005.ldb 2017-09-09 23:08 - 2017-09-09 23:08 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\File System\Origins\CURRENT 2017-09-09 23:08 - 2017-09-09 23:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\File System\Origins\LOCK 2017-09-09 23:08 - 2017-09-11 17:23 - 000000744 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\File System\Origins\LOG 2017-09-09 23:08 - 2017-09-11 17:18 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\File System\Origins\LOG.old 2017-09-09 23:08 - 2017-09-09 23:08 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\File System\Origins\MANIFEST-000001 2017-09-09 23:13 - 2017-09-09 23:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\File System\Origins\lost 2017-09-10 13:59 - 2017-09-10 13:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\IndexedDB 2017-09-10 13:59 - 2017-09-10 13:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\IndexedDB\http_www.foodnetwork.com_0.indexeddb.leveldb 2017-09-10 13:59 - 2017-09-10 13:59 - 000000188 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\IndexedDB\http_www.foodnetwork.com_0.indexeddb.leveldb\000003.log 2017-09-10 13:59 - 2017-09-10 13:59 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\IndexedDB\http_www.foodnetwork.com_0.indexeddb.leveldb\CURRENT 2017-09-10 13:59 - 2017-09-10 13:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\IndexedDB\http_www.foodnetwork.com_0.indexeddb.leveldb\LOCK 2017-09-10 13:59 - 2017-09-10 13:59 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\IndexedDB\http_www.foodnetwork.com_0.indexeddb.leveldb\LOG 2017-09-10 13:59 - 2017-09-10 13:59 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\IndexedDB\http_www.foodnetwork.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-09 23:06 - 2017-09-11 17:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage 2017-09-09 23:06 - 2017-09-09 23:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-09 23:06 - 2017-09-09 23:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-11 17:15 - 2017-09-11 17:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-11 17:15 - 2017-09-11 17:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-11 17:15 - 2017-09-11 17:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 17:15 - 2017-09-11 17:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 17:19 - 2017-09-11 17:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_washingtonmonthly.com_0.localstorage 2017-09-11 17:19 - 2017-09-11 17:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_washingtonmonthly.com_0.localstorage-journal 2017-09-11 13:14 - 2017-09-11 13:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-11 13:14 - 2017-09-11 13:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-10 13:58 - 2017-09-10 13:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 13:58 - 2017-09-10 13:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 13:13 - 2017-09-11 13:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.courant.com_0.localstorage 2017-09-11 13:13 - 2017-09-11 13:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-09 23:10 - 2017-09-09 23:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-09 23:10 - 2017-09-09 23:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-11 13:09 - 2017-09-11 13:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.easybib.com_0.localstorage 2017-09-11 13:09 - 2017-09-11 13:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.easybib.com_0.localstorage-journal 2017-09-11 17:20 - 2017-09-11 17:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.espnfc.us_0.localstorage 2017-09-11 17:20 - 2017-09-11 17:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.espnfc.us_0.localstorage-journal 2017-09-11 17:15 - 2017-09-11 17:16 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.express.co.uk_0.localstorage 2017-09-11 17:15 - 2017-09-11 17:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.express.co.uk_0.localstorage-journal 2017-09-10 13:59 - 2017-09-10 13:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-10 13:59 - 2017-09-10 13:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-11 17:20 - 2017-09-11 17:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-11 17:20 - 2017-09-11 17:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-10 13:56 - 2017-09-10 13:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.giftcollector.com_0.localstorage 2017-09-10 13:56 - 2017-09-10 13:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.giftcollector.com_0.localstorage-journal 2017-09-09 23:10 - 2017-09-09 23:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.innerself.com_0.localstorage 2017-09-09 23:10 - 2017-09-09 23:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.innerself.com_0.localstorage-journal 2017-09-10 13:59 - 2017-09-10 13:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.insideedition.com_0.localstorage 2017-09-10 13:59 - 2017-09-10 13:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.insideedition.com_0.localstorage-journal 2017-09-11 13:11 - 2017-09-11 13:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 13:11 - 2017-09-11 13:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 13:12 - 2017-09-11 13:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.islandpacket.com_0.localstorage 2017-09-11 13:12 - 2017-09-11 13:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.islandpacket.com_0.localstorage-journal 2017-09-11 17:16 - 2017-09-11 17:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.jensonusa.com_0.localstorage 2017-09-11 17:16 - 2017-09-11 17:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.jensonusa.com_0.localstorage-journal 2017-09-09 23:09 - 2017-09-09 23:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-09 23:09 - 2017-09-09 23:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-10 13:59 - 2017-09-10 13:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.macworld.com_0.localstorage 2017-09-10 13:59 - 2017-09-10 13:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-11 17:18 - 2017-09-11 17:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 17:18 - 2017-09-11 17:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-10 14:01 - 2017-09-10 14:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.motherearthliving.com_0.localstorage 2017-09-10 14:01 - 2017-09-10 14:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.motherearthliving.com_0.localstorage-journal 2017-09-11 13:15 - 2017-09-11 13:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-11 13:15 - 2017-09-11 13:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-10 13:58 - 2017-09-10 13:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 13:58 - 2017-09-10 13:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 13:13 - 2017-09-11 13:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-11 13:13 - 2017-09-11 13:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-09 23:06 - 2017-09-09 23:07 - 000011264 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.sheknows.com_0.localstorage 2017-09-09 23:06 - 2017-09-09 23:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.sheknows.com_0.localstorage-journal 2017-09-09 23:11 - 2017-09-09 23:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.superhealthykids.com_0.localstorage 2017-09-09 23:11 - 2017-09-09 23:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.superhealthykids.com_0.localstorage-journal 2017-09-11 17:15 - 2017-09-11 17:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.usgamer.net_0.localstorage 2017-09-11 17:15 - 2017-09-11 17:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.usgamer.net_0.localstorage-journal 2017-09-10 14:00 - 2017-09-10 14:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.washingtonmonthly.com_0.localstorage 2017-09-10 14:00 - 2017-09-10 14:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.washingtonmonthly.com_0.localstorage-journal 2017-09-10 13:56 - 2017-09-10 13:57 - 000025600 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.worldlifestyle.com_0.localstorage 2017-09-10 13:56 - 2017-09-10 13:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_www.worldlifestyle.com_0.localstorage-journal 2017-09-11 17:15 - 2017-09-11 17:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_zzqrt.com_0.localstorage 2017-09-11 17:15 - 2017-09-11 17:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\http_zzqrt.com_0.localstorage-journal 2017-09-10 13:56 - 2017-09-10 13:57 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_assets.bounceexchange.com_0.localstorage 2017-09-10 13:56 - 2017-09-10 13:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_assets.bounceexchange.com_0.localstorage-journal 2017-09-09 23:11 - 2017-09-09 23:11 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_c.betrad.com_0.localstorage 2017-09-09 23:11 - 2017-09-09 23:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-09 23:06 - 2017-09-09 23:06 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_clipcentric-a.akamaihd.net_0.localstorage 2017-09-09 23:06 - 2017-09-09 23:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_clipcentric-a.akamaihd.net_0.localstorage-journal 2017-09-10 13:58 - 2017-09-10 13:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-10 13:58 - 2017-09-10 13:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-11 17:15 - 2017-09-11 17:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 17:15 - 2017-09-11 17:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 17:15 - 2017-09-11 17:16 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 17:15 - 2017-09-11 17:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 17:15 - 2017-09-11 17:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_widgets.outbrain.com_0.localstorage 2017-09-11 17:15 - 2017-09-11 17:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_widgets.outbrain.com_0.localstorage-journal 2017-09-09 23:06 - 2017-09-09 23:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_www.bedandbreakfast.com_0.localstorage 2017-09-09 23:06 - 2017-09-09 23:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_www.bedandbreakfast.com_0.localstorage-journal 2017-09-11 13:09 - 2017-09-11 13:10 - 000084992 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_www.cheapair.com_0.localstorage 2017-09-11 13:09 - 2017-09-11 13:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_www.cheapair.com_0.localstorage-journal 2017-09-11 17:15 - 2017-09-11 17:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_www.roblox.com_0.localstorage 2017-09-11 17:15 - 2017-09-11 17:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_www.roblox.com_0.localstorage-journal 2017-09-10 13:56 - 2017-09-10 13:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_www.youtube.com_0.localstorage 2017-09-10 13:56 - 2017-09-10 13:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-09 23:06 - 2017-09-09 23:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data 2017-09-09 23:06 - 2017-09-11 17:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash 2017-09-09 23:06 - 2017-09-09 23:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-09 23:06 - 2017-09-09 23:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-09 23:06 - 2017-09-09 23:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\EY2MCUFF 2017-09-09 23:06 - 2017-09-09 23:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot 2017-09-09 23:06 - 2017-09-09 23:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-09 23:06 - 2017-09-11 13:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN 2017-09-09 23:06 - 2017-09-11 17:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\cdn.stickyadstv.com 2017-09-11 13:12 - 2017-09-11 13:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\cdncache-a.akamaihd.net 2017-09-11 13:12 - 2017-09-11 13:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\cdncache-a.akamaihd.net\items 2017-09-11 13:12 - 2017-09-11 13:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 13:12 - 2017-09-11 17:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 13:12 - 2017-09-11 17:20 - 000000579 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-09 23:06 - 2017-09-11 17:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\eereader.com 2017-09-09 23:08 - 2017-09-11 17:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\efreader.com 2017-09-09 23:09 - 2017-09-11 17:24 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\efreader.com\analytics.sol 2017-09-09 23:06 - 2017-09-11 17:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\egreader.com 2017-09-09 23:09 - 2017-09-11 17:22 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\egreader.com\analytics.sol 2017-09-09 23:07 - 2017-09-09 23:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\inread.anyclip.com 2017-09-09 23:07 - 2017-09-11 13:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\inread.anyclip.com\ac# 2017-09-11 13:09 - 2017-09-11 13:09 - 000000527 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-09 23:06 - 2017-09-09 23:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\macromedia.com 2017-09-09 23:06 - 2017-09-09 23:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\macromedia.com\support 2017-09-09 23:06 - 2017-09-09 23:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\macromedia.com\support\flashplayer 2017-09-09 23:06 - 2017-09-11 13:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\macromedia.com\support\flashplayer\sys 2017-09-09 23:06 - 2017-09-11 13:12 - 000000513 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-09 23:06 - 2017-09-09 23:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-09 23:06 - 2017-09-09 23:06 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 13:12 - 2017-09-11 13:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 13:12 - 2017-09-11 13:12 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-09 23:06 - 2017-09-09 23:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-09 23:06 - 2017-09-09 23:06 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-09 23:08 - 2017-09-09 23:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-09 23:08 - 2017-09-09 23:08 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-09 23:06 - 2017-09-09 23:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-09 23:06 - 2017-09-09 23:06 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-09 23:07 - 2017-09-09 23:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-09 23:07 - 2017-09-09 23:07 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data674\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5BBGRCUN\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-09 23:44 - 2017-09-12 09:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675 2017-09-09 23:44 - 2017-09-12 08:22 - 000351232 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Cookies 2017-09-09 23:44 - 2017-09-12 08:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Cookies-journal 2017-09-11 08:53 - 2017-09-11 08:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\databases 2017-09-11 08:53 - 2017-09-11 08:53 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\databases\Databases.db 2017-09-11 08:53 - 2017-09-11 08:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\databases\Databases.db-journal 2017-09-09 23:45 - 2017-09-12 08:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\File System 2017-09-12 08:18 - 2017-09-12 08:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\File System\006 2017-09-12 08:18 - 2017-09-12 08:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\File System\006\t 2017-09-09 23:45 - 2017-09-12 08:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\File System\Origins 2017-09-09 23:45 - 2017-09-12 08:19 - 000000531 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\File System\Origins\000003.log 2017-09-09 23:45 - 2017-09-09 23:45 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\File System\Origins\CURRENT 2017-09-09 23:45 - 2017-09-09 23:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\File System\Origins\LOCK 2017-09-09 23:45 - 2017-09-12 08:18 - 000000393 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\File System\Origins\LOG 2017-09-09 23:45 - 2017-09-12 08:18 - 000000744 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\File System\Origins\LOG.old 2017-09-09 23:45 - 2017-09-09 23:45 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\File System\Origins\MANIFEST-000001 2017-09-09 23:49 - 2017-09-09 23:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\File System\Origins\lost 2017-09-11 08:53 - 2017-09-12 08:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\IndexedDB 2017-09-11 08:53 - 2017-09-11 08:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb 2017-09-11 08:53 - 2017-09-11 08:53 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\000003.log 2017-09-11 08:53 - 2017-09-11 08:53 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\CURRENT 2017-09-11 08:53 - 2017-09-11 08:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\LOCK 2017-09-11 08:53 - 2017-09-11 08:53 - 000000160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\LOG 2017-09-11 08:53 - 2017-09-11 08:53 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 08:18 - 2017-09-12 08:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\IndexedDB\http_www.macworld.com_0.indexeddb.leveldb 2017-09-12 08:18 - 2017-09-12 08:18 - 000000182 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\IndexedDB\http_www.macworld.com_0.indexeddb.leveldb\000003.log 2017-09-12 08:18 - 2017-09-12 08:18 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\IndexedDB\http_www.macworld.com_0.indexeddb.leveldb\CURRENT 2017-09-12 08:18 - 2017-09-12 08:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\IndexedDB\http_www.macworld.com_0.indexeddb.leveldb\LOCK 2017-09-12 08:18 - 2017-09-12 08:18 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\IndexedDB\http_www.macworld.com_0.indexeddb.leveldb\LOG 2017-09-12 08:18 - 2017-09-12 08:18 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\IndexedDB\http_www.macworld.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-09 23:44 - 2017-09-12 08:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage 2017-09-09 23:44 - 2017-09-09 23:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_a.zdbb.net_0.localstorage 2017-09-09 23:44 - 2017-09-09 23:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_a.zdbb.net_0.localstorage-journal 2017-09-09 23:51 - 2017-09-09 23:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-09 23:51 - 2017-09-09 23:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-11 08:51 - 2017-09-11 08:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 08:51 - 2017-09-11 08:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-12 08:14 - 2017-09-12 08:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_cdn.cxense.com_0.localstorage 2017-09-12 08:14 - 2017-09-12 08:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_cdn.cxense.com_0.localstorage-journal 2017-09-12 08:14 - 2017-09-12 08:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_code3.adtlgc.com_0.localstorage 2017-09-12 08:14 - 2017-09-12 08:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_code3.adtlgc.com_0.localstorage-journal 2017-09-11 08:53 - 2017-09-11 08:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_connexity.net_0.localstorage 2017-09-11 08:53 - 2017-09-11 08:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 08:55 - 2017-09-11 08:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_mashable.com_0.localstorage 2017-09-11 08:55 - 2017-09-11 08:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_mashable.com_0.localstorage-journal 2017-09-09 23:45 - 2017-09-09 23:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-09 23:45 - 2017-09-09 23:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-09 23:44 - 2017-09-11 08:50 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-09 23:44 - 2017-09-11 08:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-12 08:18 - 2017-09-12 08:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-12 08:18 - 2017-09-12 08:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-11 08:54 - 2017-09-11 08:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-11 08:54 - 2017-09-11 08:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-09 23:48 - 2017-09-09 23:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-09 23:48 - 2017-09-09 23:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-09 23:46 - 2017-09-09 23:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-09 23:46 - 2017-09-09 23:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 08:53 - 2017-09-11 08:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.courant.com_0.localstorage 2017-09-11 08:53 - 2017-09-11 08:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-09 23:48 - 2017-09-09 23:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-09 23:48 - 2017-09-09 23:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-12 08:18 - 2017-09-12 08:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.food.com_0.localstorage 2017-09-12 08:18 - 2017-09-12 08:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-11 08:56 - 2017-09-11 08:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.golfdigest.com_0.localstorage 2017-09-11 08:56 - 2017-09-11 08:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.golfdigest.com_0.localstorage-journal 2017-09-11 08:50 - 2017-09-11 08:51 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.greatamericandays.com_0.localstorage 2017-09-11 08:50 - 2017-09-11 08:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.greatamericandays.com_0.localstorage-journal 2017-09-09 23:44 - 2017-09-09 23:46 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.ign.com_0.localstorage 2017-09-09 23:44 - 2017-09-09 23:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.ign.com_0.localstorage-journal 2017-09-12 08:20 - 2017-09-12 08:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.instyle.com_0.localstorage 2017-09-12 08:20 - 2017-09-12 08:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-09 23:46 - 2017-09-09 23:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-09 23:46 - 2017-09-09 23:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 08:53 - 2017-09-11 08:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.islandpacket.com_0.localstorage 2017-09-11 08:53 - 2017-09-11 08:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.islandpacket.com_0.localstorage-journal 2017-09-09 23:47 - 2017-09-12 08:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-09 23:47 - 2017-09-12 08:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-12 08:19 - 2017-09-12 08:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.kiplinger.com_0.localstorage 2017-09-12 08:19 - 2017-09-12 08:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.kiplinger.com_0.localstorage-journal 2017-09-12 08:17 - 2017-09-12 08:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.macworld.com_0.localstorage 2017-09-12 08:17 - 2017-09-12 08:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-09 23:49 - 2017-09-09 23:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.mansionglobal.com_0.localstorage 2017-09-09 23:49 - 2017-09-09 23:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.mansionglobal.com_0.localstorage-journal 2017-09-11 08:52 - 2017-09-11 08:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 08:52 - 2017-09-11 08:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-12 08:14 - 2017-09-12 08:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.memedeportes.com_0.localstorage 2017-09-12 08:14 - 2017-09-12 08:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.memedeportes.com_0.localstorage-journal 2017-09-09 23:46 - 2017-09-09 23:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.nfl.com_0.localstorage 2017-09-09 23:46 - 2017-09-09 23:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-09 23:44 - 2017-09-09 23:46 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.orientaltrading.com_0.localstorage 2017-09-09 23:44 - 2017-09-09 23:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.orientaltrading.com_0.localstorage-journal 2017-09-09 23:47 - 2017-09-09 23:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-09 23:47 - 2017-09-09 23:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-11 08:50 - 2017-09-11 08:51 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.yummytummyaarthi.com_0.localstorage 2017-09-11 08:50 - 2017-09-11 08:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\http_www.yummytummyaarthi.com_0.localstorage-journal 2017-09-09 23:44 - 2017-09-09 23:44 - 000008192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\https_a2953003.cdn.optimizely.com_0.localstorage 2017-09-09 23:44 - 2017-09-09 23:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\https_a2953003.cdn.optimizely.com_0.localstorage-journal 2017-09-09 23:47 - 2017-09-09 23:47 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\https_c.betrad.com_0.localstorage 2017-09-09 23:47 - 2017-09-09 23:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 08:53 - 2017-09-11 08:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\https_connexity.net_0.localstorage 2017-09-11 08:53 - 2017-09-11 08:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-09 23:45 - 2017-09-11 08:50 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-09 23:45 - 2017-09-11 08:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-09 23:44 - 2017-09-09 23:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\https_gateway.foresee.com_0.localstorage 2017-09-09 23:44 - 2017-09-09 23:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\https_gateway.foresee.com_0.localstorage-journal 2017-09-09 23:45 - 2017-09-09 23:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\https_promos.mcafee.com_0.localstorage 2017-09-09 23:45 - 2017-09-09 23:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\https_promos.mcafee.com_0.localstorage-journal 2017-09-09 23:44 - 2017-09-11 08:51 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-09 23:44 - 2017-09-11 08:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-09 23:44 - 2017-09-09 23:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data 2017-09-09 23:44 - 2017-09-12 08:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash 2017-09-09 23:44 - 2017-09-09 23:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-09 23:44 - 2017-09-09 23:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-09 23:44 - 2017-09-09 23:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\AGKRRUFE 2017-09-09 23:44 - 2017-09-09 23:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot 2017-09-09 23:44 - 2017-09-09 23:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-09 23:44 - 2017-09-11 08:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5 2017-09-09 23:45 - 2017-09-12 08:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\cdn.stickyadstv.com 2017-09-09 23:44 - 2017-09-09 23:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\cdncache-a.akamaihd.net 2017-09-09 23:44 - 2017-09-09 23:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\cdncache-a.akamaihd.net\items 2017-09-09 23:44 - 2017-09-09 23:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\cdncache-a.akamaihd.net\items\e6a00 2017-09-09 23:44 - 2017-09-11 08:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-09 23:44 - 2017-09-11 08:54 - 000000482 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-09 23:44 - 2017-09-12 08:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\eereader.com 2017-09-09 23:49 - 2017-09-09 23:49 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\eereader.com\analytics.sol 2017-09-09 23:46 - 2017-09-12 08:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\efreader.com 2017-09-09 23:51 - 2017-09-09 23:53 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\efreader.com\analytics.sol 2017-09-09 23:46 - 2017-09-12 08:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\egreader.com 2017-09-09 23:51 - 2017-09-09 23:51 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\egreader.com\analytics.sol 2017-09-11 08:53 - 2017-09-11 08:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\inread.anyclip.com 2017-09-11 08:53 - 2017-09-11 08:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\inread.anyclip.com\ac# 2017-09-11 08:53 - 2017-09-11 08:53 - 000000443 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-09 23:44 - 2017-09-09 23:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\macromedia.com 2017-09-09 23:44 - 2017-09-09 23:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\macromedia.com\support 2017-09-09 23:44 - 2017-09-09 23:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\macromedia.com\support\flashplayer 2017-09-09 23:44 - 2017-09-11 08:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\macromedia.com\support\flashplayer\sys 2017-09-09 23:44 - 2017-09-11 08:53 - 000000513 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-09 23:45 - 2017-09-09 23:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-09 23:45 - 2017-09-09 23:45 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-09 23:44 - 2017-09-09 23:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-09 23:44 - 2017-09-09 23:44 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-09 23:44 - 2017-09-09 23:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-09 23:44 - 2017-09-09 23:44 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-09 23:46 - 2017-09-09 23:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-09 23:46 - 2017-09-09 23:46 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-09 23:46 - 2017-09-09 23:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-09 23:46 - 2017-09-09 23:46 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 08:53 - 2017-09-11 08:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 08:53 - 2017-09-11 08:53 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data675\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XV28HYL5\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-10 15:07 - 2017-09-11 09:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676 2017-09-10 15:07 - 2017-09-11 08:39 - 000397312 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Cookies 2017-09-10 15:07 - 2017-09-11 08:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Cookies-journal 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\databases 2017-09-10 15:07 - 2017-09-10 15:07 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\databases\Databases.db 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\databases\Databases.db-journal 2017-09-10 15:07 - 2017-09-10 22:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System 2017-09-10 22:00 - 2017-09-10 22:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\002 2017-09-10 22:00 - 2017-09-11 08:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\002\t 2017-09-11 08:38 - 2017-09-11 08:38 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\002\t\.usage 2017-09-11 08:38 - 2017-09-11 08:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\002\t\Paths 2017-09-11 08:38 - 2017-09-11 08:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\002\t\Paths\000003.log 2017-09-11 08:38 - 2017-09-11 08:38 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\002\t\Paths\CURRENT 2017-09-11 08:38 - 2017-09-11 08:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\002\t\Paths\LOCK 2017-09-11 08:38 - 2017-09-11 08:38 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\002\t\Paths\LOG 2017-09-11 08:38 - 2017-09-11 08:38 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\002\t\Paths\MANIFEST-000001 2017-09-10 22:13 - 2017-09-10 22:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\003 2017-09-10 22:13 - 2017-09-11 08:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\003\t 2017-09-11 08:38 - 2017-09-11 08:38 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\003\t\.usage 2017-09-11 08:38 - 2017-09-11 08:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\003\t\Paths 2017-09-11 08:38 - 2017-09-11 08:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\003\t\Paths\000003.log 2017-09-11 08:38 - 2017-09-11 08:38 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\003\t\Paths\CURRENT 2017-09-11 08:38 - 2017-09-11 08:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\003\t\Paths\LOCK 2017-09-11 08:38 - 2017-09-11 08:38 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\003\t\Paths\LOG 2017-09-11 08:38 - 2017-09-11 08:38 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\003\t\Paths\MANIFEST-000001 2017-09-10 22:15 - 2017-09-10 22:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\004 2017-09-10 22:15 - 2017-09-11 08:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\004\t 2017-09-11 08:38 - 2017-09-11 08:38 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\004\t\.usage 2017-09-11 08:38 - 2017-09-11 08:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\004\t\Paths 2017-09-11 08:38 - 2017-09-11 08:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\004\t\Paths\000003.log 2017-09-11 08:38 - 2017-09-11 08:38 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\004\t\Paths\CURRENT 2017-09-11 08:38 - 2017-09-11 08:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\004\t\Paths\LOCK 2017-09-11 08:38 - 2017-09-11 08:38 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\004\t\Paths\LOG 2017-09-11 08:38 - 2017-09-11 08:38 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\004\t\Paths\MANIFEST-000001 2017-09-10 22:17 - 2017-09-10 22:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\005 2017-09-10 22:17 - 2017-09-11 08:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\005\t 2017-09-11 08:38 - 2017-09-11 08:38 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\005\t\.usage 2017-09-11 08:38 - 2017-09-11 08:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\005\t\Paths 2017-09-11 08:38 - 2017-09-11 08:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\005\t\Paths\000003.log 2017-09-11 08:38 - 2017-09-11 08:38 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\005\t\Paths\CURRENT 2017-09-11 08:38 - 2017-09-11 08:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\005\t\Paths\LOCK 2017-09-11 08:38 - 2017-09-11 08:38 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\005\t\Paths\LOG 2017-09-11 08:38 - 2017-09-11 08:38 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\005\t\Paths\MANIFEST-000001 2017-09-10 22:18 - 2017-09-10 22:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\006 2017-09-10 22:18 - 2017-09-11 08:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\006\t 2017-09-11 08:38 - 2017-09-11 08:38 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\006\t\.usage 2017-09-11 08:38 - 2017-09-11 08:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\006\t\Paths 2017-09-11 08:38 - 2017-09-11 08:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\006\t\Paths\000003.log 2017-09-11 08:38 - 2017-09-11 08:38 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\006\t\Paths\CURRENT 2017-09-11 08:38 - 2017-09-11 08:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\006\t\Paths\LOCK 2017-09-11 08:38 - 2017-09-11 08:38 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\006\t\Paths\LOG 2017-09-11 08:38 - 2017-09-11 08:38 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\006\t\Paths\MANIFEST-000001 2017-09-10 15:07 - 2017-09-11 08:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\Origins 2017-09-10 15:07 - 2017-09-10 22:20 - 000000517 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\Origins\000003.log 2017-09-10 15:07 - 2017-09-10 15:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\Origins\CURRENT 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\Origins\LOCK 2017-09-10 15:07 - 2017-09-11 08:38 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\Origins\LOG 2017-09-10 15:07 - 2017-09-10 22:18 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\Origins\LOG.old 2017-09-10 15:07 - 2017-09-10 15:07 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\Origins\MANIFEST-000001 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\File System\Origins\lost 2017-09-10 15:07 - 2017-09-11 08:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB 2017-09-11 08:38 - 2017-09-11 08:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\http_in.reuters.com_0.indexeddb.leveldb 2017-09-11 08:38 - 2017-09-11 08:38 - 000000178 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\http_in.reuters.com_0.indexeddb.leveldb\000003.log 2017-09-11 08:38 - 2017-09-11 08:38 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\http_in.reuters.com_0.indexeddb.leveldb\CURRENT 2017-09-11 08:38 - 2017-09-11 08:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\http_in.reuters.com_0.indexeddb.leveldb\LOCK 2017-09-11 08:38 - 2017-09-11 08:38 - 000000157 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\http_in.reuters.com_0.indexeddb.leveldb\LOG 2017-09-11 08:38 - 2017-09-11 08:38 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\http_in.reuters.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\https_7774307.va.cobrowse.liveperson.net_0.indexeddb.leveldb 2017-09-10 15:07 - 2017-09-10 15:07 - 000000585 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\https_7774307.va.cobrowse.liveperson.net_0.indexeddb.leveldb\000003.log 2017-09-10 15:07 - 2017-09-10 15:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\https_7774307.va.cobrowse.liveperson.net_0.indexeddb.leveldb\CURRENT 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\https_7774307.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOCK 2017-09-10 15:07 - 2017-09-10 15:07 - 000000179 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\https_7774307.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOG 2017-09-10 15:07 - 2017-09-10 15:07 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\https_7774307.va.cobrowse.liveperson.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb 2017-09-10 15:07 - 2017-09-10 15:07 - 000001328 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\000003.log 2017-09-10 15:07 - 2017-09-10 15:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\CURRENT 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOCK 2017-09-10 15:07 - 2017-09-10 15:07 - 000000164 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOG 2017-09-10 15:07 - 2017-09-10 15:07 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\https_www.t-mobile.com_0.indexeddb.leveldb 2017-09-10 15:07 - 2017-09-10 15:08 - 000080528 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\https_www.t-mobile.com_0.indexeddb.leveldb\000003.log 2017-09-10 15:07 - 2017-09-10 15:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\https_www.t-mobile.com_0.indexeddb.leveldb\CURRENT 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\https_www.t-mobile.com_0.indexeddb.leveldb\LOCK 2017-09-10 15:07 - 2017-09-10 15:07 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\https_www.t-mobile.com_0.indexeddb.leveldb\LOG 2017-09-10 15:07 - 2017-09-10 15:07 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\IndexedDB\https_www.t-mobile.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 15:07 - 2017-09-11 08:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage 2017-09-10 15:07 - 2017-09-10 15:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_aax-eu.amazon-adsystem.com_0.localstorage 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_aax-eu.amazon-adsystem.com_0.localstorage-journal 2017-09-10 21:56 - 2017-09-10 21:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_ad.afy11.net_0.localstorage 2017-09-10 21:56 - 2017-09-10 21:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_ad.afy11.net_0.localstorage-journal 2017-09-11 08:33 - 2017-09-11 08:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 08:33 - 2017-09-11 08:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 15:07 - 2017-09-10 22:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 15:07 - 2017-09-10 22:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 15:10 - 2017-09-10 15:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_connexity.net_0.localstorage 2017-09-10 15:10 - 2017-09-10 15:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 08:37 - 2017-09-11 08:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_in.reuters.com_0.localstorage 2017-09-11 08:37 - 2017-09-11 08:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_in.reuters.com_0.localstorage-journal 2017-09-10 15:12 - 2017-09-10 15:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_people.com_0.localstorage 2017-09-10 15:12 - 2017-09-10 15:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_people.com_0.localstorage-journal 2017-09-10 15:07 - 2017-09-10 15:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 15:11 - 2017-09-10 15:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-10 15:11 - 2017-09-10 15:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-10 22:16 - 2017-09-10 22:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_tpc.googlesyndication.com_0.localstorage 2017-09-10 22:16 - 2017-09-10 22:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_tpc.googlesyndication.com_0.localstorage-journal 2017-09-11 08:35 - 2017-09-11 08:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-11 08:35 - 2017-09-11 08:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-10 22:17 - 2017-09-10 22:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-10 22:17 - 2017-09-10 22:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-10 21:57 - 2017-09-10 21:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.blessyouboys.com_0.localstorage 2017-09-10 21:57 - 2017-09-10 21:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.blessyouboys.com_0.localstorage-journal 2017-09-11 08:36 - 2017-09-11 08:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.bravotv.com_0.localstorage 2017-09-11 08:36 - 2017-09-11 08:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.bravotv.com_0.localstorage-journal 2017-09-10 15:09 - 2017-09-10 15:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 15:09 - 2017-09-10 15:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 22:16 - 2017-09-10 22:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.courant.com_0.localstorage 2017-09-10 22:16 - 2017-09-10 22:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-11 08:35 - 2017-09-11 08:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-11 08:35 - 2017-09-11 08:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-10 22:13 - 2017-09-10 22:14 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.evansusa.com_0.localstorage 2017-09-10 22:13 - 2017-09-10 22:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.evansusa.com_0.localstorage-journal 2017-09-10 15:11 - 2017-09-10 15:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.foxnews.com_0.localstorage 2017-09-10 15:11 - 2017-09-10 15:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.foxnews.com_0.localstorage-journal 2017-09-10 22:18 - 2017-09-10 22:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-10 22:18 - 2017-09-10 22:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-10 22:13 - 2017-09-10 22:14 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.instyle.com_0.localstorage 2017-09-10 22:13 - 2017-09-10 22:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 08:34 - 2017-09-11 08:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.insurancejournal.tv_0.localstorage 2017-09-11 08:34 - 2017-09-11 08:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.insurancejournal.tv_0.localstorage-journal 2017-09-10 15:09 - 2017-09-11 08:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 15:09 - 2017-09-11 08:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 21:56 - 2017-09-10 21:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.latimes.com_0.localstorage 2017-09-10 21:56 - 2017-09-10 21:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-10 15:10 - 2017-09-10 15:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-10 15:10 - 2017-09-10 15:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-10 21:58 - 2017-09-10 22:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.macworld.com_0.localstorage 2017-09-10 21:58 - 2017-09-10 22:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-10 21:55 - 2017-09-10 21:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-10 21:55 - 2017-09-10 21:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-10 22:15 - 2017-09-10 22:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-10 22:15 - 2017-09-10 22:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-10 21:54 - 2017-09-10 21:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 21:54 - 2017-09-10 21:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 08:34 - 2017-09-11 08:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.parents.com_0.localstorage 2017-09-11 08:34 - 2017-09-11 08:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-11 08:31 - 2017-09-11 08:32 - 000014336 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.riverfallsjournal.com_0.localstorage 2017-09-11 08:31 - 2017-09-11 08:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.riverfallsjournal.com_0.localstorage-journal 2017-09-10 15:07 - 2017-09-10 15:08 - 000008192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.tmz.com_0.localstorage 2017-09-10 15:07 - 2017-09-10 15:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_www.tmz.com_0.localstorage-journal 2017-09-10 15:11 - 2017-09-10 15:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_yourtemplatefinder.dl.myway.com_0.localstorage 2017-09-10 15:11 - 2017-09-10 15:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_yourtemplatefinder.dl.myway.com_0.localstorage-journal 2017-09-10 15:11 - 2017-09-10 15:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_yourtemplatefinder.dl.tb.ask.com_0.localstorage 2017-09-10 15:11 - 2017-09-10 15:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\http_yourtemplatefinder.dl.tb.ask.com_0.localstorage-journal 2017-09-10 21:55 - 2017-09-10 21:55 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 21:55 - 2017-09-10 21:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 15:07 - 2017-09-10 15:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_cdn.appdynamics.com_0.localstorage 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_cdn.appdynamics.com_0.localstorage-journal 2017-09-10 21:53 - 2017-09-10 21:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_cdn.krxd.net_0.localstorage 2017-09-10 21:53 - 2017-09-10 21:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_cdn.krxd.net_0.localstorage-journal 2017-09-10 15:10 - 2017-09-10 15:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_connexity.net_0.localstorage 2017-09-10 15:10 - 2017-09-10 15:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 21:53 - 2017-09-10 22:13 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 21:53 - 2017-09-10 22:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 21:52 - 2017-09-10 21:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 21:52 - 2017-09-10 21:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 15:07 - 2017-09-10 22:13 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 15:07 - 2017-09-10 22:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 22:13 - 2017-09-10 22:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_widgets.outbrain.com_0.localstorage 2017-09-10 22:13 - 2017-09-10 22:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_widgets.outbrain.com_0.localstorage-journal 2017-09-10 21:53 - 2017-09-10 21:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_www.diecastmodelswholesale.com_0.localstorage 2017-09-10 21:53 - 2017-09-10 21:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_www.diecastmodelswholesale.com_0.localstorage-journal 2017-09-11 08:31 - 2017-09-11 08:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_www.inthecompanyofdogs.com_0.localstorage 2017-09-11 08:31 - 2017-09-11 08:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_www.inthecompanyofdogs.com_0.localstorage-journal 2017-09-10 21:52 - 2017-09-10 21:54 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_www.prevention.com_0.localstorage 2017-09-10 21:52 - 2017-09-10 21:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_www.prevention.com_0.localstorage-journal 2017-09-10 15:07 - 2017-09-10 15:08 - 000009216 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_www.t-mobile.com_0.localstorage 2017-09-10 15:07 - 2017-09-10 15:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Local Storage\https_www.t-mobile.com_0.localstorage-journal 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data 2017-09-10 15:07 - 2017-09-11 08:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\KZQ65HXX 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 15:07 - 2017-09-11 08:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK 2017-09-11 08:35 - 2017-09-11 08:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\aka.spotxcdn.com 2017-09-10 15:07 - 2017-09-11 08:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\cdn.stickyadstv.com 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\cdncache-a.akamaihd.net 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\cdncache-a.akamaihd.net\items 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 15:07 - 2017-09-11 08:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 15:07 - 2017-09-11 08:35 - 000000489 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 15:07 - 2017-09-11 08:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\eereader.com 2017-09-10 22:14 - 2017-09-10 22:14 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\eereader.com\analytics.sol 2017-09-10 15:08 - 2017-09-11 08:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\efreader.com 2017-09-10 21:58 - 2017-09-10 22:20 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\efreader.com\analytics.sol 2017-09-10 15:07 - 2017-09-11 08:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\egreader.com 2017-09-10 21:59 - 2017-09-10 21:59 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\egreader.com\analytics.sol 2017-09-11 08:34 - 2017-09-11 08:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\inread.anyclip.com 2017-09-11 08:34 - 2017-09-11 08:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\inread.anyclip.com\ac# 2017-09-11 08:34 - 2017-09-11 08:34 - 000000439 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\macromedia.com 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\macromedia.com\support 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\macromedia.com\support\flashplayer 2017-09-10 15:07 - 2017-09-11 08:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\macromedia.com\support\flashplayer\sys 2017-09-10 15:07 - 2017-09-11 08:35 - 000000533 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 08:35 - 2017-09-11 08:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\macromedia.com\support\flashplayer\sys\#aka.spotxcdn.com 2017-09-11 08:35 - 2017-09-11 08:35 - 000000086 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\macromedia.com\support\flashplayer\sys\#aka.spotxcdn.com\settings.sol 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 15:07 - 2017-09-10 15:07 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 15:07 - 2017-09-10 15:07 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 15:07 - 2017-09-10 15:07 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 15:08 - 2017-09-10 15:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 15:08 - 2017-09-10 15:08 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 15:07 - 2017-09-10 15:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 15:07 - 2017-09-10 15:07 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 08:34 - 2017-09-11 08:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 08:34 - 2017-09-11 08:34 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data676\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E953S3RK\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-11 05:54 - 2017-09-11 19:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677 2017-09-11 05:54 - 2017-09-11 18:54 - 000276480 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Cookies 2017-09-11 05:54 - 2017-09-11 18:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Cookies-journal 2017-09-11 05:56 - 2017-09-11 05:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\databases 2017-09-11 05:56 - 2017-09-11 05:56 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\databases\Databases.db 2017-09-11 05:56 - 2017-09-11 05:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\databases\Databases.db-journal 2017-09-11 05:54 - 2017-09-11 18:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\File System 2017-09-11 05:59 - 2017-09-11 05:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\File System\001 2017-09-11 05:59 - 2017-09-11 05:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\File System\001\t 2017-09-11 18:49 - 2017-09-11 18:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\File System\002 2017-09-11 18:49 - 2017-09-11 18:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\File System\002\t 2017-09-11 05:54 - 2017-09-11 18:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\File System\Origins 2017-09-11 05:54 - 2017-09-11 18:51 - 000000238 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\File System\Origins\000003.log 2017-09-11 05:54 - 2017-09-11 05:54 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\File System\Origins\CURRENT 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\File System\Origins\LOCK 2017-09-11 05:54 - 2017-09-11 18:49 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\File System\Origins\LOG 2017-09-11 05:54 - 2017-09-11 06:00 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\File System\Origins\LOG.old 2017-09-11 05:54 - 2017-09-11 05:54 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\File System\Origins\MANIFEST-000001 2017-09-11 05:56 - 2017-09-11 05:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\File System\Origins\lost 2017-09-11 05:56 - 2017-09-11 05:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\IndexedDB 2017-09-11 05:56 - 2017-09-11 05:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb 2017-09-11 05:56 - 2017-09-11 05:56 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\000003.log 2017-09-11 05:56 - 2017-09-11 05:56 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\CURRENT 2017-09-11 05:56 - 2017-09-11 05:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\LOCK 2017-09-11 05:56 - 2017-09-11 05:56 - 000000160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\LOG 2017-09-11 05:56 - 2017-09-11 05:56 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\IndexedDB\http_www.cbssports.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 05:58 - 2017-09-11 05:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb 2017-09-11 05:58 - 2017-09-11 05:58 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\000003.log 2017-09-11 05:58 - 2017-09-11 05:58 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\CURRENT 2017-09-11 05:58 - 2017-09-11 05:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\LOCK 2017-09-11 05:58 - 2017-09-11 05:58 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\LOG 2017-09-11 05:58 - 2017-09-11 05:58 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 05:54 - 2017-09-11 18:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage 2017-09-11 18:49 - 2017-09-11 18:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 18:49 - 2017-09-11 18:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 18:46 - 2017-09-11 18:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_cdn.districtm.ca_0.localstorage 2017-09-11 18:46 - 2017-09-11 18:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_cdn.districtm.ca_0.localstorage-journal 2017-09-11 05:59 - 2017-09-11 05:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_connexity.net_0.localstorage 2017-09-11 05:59 - 2017-09-11 05:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 05:54 - 2017-09-11 05:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_hades.srvtrck.com_0.localstorage 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_hades.srvtrck.com_0.localstorage-journal 2017-09-11 05:54 - 2017-09-11 05:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 18:50 - 2017-09-11 18:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-11 18:50 - 2017-09-11 18:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-11 05:58 - 2017-09-11 05:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-11 05:58 - 2017-09-11 05:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-11 05:56 - 2017-09-11 05:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 05:56 - 2017-09-11 05:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 18:50 - 2017-09-11 18:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.courant.com_0.localstorage 2017-09-11 18:50 - 2017-09-11 18:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-11 05:58 - 2017-09-11 05:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-11 05:58 - 2017-09-11 05:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-11 05:57 - 2017-09-11 05:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.instyle.com_0.localstorage 2017-09-11 05:57 - 2017-09-11 05:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 05:57 - 2017-09-11 05:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 05:57 - 2017-09-11 05:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 18:49 - 2017-09-11 18:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 18:49 - 2017-09-11 18:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-11 05:54 - 2017-09-11 05:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-11 05:54 - 2017-09-11 05:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-11 05:56 - 2017-09-11 05:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 05:56 - 2017-09-11 05:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 18:46 - 2017-09-11 18:48 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.sparknotes.com_0.localstorage 2017-09-11 18:46 - 2017-09-11 18:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.sparknotes.com_0.localstorage-journal 2017-09-11 06:00 - 2017-09-11 06:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.sportingnews.com_0.localstorage 2017-09-11 06:00 - 2017-09-11 06:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.sportingnews.com_0.localstorage-journal 2017-09-11 18:51 - 2017-09-11 18:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.today.com_0.localstorage 2017-09-11 18:51 - 2017-09-11 18:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www.today.com_0.localstorage-journal 2017-09-11 05:54 - 2017-09-11 05:55 - 000022528 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www3.lenovo.com_0.localstorage 2017-09-11 05:54 - 2017-09-11 05:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\http_www3.lenovo.com_0.localstorage-journal 2017-09-11 05:59 - 2017-09-11 05:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\https_connexity.net_0.localstorage 2017-09-11 05:59 - 2017-09-11 05:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 05:54 - 2017-09-11 05:54 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 18:46 - 2017-09-11 18:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\https_edge.personalizer.io_0.localstorage 2017-09-11 18:46 - 2017-09-11 18:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\https_edge.personalizer.io_0.localstorage-journal 2017-09-11 18:46 - 2017-09-11 18:47 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 18:46 - 2017-09-11 18:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 18:46 - 2017-09-11 18:47 - 000034816 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\https_shop.keetsa.com_0.localstorage 2017-09-11 18:46 - 2017-09-11 18:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\https_shop.keetsa.com_0.localstorage-journal 2017-09-11 05:54 - 2017-09-11 18:46 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 05:54 - 2017-09-11 18:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 05:54 - 2017-09-11 05:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\https_widgets.outbrain.com_0.localstorage 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\https_widgets.outbrain.com_0.localstorage-journal 2017-09-11 18:46 - 2017-09-11 18:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\https_www.youtube.com_0.localstorage 2017-09-11 18:46 - 2017-09-11 18:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data 2017-09-11 05:54 - 2017-09-11 18:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\RB6JLWG5 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 05:54 - 2017-09-11 06:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU 2017-09-11 06:01 - 2017-09-11 06:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\cdn.dashbid.io 2017-09-11 06:01 - 2017-09-11 06:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\cdn.dashbid.io\prod 2017-09-11 06:01 - 2017-09-11 06:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-11 06:01 - 2017-09-11 06:01 - 000000069 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-11 05:54 - 2017-09-11 18:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\cdn.stickyadstv.com 2017-09-11 05:56 - 2017-09-11 05:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\cdn.tremormedia.com 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\cdncache-a.akamaihd.net 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\cdncache-a.akamaihd.net\items 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 05:54 - 2017-09-11 18:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 05:54 - 2017-09-11 18:46 - 000000476 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 05:54 - 2017-09-11 18:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\eereader.com 2017-09-11 05:55 - 2017-09-11 18:51 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\eereader.com\analytics.sol 2017-09-11 05:56 - 2017-09-11 18:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\efreader.com 2017-09-11 05:57 - 2017-09-11 06:01 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\efreader.com\analytics.sol 2017-09-11 05:54 - 2017-09-11 18:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\egreader.com 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com\support 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com\support\flashplayer 2017-09-11 05:54 - 2017-09-11 06:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com\support\flashplayer\sys 2017-09-11 05:54 - 2017-09-11 06:01 - 000000559 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 06:01 - 2017-09-11 06:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-11 06:01 - 2017-09-11 06:01 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 05:54 - 2017-09-11 05:54 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 05:56 - 2017-09-11 05:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com\support\flashplayer\sys\#cdn.tremormedia.com 2017-09-11 05:56 - 2017-09-11 05:56 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com\support\flashplayer\sys\#cdn.tremormedia.com\settings.sol 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 05:54 - 2017-09-11 05:54 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 05:54 - 2017-09-11 05:54 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 05:56 - 2017-09-11 05:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 05:56 - 2017-09-11 05:56 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 05:54 - 2017-09-11 05:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 05:54 - 2017-09-11 05:54 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 05:56 - 2017-09-11 05:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com 2017-09-11 05:56 - 2017-09-11 05:56 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com\settings.sol 2017-09-11 05:56 - 2017-09-11 05:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\objects.tremormedia.com 2017-09-11 05:56 - 2017-09-11 05:56 - 000000073 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data677\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\JVHR9DZU\objects.tremormedia.com\com.quantserve.sol 2017-09-10 00:04 - 2017-09-11 15:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678 2017-09-10 00:04 - 2017-09-11 14:59 - 000333824 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Cookies 2017-09-10 00:04 - 2017-09-11 14:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Cookies-journal 2017-09-10 00:07 - 2017-09-10 00:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\databases 2017-09-10 00:07 - 2017-09-10 00:07 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\databases\Databases.db 2017-09-10 00:07 - 2017-09-10 00:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\databases\Databases.db-journal 2017-09-10 00:07 - 2017-09-11 14:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\File System 2017-09-10 22:50 - 2017-09-10 22:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\File System\007 2017-09-10 22:50 - 2017-09-10 22:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\File System\007\t 2017-09-11 14:58 - 2017-09-11 14:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\File System\008 2017-09-11 14:58 - 2017-09-11 14:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\File System\008\t 2017-09-10 00:07 - 2017-09-11 14:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\File System\Origins 2017-09-10 00:07 - 2017-09-11 14:58 - 000000660 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\File System\Origins\000003.log 2017-09-10 00:07 - 2017-09-10 00:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\File System\Origins\CURRENT 2017-09-10 00:07 - 2017-09-10 00:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\File System\Origins\LOCK 2017-09-10 00:07 - 2017-09-11 14:59 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\File System\Origins\LOG 2017-09-10 00:07 - 2017-09-11 14:58 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\File System\Origins\LOG.old 2017-09-10 00:07 - 2017-09-10 00:07 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\File System\Origins\MANIFEST-000001 2017-09-10 00:07 - 2017-09-10 00:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\File System\Origins\lost 2017-09-10 00:07 - 2017-09-10 22:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB 2017-09-10 00:08 - 2017-09-10 00:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb 2017-09-10 00:08 - 2017-09-10 00:08 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\000003.log 2017-09-10 00:08 - 2017-09-10 00:08 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\CURRENT 2017-09-10 00:08 - 2017-09-10 00:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\LOCK 2017-09-10 00:08 - 2017-09-10 00:08 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\LOG 2017-09-10 00:08 - 2017-09-10 00:08 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 22:43 - 2017-09-10 22:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\https_66255509.va.cobrowse.liveperson.net_0.indexeddb.leveldb 2017-09-10 22:43 - 2017-09-10 22:43 - 000001013 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\https_66255509.va.cobrowse.liveperson.net_0.indexeddb.leveldb\000003.log 2017-09-10 22:43 - 2017-09-10 22:43 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\https_66255509.va.cobrowse.liveperson.net_0.indexeddb.leveldb\CURRENT 2017-09-10 22:43 - 2017-09-10 22:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\https_66255509.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOCK 2017-09-10 22:43 - 2017-09-10 22:43 - 000000179 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\https_66255509.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOG 2017-09-10 22:43 - 2017-09-10 22:43 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\https_66255509.va.cobrowse.liveperson.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 22:43 - 2017-09-10 22:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb 2017-09-10 22:43 - 2017-09-10 22:43 - 000001340 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\000003.log 2017-09-10 22:43 - 2017-09-10 22:43 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\CURRENT 2017-09-10 22:43 - 2017-09-10 22:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOCK 2017-09-10 22:43 - 2017-09-10 22:43 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOG 2017-09-10 22:43 - 2017-09-10 22:43 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 00:07 - 2017-09-10 00:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\https_x.vindicosuite.com_0.indexeddb.leveldb 2017-09-10 00:07 - 2017-09-10 00:07 - 000000188 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\https_x.vindicosuite.com_0.indexeddb.leveldb\000003.log 2017-09-10 00:07 - 2017-09-10 00:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\https_x.vindicosuite.com_0.indexeddb.leveldb\CURRENT 2017-09-10 00:07 - 2017-09-10 00:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\https_x.vindicosuite.com_0.indexeddb.leveldb\LOCK 2017-09-10 00:07 - 2017-09-10 00:07 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\https_x.vindicosuite.com_0.indexeddb.leveldb\LOG 2017-09-10 00:07 - 2017-09-10 00:07 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\IndexedDB\https_x.vindicosuite.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 00:04 - 2017-09-11 14:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage 2017-09-10 22:48 - 2017-09-10 22:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_allrecipes.com_0.localstorage 2017-09-10 22:48 - 2017-09-10 22:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-10 00:11 - 2017-09-11 14:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-10 00:11 - 2017-09-11 14:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-10 00:40 - 2017-09-11 14:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 00:40 - 2017-09-11 14:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 22:43 - 2017-09-10 22:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_cdn-gl.imrworldwide.com_0.localstorage 2017-09-10 22:43 - 2017-09-10 22:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_cdn-gl.imrworldwide.com_0.localstorage-journal 2017-09-10 00:06 - 2017-09-10 00:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_connexity.net_0.localstorage 2017-09-10 00:06 - 2017-09-10 00:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 00:35 - 2017-09-10 00:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_haurhfia.herolpsafe.com_0.localstorage 2017-09-10 00:35 - 2017-09-10 00:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_haurhfia.herolpsafe.com_0.localstorage-journal 2017-09-11 14:52 - 2017-09-11 14:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_lsugdjoo.lpgreenworld.com_0.localstorage 2017-09-11 14:52 - 2017-09-11 14:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_lsugdjoo.lpgreenworld.com_0.localstorage-journal 2017-09-10 00:35 - 2017-09-10 00:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_microsoft.com-help3.website_0.localstorage 2017-09-10 00:35 - 2017-09-10 00:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_microsoft.com-help3.website_0.localstorage-journal 2017-09-10 00:35 - 2017-09-10 00:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 00:35 - 2017-09-10 00:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 00:35 - 2017-09-10 00:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 00:35 - 2017-09-10 00:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 22:43 - 2017-09-10 22:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_secure-au.imrworldwide.com_0.localstorage 2017-09-10 22:43 - 2017-09-10 22:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_secure-au.imrworldwide.com_0.localstorage-journal 2017-09-11 14:56 - 2017-09-11 14:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_washingtonmonthly.com_0.localstorage 2017-09-11 14:56 - 2017-09-11 14:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_washingtonmonthly.com_0.localstorage-journal 2017-09-10 00:39 - 2017-09-10 00:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-10 00:39 - 2017-09-10 00:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-10 22:47 - 2017-09-10 22:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.bendbulletin.com_0.localstorage 2017-09-10 22:47 - 2017-09-10 22:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.bendbulletin.com_0.localstorage-journal 2017-09-10 00:04 - 2017-09-10 00:05 - 000009216 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.cbs.com_0.localstorage 2017-09-10 00:04 - 2017-09-10 00:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.cbs.com_0.localstorage-journal 2017-09-10 00:06 - 2017-09-10 00:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 00:06 - 2017-09-10 00:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 00:08 - 2017-09-10 00:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.complex.com_0.localstorage 2017-09-10 00:08 - 2017-09-10 00:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-10 00:35 - 2017-09-11 14:56 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.detroitnews.com_0.localstorage 2017-09-10 00:35 - 2017-09-11 14:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.detroitnews.com_0.localstorage-journal 2017-09-10 22:46 - 2017-09-10 22:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-10 22:46 - 2017-09-10 22:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-11 14:57 - 2017-09-11 14:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-11 14:57 - 2017-09-11 14:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-10 00:40 - 2017-09-10 00:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.fandango.com_0.localstorage 2017-09-10 00:40 - 2017-09-10 00:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.fandango.com_0.localstorage-journal 2017-09-10 00:38 - 2017-09-10 00:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-10 00:38 - 2017-09-10 00:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-11 14:55 - 2017-09-11 14:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.foxnews.com_0.localstorage 2017-09-11 14:55 - 2017-09-11 14:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.foxnews.com_0.localstorage-journal 2017-09-10 00:08 - 2017-09-10 00:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-10 00:08 - 2017-09-10 00:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-10 22:43 - 2017-09-10 22:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.goal.com_0.localstorage 2017-09-10 22:43 - 2017-09-10 22:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.goal.com_0.localstorage-journal 2017-09-10 00:04 - 2017-09-10 00:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.hairextensionsale.com_0.localstorage 2017-09-10 00:04 - 2017-09-10 00:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.hairextensionsale.com_0.localstorage-journal 2017-09-10 00:38 - 2017-09-10 00:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-10 00:38 - 2017-09-10 00:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-10 00:10 - 2017-09-10 00:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-10 00:10 - 2017-09-10 00:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-10 00:07 - 2017-09-10 00:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.instyle.com_0.localstorage 2017-09-10 00:07 - 2017-09-10 00:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-10 00:06 - 2017-09-10 00:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 00:06 - 2017-09-10 00:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 14:55 - 2017-09-11 14:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.latimes.com_0.localstorage 2017-09-11 14:55 - 2017-09-11 14:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-10 00:37 - 2017-09-11 14:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-10 00:37 - 2017-09-11 14:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-10 22:45 - 2017-09-10 22:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-10 22:45 - 2017-09-10 22:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-10 00:07 - 2017-09-10 00:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.nbcconnecticut.com_0.localstorage 2017-09-10 00:07 - 2017-09-10 00:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.nbcconnecticut.com_0.localstorage-journal 2017-09-10 00:06 - 2017-09-10 00:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 00:06 - 2017-09-10 00:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 22:43 - 2017-09-10 22:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.usoutdoor.com_0.localstorage 2017-09-10 22:43 - 2017-09-10 22:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www.usoutdoor.com_0.localstorage-journal 2017-09-10 00:09 - 2017-09-10 00:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www4.fmovies.io_0.localstorage 2017-09-10 00:09 - 2017-09-10 00:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\http_www4.fmovies.io_0.localstorage-journal 2017-09-10 00:35 - 2017-09-10 00:35 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 00:35 - 2017-09-10 00:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 00:06 - 2017-09-10 00:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\https_connexity.net_0.localstorage 2017-09-10 00:06 - 2017-09-10 00:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 00:35 - 2017-09-11 14:52 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 00:35 - 2017-09-11 14:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 00:08 - 2017-09-10 00:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-10 00:08 - 2017-09-10 00:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-10 00:35 - 2017-09-10 00:35 - 000613376 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\https_guessfactory.ca_0.localstorage 2017-09-10 00:35 - 2017-09-10 00:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\https_guessfactory.ca_0.localstorage-journal 2017-09-11 14:51 - 2017-09-11 14:52 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 14:51 - 2017-09-11 14:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 14:51 - 2017-09-11 14:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\https_request.1800gotjunk.com_0.localstorage 2017-09-11 14:51 - 2017-09-11 14:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\https_request.1800gotjunk.com_0.localstorage-journal 2017-09-10 00:35 - 2017-09-11 14:51 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 00:35 - 2017-09-11 14:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 14:51 - 2017-09-11 14:53 - 002073600 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\https_www.pacogames.com_0.localstorage 2017-09-11 14:51 - 2017-09-11 14:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\https_www.pacogames.com_0.localstorage-journal 2017-09-11 14:55 - 2017-09-11 14:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\https_www.youtube.com_0.localstorage 2017-09-11 14:55 - 2017-09-11 14:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-10 00:04 - 2017-09-10 00:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data 2017-09-10 00:04 - 2017-09-11 14:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash 2017-09-10 00:04 - 2017-09-10 00:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 00:04 - 2017-09-10 00:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 00:04 - 2017-09-10 00:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\G4LQWUAL 2017-09-10 00:04 - 2017-09-10 00:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 00:04 - 2017-09-10 00:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 00:04 - 2017-09-10 00:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66 2017-09-10 00:04 - 2017-09-11 14:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\cdn.stickyadstv.com 2017-09-10 00:35 - 2017-09-10 00:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\cdncache-a.akamaihd.net 2017-09-10 00:35 - 2017-09-10 00:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\cdncache-a.akamaihd.net\items 2017-09-10 00:35 - 2017-09-10 00:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 00:35 - 2017-09-11 14:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 00:35 - 2017-09-11 14:57 - 000000595 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 00:04 - 2017-09-11 14:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\eereader.com 2017-09-10 22:48 - 2017-09-10 22:48 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\eereader.com\analytics.sol 2017-09-10 00:05 - 2017-09-11 15:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\efreader.com 2017-09-10 00:39 - 2017-09-11 15:00 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\efreader.com\analytics.sol 2017-09-10 00:04 - 2017-09-11 14:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\egreader.com 2017-09-10 00:04 - 2017-09-10 00:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\macromedia.com 2017-09-10 00:04 - 2017-09-10 00:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\macromedia.com\support 2017-09-10 00:04 - 2017-09-10 00:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\macromedia.com\support\flashplayer 2017-09-10 00:04 - 2017-09-10 00:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\macromedia.com\support\flashplayer\sys 2017-09-10 00:04 - 2017-09-10 00:40 - 000000518 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 00:04 - 2017-09-10 00:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 00:04 - 2017-09-10 00:04 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 00:35 - 2017-09-10 00:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 00:35 - 2017-09-10 00:35 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 00:04 - 2017-09-10 00:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 00:04 - 2017-09-10 00:04 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 00:05 - 2017-09-10 00:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 00:05 - 2017-09-10 00:05 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 00:04 - 2017-09-10 00:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 00:04 - 2017-09-10 00:04 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 00:40 - 2017-09-10 00:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com 2017-09-10 00:40 - 2017-09-10 00:40 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com\settings.sol 2017-09-10 00:40 - 2017-09-11 14:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\objects.tremormedia.com 2017-09-10 00:40 - 2017-09-10 00:40 - 000000073 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data678\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\HW7YMY66\objects.tremormedia.com\com.quantserve.sol 2017-09-10 12:36 - 2017-09-11 07:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679 2017-09-10 12:36 - 2017-09-11 05:32 - 000221184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Cookies 2017-09-10 12:36 - 2017-09-11 05:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Cookies-journal 2017-09-10 12:38 - 2017-09-10 12:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\databases 2017-09-10 12:38 - 2017-09-10 12:38 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\databases\Databases.db 2017-09-10 12:38 - 2017-09-10 12:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\databases\Databases.db-journal 2017-09-10 12:36 - 2017-09-11 05:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System 2017-09-10 12:41 - 2017-09-10 12:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\001 2017-09-10 12:41 - 2017-09-11 05:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\001\t 2017-09-11 05:24 - 2017-09-11 05:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\001\t\Paths 2017-09-11 05:24 - 2017-09-11 05:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\001\t\Paths\000003.log 2017-09-11 05:24 - 2017-09-11 05:24 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\001\t\Paths\CURRENT 2017-09-11 05:24 - 2017-09-11 05:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\001\t\Paths\LOCK 2017-09-11 05:24 - 2017-09-11 05:24 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\001\t\Paths\LOG 2017-09-11 05:24 - 2017-09-11 05:24 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\001\t\Paths\MANIFEST-000001 2017-09-10 12:43 - 2017-09-10 12:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\002 2017-09-10 12:43 - 2017-09-11 05:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\002\t 2017-09-11 05:24 - 2017-09-11 05:24 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\002\t\.usage 2017-09-11 05:24 - 2017-09-11 05:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\002\t\Paths 2017-09-11 05:24 - 2017-09-11 05:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\002\t\Paths\000003.log 2017-09-11 05:24 - 2017-09-11 05:24 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\002\t\Paths\CURRENT 2017-09-11 05:24 - 2017-09-11 05:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\002\t\Paths\LOCK 2017-09-11 05:24 - 2017-09-11 05:24 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\002\t\Paths\LOG 2017-09-11 05:24 - 2017-09-11 05:24 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\002\t\Paths\MANIFEST-000001 2017-09-11 05:29 - 2017-09-11 05:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\003 2017-09-11 05:29 - 2017-09-11 05:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\003\t 2017-09-10 12:36 - 2017-09-11 05:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\Origins 2017-09-10 12:36 - 2017-09-11 05:31 - 000000313 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\Origins\000003.log 2017-09-10 12:36 - 2017-09-10 12:36 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\Origins\CURRENT 2017-09-10 12:36 - 2017-09-10 12:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\Origins\LOCK 2017-09-10 12:36 - 2017-09-11 05:29 - 000000393 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\Origins\LOG 2017-09-10 12:36 - 2017-09-11 05:25 - 000000741 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\Origins\LOG.old 2017-09-10 12:36 - 2017-09-10 12:36 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\Origins\MANIFEST-000001 2017-09-11 05:25 - 2017-09-11 05:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\File System\Origins\lost 2017-09-10 12:38 - 2017-09-11 05:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\IndexedDB 2017-09-11 05:24 - 2017-09-11 05:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\IndexedDB\http_www.ign.com_0.indexeddb.leveldb 2017-09-11 05:24 - 2017-09-11 05:24 - 000000172 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\IndexedDB\http_www.ign.com_0.indexeddb.leveldb\000003.log 2017-09-11 05:24 - 2017-09-11 05:24 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\IndexedDB\http_www.ign.com_0.indexeddb.leveldb\CURRENT 2017-09-11 05:24 - 2017-09-11 05:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\IndexedDB\http_www.ign.com_0.indexeddb.leveldb\LOCK 2017-09-11 05:24 - 2017-09-11 05:24 - 000000154 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\IndexedDB\http_www.ign.com_0.indexeddb.leveldb\LOG 2017-09-11 05:24 - 2017-09-11 05:24 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\IndexedDB\http_www.ign.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 12:38 - 2017-09-10 12:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\IndexedDB\http_www.nbc.com_0.indexeddb.leveldb 2017-09-10 12:38 - 2017-09-10 12:38 - 000000172 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\IndexedDB\http_www.nbc.com_0.indexeddb.leveldb\000003.log 2017-09-10 12:38 - 2017-09-10 12:38 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\IndexedDB\http_www.nbc.com_0.indexeddb.leveldb\CURRENT 2017-09-10 12:38 - 2017-09-10 12:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\IndexedDB\http_www.nbc.com_0.indexeddb.leveldb\LOCK 2017-09-10 12:38 - 2017-09-10 12:38 - 000000155 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\IndexedDB\http_www.nbc.com_0.indexeddb.leveldb\LOG 2017-09-10 12:38 - 2017-09-10 12:38 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\IndexedDB\http_www.nbc.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 12:36 - 2017-09-11 05:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage 2017-09-11 05:24 - 2017-09-11 05:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_a.zdbb.net_0.localstorage 2017-09-11 05:24 - 2017-09-11 05:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_a.zdbb.net_0.localstorage-journal 2017-09-10 12:42 - 2017-09-10 12:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 12:42 - 2017-09-10 12:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 05:27 - 2017-09-11 05:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_connexity.net_0.localstorage 2017-09-11 05:27 - 2017-09-11 05:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 05:30 - 2017-09-11 05:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_jobs.mashable.com_0.localstorage 2017-09-11 05:30 - 2017-09-11 05:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_jobs.mashable.com_0.localstorage-journal 2017-09-10 12:41 - 2017-09-10 12:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-10 12:41 - 2017-09-10 12:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-11 05:28 - 2017-09-11 05:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.blessyouboys.com_0.localstorage 2017-09-11 05:28 - 2017-09-11 05:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.blessyouboys.com_0.localstorage-journal 2017-09-10 12:38 - 2017-09-11 05:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 12:38 - 2017-09-11 05:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 12:40 - 2017-09-10 12:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.courant.com_0.localstorage 2017-09-10 12:40 - 2017-09-10 12:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-10 12:42 - 2017-09-10 12:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.dictionary.com_0.localstorage 2017-09-10 12:42 - 2017-09-10 12:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.dictionary.com_0.localstorage-journal 2017-09-11 05:24 - 2017-09-11 05:25 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.discountfilterstore.com_0.localstorage 2017-09-11 05:24 - 2017-09-11 05:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.discountfilterstore.com_0.localstorage-journal 2017-09-11 05:27 - 2017-09-11 05:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.finecooking.com_0.localstorage 2017-09-11 05:27 - 2017-09-11 05:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.finecooking.com_0.localstorage-journal 2017-09-11 05:24 - 2017-09-11 05:25 - 000009216 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.ign.com_0.localstorage 2017-09-11 05:24 - 2017-09-11 05:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.ign.com_0.localstorage-journal 2017-09-10 12:39 - 2017-09-10 12:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.innerself.com_0.localstorage 2017-09-10 12:39 - 2017-09-10 12:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.innerself.com_0.localstorage-journal 2017-09-11 05:26 - 2017-09-11 05:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 05:26 - 2017-09-11 05:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 05:27 - 2017-09-11 05:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-11 05:27 - 2017-09-11 05:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-10 12:39 - 2017-09-10 12:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-10 12:39 - 2017-09-10 12:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-10 12:39 - 2017-09-10 12:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.nbc.com_0.localstorage 2017-09-10 12:39 - 2017-09-10 12:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.nbc.com_0.localstorage-journal 2017-09-10 12:39 - 2017-09-10 12:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 12:39 - 2017-09-10 12:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 05:27 - 2017-09-11 05:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-11 05:27 - 2017-09-11 05:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-10 12:38 - 2017-09-10 12:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.runads.com_0.localstorage 2017-09-10 12:38 - 2017-09-10 12:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.runads.com_0.localstorage-journal 2017-09-11 05:29 - 2017-09-11 05:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.vh1.com_0.localstorage 2017-09-11 05:29 - 2017-09-11 05:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\http_www.vh1.com_0.localstorage-journal 2017-09-10 12:36 - 2017-09-10 12:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\https_a.zdbb.net_0.localstorage 2017-09-10 12:36 - 2017-09-10 12:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\https_a.zdbb.net_0.localstorage-journal 2017-09-11 05:24 - 2017-09-11 05:24 - 000008192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\https_a2953003.cdn.optimizely.com_0.localstorage 2017-09-11 05:24 - 2017-09-11 05:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\https_a2953003.cdn.optimizely.com_0.localstorage-journal 2017-09-11 05:26 - 2017-09-11 05:26 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 05:26 - 2017-09-11 05:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 05:27 - 2017-09-11 05:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\https_connexity.net_0.localstorage 2017-09-11 05:27 - 2017-09-11 05:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 12:38 - 2017-09-10 12:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-10 12:38 - 2017-09-10 12:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-10 12:36 - 2017-09-10 12:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\https_www.whattoexpect.com_0.localstorage 2017-09-10 12:36 - 2017-09-10 12:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Local Storage\https_www.whattoexpect.com_0.localstorage-journal 2017-09-10 12:36 - 2017-09-10 12:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data 2017-09-10 12:36 - 2017-09-11 05:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash 2017-09-10 12:36 - 2017-09-10 12:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 12:36 - 2017-09-10 12:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 12:36 - 2017-09-10 12:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\DHTQZYWM 2017-09-10 12:36 - 2017-09-10 12:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 12:36 - 2017-09-10 12:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 12:36 - 2017-09-11 05:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462 2017-09-10 12:36 - 2017-09-11 05:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\cdn.stickyadstv.com 2017-09-11 05:28 - 2017-09-11 05:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\cdncache-a.akamaihd.net 2017-09-11 05:28 - 2017-09-11 05:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\cdncache-a.akamaihd.net\items 2017-09-11 05:28 - 2017-09-11 05:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 05:28 - 2017-09-11 05:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 05:28 - 2017-09-11 05:28 - 000000274 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 12:36 - 2017-09-11 05:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\eereader.com 2017-09-10 12:41 - 2017-09-10 12:41 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\eereader.com\analytics.sol 2017-09-10 12:38 - 2017-09-11 05:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\efreader.com 2017-09-10 12:45 - 2017-09-11 05:31 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\efreader.com\analytics.sol 2017-09-10 12:36 - 2017-09-11 05:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\egreader.com 2017-09-11 05:25 - 2017-09-11 05:25 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\egreader.com\analytics.sol 2017-09-10 12:36 - 2017-09-10 12:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\macromedia.com 2017-09-10 12:36 - 2017-09-10 12:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\macromedia.com\support 2017-09-10 12:36 - 2017-09-10 12:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\macromedia.com\support\flashplayer 2017-09-10 12:36 - 2017-09-11 05:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\macromedia.com\support\flashplayer\sys 2017-09-10 12:36 - 2017-09-11 05:28 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 12:36 - 2017-09-10 12:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 12:36 - 2017-09-10 12:36 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 05:28 - 2017-09-11 05:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 05:28 - 2017-09-11 05:28 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 12:36 - 2017-09-10 12:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 12:36 - 2017-09-10 12:36 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 12:38 - 2017-09-10 12:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 12:38 - 2017-09-10 12:38 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 12:36 - 2017-09-10 12:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 12:36 - 2017-09-10 12:36 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data679\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K8FV8462\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-12 05:41 - 2017-09-12 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680 2017-09-12 05:41 - 2017-09-12 05:49 - 000171008 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Cookies 2017-09-12 05:41 - 2017-09-12 05:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Cookies-journal 2017-09-12 05:44 - 2017-09-12 05:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\databases 2017-09-12 05:44 - 2017-09-12 05:44 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\databases\Databases.db 2017-09-12 05:44 - 2017-09-12 05:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\databases\Databases.db-journal 2017-09-12 05:44 - 2017-09-12 05:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\IndexedDB 2017-09-12 05:44 - 2017-09-12 05:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\IndexedDB\https_westads.simpli.fi_0.indexeddb.leveldb 2017-09-12 05:44 - 2017-09-12 05:44 - 000000186 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\IndexedDB\https_westads.simpli.fi_0.indexeddb.leveldb\000003.log 2017-09-12 05:44 - 2017-09-12 05:44 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\IndexedDB\https_westads.simpli.fi_0.indexeddb.leveldb\CURRENT 2017-09-12 05:44 - 2017-09-12 05:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\IndexedDB\https_westads.simpli.fi_0.indexeddb.leveldb\LOCK 2017-09-12 05:44 - 2017-09-12 05:44 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\IndexedDB\https_westads.simpli.fi_0.indexeddb.leveldb\LOG 2017-09-12 05:44 - 2017-09-12 05:44 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\IndexedDB\https_westads.simpli.fi_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 05:41 - 2017-09-12 05:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage 2017-09-12 05:49 - 2017-09-12 05:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-12 05:49 - 2017-09-12 05:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-12 05:44 - 2017-09-12 05:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-12 05:44 - 2017-09-12 05:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-12 05:46 - 2017-09-12 05:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\http_www.complex.com_0.localstorage 2017-09-12 05:46 - 2017-09-12 05:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-12 05:47 - 2017-09-12 05:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\http_www.detroitnews.com_0.localstorage 2017-09-12 05:47 - 2017-09-12 05:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\http_www.detroitnews.com_0.localstorage-journal 2017-09-12 05:45 - 2017-09-12 05:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-12 05:45 - 2017-09-12 05:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-12 05:43 - 2017-09-12 05:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-12 05:43 - 2017-09-12 05:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-12 05:43 - 2017-09-12 05:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\http_www.nfl.com_0.localstorage 2017-09-12 05:43 - 2017-09-12 05:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-12 05:41 - 2017-09-12 05:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\https_connexity.net_0.localstorage 2017-09-12 05:41 - 2017-09-12 05:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-12 05:41 - 2017-09-12 05:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\https_tpc.googlesyndication.com_0.localstorage 2017-09-12 05:41 - 2017-09-12 05:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\https_tpc.googlesyndication.com_0.localstorage-journal 2017-09-12 05:41 - 2017-09-12 05:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\https_w.soundcloud.com_0.localstorage 2017-09-12 05:41 - 2017-09-12 05:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\https_w.soundcloud.com_0.localstorage-journal 2017-09-12 05:41 - 2017-09-12 05:43 - 000015360 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\https_www.irishtimes.com_0.localstorage 2017-09-12 05:41 - 2017-09-12 05:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\https_www.irishtimes.com_0.localstorage-journal 2017-09-12 05:42 - 2017-09-12 05:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\https_www.walmart.com_0.localstorage 2017-09-12 05:42 - 2017-09-12 05:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Local Storage\https_www.walmart.com_0.localstorage-journal 2017-09-12 05:41 - 2017-09-12 05:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data 2017-09-12 05:41 - 2017-09-12 05:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash 2017-09-12 05:41 - 2017-09-12 05:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-12 05:41 - 2017-09-12 05:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-12 05:41 - 2017-09-12 05:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\Q3VWZ569 2017-09-12 05:41 - 2017-09-12 05:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot 2017-09-12 05:41 - 2017-09-12 05:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-12 05:41 - 2017-09-12 05:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8AS2LKNM 2017-09-12 05:41 - 2017-09-12 05:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8AS2LKNM\cdn.stickyadstv.com 2017-09-12 05:41 - 2017-09-12 05:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8AS2LKNM\eereader.com 2017-09-12 05:43 - 2017-09-12 05:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8AS2LKNM\efreader.com 2017-09-12 05:46 - 2017-09-12 05:46 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8AS2LKNM\efreader.com\analytics.sol 2017-09-12 05:42 - 2017-09-12 05:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8AS2LKNM\egreader.com 2017-09-12 05:41 - 2017-09-12 05:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8AS2LKNM\macromedia.com 2017-09-12 05:41 - 2017-09-12 05:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8AS2LKNM\macromedia.com\support 2017-09-12 05:41 - 2017-09-12 05:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8AS2LKNM\macromedia.com\support\flashplayer 2017-09-12 05:41 - 2017-09-12 05:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8AS2LKNM\macromedia.com\support\flashplayer\sys 2017-09-12 05:41 - 2017-09-12 05:43 - 000000464 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8AS2LKNM\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-12 05:41 - 2017-09-12 05:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8AS2LKNM\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-12 05:41 - 2017-09-12 05:41 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8AS2LKNM\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-12 05:41 - 2017-09-12 05:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8AS2LKNM\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-12 05:41 - 2017-09-12 05:41 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8AS2LKNM\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-12 05:43 - 2017-09-12 05:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8AS2LKNM\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-12 05:43 - 2017-09-12 05:43 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8AS2LKNM\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-12 05:42 - 2017-09-12 05:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8AS2LKNM\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-12 05:42 - 2017-09-12 05:42 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data680\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\8AS2LKNM\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 01:35 - 2017-09-11 21:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681 2017-09-11 01:35 - 2017-09-11 18:13 - 000195584 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Cookies 2017-09-11 01:35 - 2017-09-11 18:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Cookies-journal 2017-09-11 18:06 - 2017-09-11 18:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\databases 2017-09-11 18:06 - 2017-09-11 18:06 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\databases\Databases.db 2017-09-11 18:06 - 2017-09-11 18:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\databases\Databases.db-journal 2017-09-11 01:38 - 2017-09-11 18:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System 2017-09-11 01:38 - 2017-09-11 01:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\000 2017-09-11 01:38 - 2017-09-11 18:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\000\t 2017-09-11 18:06 - 2017-09-11 18:06 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\000\t\.usage 2017-09-11 18:06 - 2017-09-11 18:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\000\t\Paths 2017-09-11 18:06 - 2017-09-11 18:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\000\t\Paths\000003.log 2017-09-11 18:06 - 2017-09-11 18:06 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\000\t\Paths\CURRENT 2017-09-11 18:06 - 2017-09-11 18:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\000\t\Paths\LOCK 2017-09-11 18:06 - 2017-09-11 18:06 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\000\t\Paths\LOG 2017-09-11 18:06 - 2017-09-11 18:06 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\000\t\Paths\MANIFEST-000001 2017-09-11 01:42 - 2017-09-11 01:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\001 2017-09-11 01:42 - 2017-09-11 18:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\001\t 2017-09-11 18:06 - 2017-09-11 18:06 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\001\t\.usage 2017-09-11 18:06 - 2017-09-11 18:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\001\t\Paths 2017-09-11 18:06 - 2017-09-11 18:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\001\t\Paths\000003.log 2017-09-11 18:06 - 2017-09-11 18:06 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\001\t\Paths\CURRENT 2017-09-11 18:06 - 2017-09-11 18:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\001\t\Paths\LOCK 2017-09-11 18:06 - 2017-09-11 18:06 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\001\t\Paths\LOG 2017-09-11 18:06 - 2017-09-11 18:06 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\001\t\Paths\MANIFEST-000001 2017-09-11 18:06 - 2017-09-11 18:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\002 2017-09-11 18:06 - 2017-09-11 18:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\002\t 2017-09-11 01:38 - 2017-09-11 19:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\Origins 2017-09-11 01:38 - 2017-09-11 18:06 - 000000242 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\Origins\000003.log 2017-09-11 01:38 - 2017-09-11 01:38 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\Origins\CURRENT 2017-09-11 01:38 - 2017-09-11 01:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\Origins\LOCK 2017-09-11 01:38 - 2017-09-11 19:06 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\Origins\LOG 2017-09-11 01:38 - 2017-09-11 18:06 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\Origins\LOG.old 2017-09-11 01:38 - 2017-09-11 01:38 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\File System\Origins\MANIFEST-000001 2017-09-11 18:06 - 2017-09-11 18:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\IndexedDB 2017-09-11 18:06 - 2017-09-11 18:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\IndexedDB\http_www.roadrunnersports.com_0.indexeddb.leveldb 2017-09-11 18:06 - 2017-09-11 18:06 - 000000400 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\IndexedDB\http_www.roadrunnersports.com_0.indexeddb.leveldb\000003.log 2017-09-11 18:06 - 2017-09-11 18:06 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\IndexedDB\http_www.roadrunnersports.com_0.indexeddb.leveldb\CURRENT 2017-09-11 18:06 - 2017-09-11 18:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\IndexedDB\http_www.roadrunnersports.com_0.indexeddb.leveldb\LOCK 2017-09-11 18:06 - 2017-09-11 18:07 - 000000379 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\IndexedDB\http_www.roadrunnersports.com_0.indexeddb.leveldb\LOG 2017-09-11 18:06 - 2017-09-11 18:06 - 000000168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\IndexedDB\http_www.roadrunnersports.com_0.indexeddb.leveldb\LOG.old 2017-09-11 18:06 - 2017-09-11 18:06 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\IndexedDB\http_www.roadrunnersports.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 01:35 - 2017-09-11 18:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage 2017-09-11 18:12 - 2017-09-11 18:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_allrecipes.com_0.localstorage 2017-09-11 18:12 - 2017-09-11 18:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-11 18:06 - 2017-09-11 18:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-11 18:06 - 2017-09-11 18:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-11 01:35 - 2017-09-11 01:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 01:35 - 2017-09-11 01:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 18:06 - 2017-09-11 18:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_search.selfbutler.com_0.localstorage 2017-09-11 18:06 - 2017-09-11 18:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_search.selfbutler.com_0.localstorage-journal 2017-09-11 01:35 - 2017-09-11 01:36 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.apeainthepod.com_0.localstorage 2017-09-11 01:35 - 2017-09-11 01:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.apeainthepod.com_0.localstorage-journal 2017-09-11 01:37 - 2017-09-11 01:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 01:37 - 2017-09-11 01:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 01:39 - 2017-09-11 01:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.complex.com_0.localstorage 2017-09-11 01:39 - 2017-09-11 01:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-11 01:39 - 2017-09-11 01:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-11 01:39 - 2017-09-11 01:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-11 18:06 - 2017-09-11 18:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.futbolecuador.com_0.localstorage 2017-09-11 18:06 - 2017-09-11 18:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.futbolecuador.com_0.localstorage-journal 2017-09-11 01:41 - 2017-09-11 01:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.goal.com_0.localstorage 2017-09-11 01:41 - 2017-09-11 01:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.goal.com_0.localstorage-journal 2017-09-11 01:41 - 2017-09-11 01:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-11 01:41 - 2017-09-11 01:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-11 01:38 - 2017-09-11 01:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-11 01:38 - 2017-09-11 01:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-11 01:38 - 2017-09-11 01:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 01:38 - 2017-09-11 01:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-11 01:37 - 2017-09-11 01:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 01:37 - 2017-09-11 01:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 18:06 - 2017-09-11 18:08 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.roadrunnersports.com_0.localstorage 2017-09-11 18:06 - 2017-09-11 18:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\http_www.roadrunnersports.com_0.localstorage-journal 2017-09-11 01:35 - 2017-09-11 01:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\https_assets.bounceexchange.com_0.localstorage 2017-09-11 01:35 - 2017-09-11 01:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\https_assets.bounceexchange.com_0.localstorage-journal 2017-09-11 01:35 - 2017-09-11 18:07 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 01:35 - 2017-09-11 18:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 01:35 - 2017-09-11 01:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\https_pokemondb.net_0.localstorage 2017-09-11 01:35 - 2017-09-11 01:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\https_pokemondb.net_0.localstorage-journal 2017-09-11 01:35 - 2017-09-11 01:35 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 01:35 - 2017-09-11 01:35 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 01:35 - 2017-09-11 18:06 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 01:35 - 2017-09-11 18:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 01:35 - 2017-09-11 01:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data 2017-09-11 01:35 - 2017-09-11 18:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash 2017-09-11 18:07 - 2017-09-11 18:07 - 000004096 ____T () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\A29C.tmp 2017-09-11 18:06 - 2017-09-11 18:06 - 000004096 ____T () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\EB80.tmp 2017-09-11 01:35 - 2017-09-11 01:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 01:35 - 2017-09-11 01:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 01:35 - 2017-09-11 01:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\5G8QSM7X 2017-09-11 01:35 - 2017-09-11 01:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 01:35 - 2017-09-11 01:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 01:35 - 2017-09-11 01:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T 2017-09-11 01:35 - 2017-09-11 01:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\cdn.stickyadstv.com 2017-09-11 01:35 - 2017-09-11 01:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\cdncache-a.akamaihd.net 2017-09-11 01:35 - 2017-09-11 01:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\cdncache-a.akamaihd.net\items 2017-09-11 01:35 - 2017-09-11 01:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 01:35 - 2017-09-11 18:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 01:35 - 2017-09-11 18:06 - 000000580 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 01:35 - 2017-09-11 18:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\eereader.com 2017-09-11 01:37 - 2017-09-11 18:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\efreader.com 2017-09-11 01:35 - 2017-09-11 18:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\egreader.com 2017-09-11 01:35 - 2017-09-11 01:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\macromedia.com 2017-09-11 01:35 - 2017-09-11 01:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\macromedia.com\support 2017-09-11 01:35 - 2017-09-11 01:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\macromedia.com\support\flashplayer 2017-09-11 01:35 - 2017-09-11 01:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\macromedia.com\support\flashplayer\sys 2017-09-11 01:35 - 2017-09-11 01:42 - 000000518 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 01:35 - 2017-09-11 01:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 01:35 - 2017-09-11 01:35 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 01:35 - 2017-09-11 01:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 01:35 - 2017-09-11 01:35 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 01:35 - 2017-09-11 01:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 01:35 - 2017-09-11 01:35 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 01:37 - 2017-09-11 01:37 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 01:37 - 2017-09-11 01:37 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 01:35 - 2017-09-11 01:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 01:35 - 2017-09-11 01:35 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 01:42 - 2017-09-11 01:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com 2017-09-11 01:42 - 2017-09-11 01:42 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com\settings.sol 2017-09-11 01:42 - 2017-09-11 01:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\objects.tremormedia.com 2017-09-11 01:42 - 2017-09-11 01:42 - 000000073 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data681\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPUMK23T\objects.tremormedia.com\com.quantserve.sol 2017-09-10 16:59 - 2017-09-12 07:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682 2017-09-10 17:00 - 2017-09-12 07:31 - 000346112 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Cookies 2017-09-10 17:00 - 2017-09-12 07:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Cookies-journal 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\databases 2017-09-11 05:20 - 2017-09-11 05:20 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\databases\Databases.db 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\databases\Databases.db-journal 2017-09-10 17:02 - 2017-09-12 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System 2017-09-10 17:02 - 2017-09-10 17:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\000 2017-09-10 17:02 - 2017-09-11 05:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\000\t 2017-09-11 05:20 - 2017-09-11 05:20 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\000\t\.usage 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\000\t\Paths 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\000\t\Paths\000003.log 2017-09-11 05:20 - 2017-09-11 05:20 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\000\t\Paths\CURRENT 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\000\t\Paths\LOCK 2017-09-11 05:20 - 2017-09-11 05:20 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\000\t\Paths\LOG 2017-09-11 05:20 - 2017-09-11 05:20 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\000\t\Paths\MANIFEST-000001 2017-09-10 17:04 - 2017-09-10 17:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\001 2017-09-10 17:04 - 2017-09-11 05:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\001\t 2017-09-11 05:20 - 2017-09-11 05:20 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\001\t\.usage 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\001\t\Paths 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\001\t\Paths\000003.log 2017-09-11 05:20 - 2017-09-11 05:20 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\001\t\Paths\CURRENT 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\001\t\Paths\LOCK 2017-09-11 05:20 - 2017-09-11 05:20 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\001\t\Paths\LOG 2017-09-11 05:20 - 2017-09-11 05:20 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\001\t\Paths\MANIFEST-000001 2017-09-10 17:07 - 2017-09-10 17:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\002 2017-09-10 17:07 - 2017-09-11 05:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\002\t 2017-09-11 05:20 - 2017-09-11 05:20 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\002\t\.usage 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\002\t\Paths 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\002\t\Paths\000003.log 2017-09-11 05:20 - 2017-09-11 05:20 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\002\t\Paths\CURRENT 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\002\t\Paths\LOCK 2017-09-11 05:20 - 2017-09-11 05:20 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\002\t\Paths\LOG 2017-09-11 05:20 - 2017-09-11 05:20 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\002\t\Paths\MANIFEST-000001 2017-09-10 17:47 - 2017-09-10 17:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\003 2017-09-10 17:47 - 2017-09-11 05:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\003\t 2017-09-11 05:20 - 2017-09-11 05:20 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\003\t\.usage 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\003\t\Paths 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\003\t\Paths\000003.log 2017-09-11 05:20 - 2017-09-11 05:20 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\003\t\Paths\CURRENT 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\003\t\Paths\LOCK 2017-09-11 05:20 - 2017-09-11 05:20 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\003\t\Paths\LOG 2017-09-11 05:20 - 2017-09-11 05:20 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\003\t\Paths\MANIFEST-000001 2017-09-11 05:18 - 2017-09-11 05:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\004 2017-09-11 05:18 - 2017-09-11 05:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\004\t 2017-09-11 05:20 - 2017-09-11 05:20 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\004\t\.usage 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\004\t\Paths 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\004\t\Paths\000003.log 2017-09-11 05:20 - 2017-09-11 05:20 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\004\t\Paths\CURRENT 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\004\t\Paths\LOCK 2017-09-11 05:20 - 2017-09-11 05:20 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\004\t\Paths\LOG 2017-09-11 05:20 - 2017-09-11 05:20 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\004\t\Paths\MANIFEST-000001 2017-09-12 07:27 - 2017-09-12 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\005 2017-09-12 07:27 - 2017-09-12 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\005\t 2017-09-10 17:02 - 2017-09-12 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\Origins 2017-09-10 17:02 - 2017-09-12 07:29 - 000000456 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\Origins\000003.log 2017-09-10 17:02 - 2017-09-10 17:02 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\Origins\CURRENT 2017-09-10 17:02 - 2017-09-10 17:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\Origins\LOCK 2017-09-10 17:02 - 2017-09-12 07:27 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\Origins\LOG 2017-09-10 17:02 - 2017-09-11 15:28 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\Origins\LOG.old 2017-09-10 17:02 - 2017-09-10 17:02 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\File System\Origins\MANIFEST-000001 2017-09-11 05:20 - 2017-09-11 15:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb 2017-09-11 05:20 - 2017-09-11 05:20 - 000000178 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\000003.log 2017-09-11 05:20 - 2017-09-11 05:20 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\CURRENT 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\LOCK 2017-09-11 05:20 - 2017-09-11 05:21 - 000000157 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\LOG 2017-09-11 05:20 - 2017-09-11 05:20 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\http_allrecipes.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 15:28 - 2017-09-11 15:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\http_washingtonmonthly.com_0.indexeddb.leveldb 2017-09-11 15:28 - 2017-09-11 15:28 - 000000192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\http_washingtonmonthly.com_0.indexeddb.leveldb\000003.log 2017-09-11 15:28 - 2017-09-11 15:28 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\http_washingtonmonthly.com_0.indexeddb.leveldb\CURRENT 2017-09-11 15:28 - 2017-09-11 15:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\http_washingtonmonthly.com_0.indexeddb.leveldb\LOCK 2017-09-11 15:28 - 2017-09-11 15:28 - 000000165 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\http_washingtonmonthly.com_0.indexeddb.leveldb\LOG 2017-09-11 15:28 - 2017-09-11 15:28 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\http_washingtonmonthly.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\https_eastads.simpli.fi_0.indexeddb.leveldb 2017-09-11 05:20 - 2017-09-11 05:20 - 000000186 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\https_eastads.simpli.fi_0.indexeddb.leveldb\000003.log 2017-09-11 05:20 - 2017-09-11 05:20 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\https_eastads.simpli.fi_0.indexeddb.leveldb\CURRENT 2017-09-11 05:20 - 2017-09-11 05:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\https_eastads.simpli.fi_0.indexeddb.leveldb\LOCK 2017-09-11 05:20 - 2017-09-11 05:20 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\https_eastads.simpli.fi_0.indexeddb.leveldb\LOG 2017-09-11 05:20 - 2017-09-11 05:20 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\https_eastads.simpli.fi_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 05:45 - 2017-09-11 05:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\https_www.babycentre.co.uk_0.indexeddb.leveldb 2017-09-11 05:45 - 2017-09-11 05:45 - 000000192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\https_www.babycentre.co.uk_0.indexeddb.leveldb\000003.log 2017-09-11 05:45 - 2017-09-11 05:45 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\https_www.babycentre.co.uk_0.indexeddb.leveldb\CURRENT 2017-09-11 05:45 - 2017-09-11 05:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\https_www.babycentre.co.uk_0.indexeddb.leveldb\LOCK 2017-09-11 05:45 - 2017-09-11 05:45 - 000000164 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\https_www.babycentre.co.uk_0.indexeddb.leveldb\LOG 2017-09-11 05:45 - 2017-09-11 05:45 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\IndexedDB\https_www.babycentre.co.uk_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 17:00 - 2017-09-12 07:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage 2017-09-10 17:46 - 2017-09-11 05:21 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_allrecipes.com_0.localstorage 2017-09-10 17:46 - 2017-09-11 05:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_allrecipes.com_0.localstorage-journal 2017-09-12 07:30 - 2017-09-12 07:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-12 07:30 - 2017-09-12 07:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-10 17:05 - 2017-09-10 17:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 17:05 - 2017-09-10 17:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 17:40 - 2017-09-10 17:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 17:40 - 2017-09-10 17:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 17:04 - 2017-09-10 17:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_connexity.net_0.localstorage 2017-09-10 17:04 - 2017-09-10 17:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-12 07:28 - 2017-09-12 07:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_people.com_0.localstorage 2017-09-12 07:28 - 2017-09-12 07:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_people.com_0.localstorage-journal 2017-09-12 07:23 - 2017-09-12 07:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_pokemonshowdown.com_0.localstorage 2017-09-12 07:23 - 2017-09-12 07:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_pokemonshowdown.com_0.localstorage-journal 2017-09-10 17:00 - 2017-09-10 17:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 17:00 - 2017-09-10 17:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 05:48 - 2017-09-11 05:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-11 05:48 - 2017-09-11 05:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-10 17:45 - 2017-09-10 17:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_thetop.tv_0.localstorage 2017-09-10 17:45 - 2017-09-10 17:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_thetop.tv_0.localstorage-journal 2017-09-11 15:28 - 2017-09-11 15:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_washingtonmonthly.com_0.localstorage 2017-09-11 15:28 - 2017-09-11 15:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_washingtonmonthly.com_0.localstorage-journal 2017-09-11 05:18 - 2017-09-12 07:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-11 05:18 - 2017-09-12 07:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-10 17:44 - 2017-09-10 17:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.bendbulletin.com_0.localstorage 2017-09-10 17:44 - 2017-09-10 17:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.bendbulletin.com_0.localstorage-journal 2017-09-10 17:04 - 2017-09-10 17:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.blessyouboys.com_0.localstorage 2017-09-10 17:04 - 2017-09-10 17:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.blessyouboys.com_0.localstorage-journal 2017-09-10 17:02 - 2017-09-10 17:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 17:02 - 2017-09-10 17:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 05:18 - 2017-09-12 07:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.courant.com_0.localstorage 2017-09-11 05:18 - 2017-09-12 07:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-10 17:43 - 2017-09-10 17:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.crash.net_0.localstorage 2017-09-10 17:43 - 2017-09-10 17:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-10 17:03 - 2017-09-10 17:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-10 17:03 - 2017-09-10 17:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-10 17:04 - 2017-09-10 17:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.daytondailynews.com_0.localstorage 2017-09-10 17:04 - 2017-09-10 17:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.daytondailynews.com_0.localstorage-journal 2017-09-11 15:27 - 2017-09-11 15:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-11 15:27 - 2017-09-11 15:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-11 05:14 - 2017-09-11 05:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.express.co.uk_0.localstorage 2017-09-11 05:14 - 2017-09-11 05:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.express.co.uk_0.localstorage-journal 2017-09-10 17:00 - 2017-09-10 17:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.goal.com_0.localstorage 2017-09-10 17:00 - 2017-09-10 17:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.goal.com_0.localstorage-journal 2017-09-10 17:43 - 2017-09-10 17:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.insideedition.com_0.localstorage 2017-09-10 17:43 - 2017-09-10 17:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.insideedition.com_0.localstorage-journal 2017-09-10 17:03 - 2017-09-12 07:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.instyle.com_0.localstorage 2017-09-10 17:03 - 2017-09-12 07:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-10 17:42 - 2017-09-10 17:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 17:42 - 2017-09-10 17:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 17:40 - 2017-09-10 17:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.jango.com_0.localstorage 2017-09-10 17:40 - 2017-09-10 17:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.jango.com_0.localstorage-journal 2017-09-11 15:24 - 2017-09-11 15:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.livescore.com_0.localstorage 2017-09-11 15:24 - 2017-09-11 15:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.livescore.com_0.localstorage-journal 2017-09-11 05:50 - 2017-09-12 07:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.macworld.com_0.localstorage 2017-09-11 05:50 - 2017-09-12 07:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-11 05:49 - 2017-09-11 05:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 05:49 - 2017-09-11 05:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-10 17:03 - 2017-09-10 17:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-10 17:03 - 2017-09-10 17:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-10 17:40 - 2017-09-10 17:41 - 000011264 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.mywedding.com_0.localstorage 2017-09-10 17:40 - 2017-09-10 17:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.mywedding.com_0.localstorage-journal 2017-09-10 17:02 - 2017-09-12 07:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 17:02 - 2017-09-12 07:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 05:48 - 2017-09-11 05:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.parents.com_0.localstorage 2017-09-11 05:48 - 2017-09-11 05:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-10 17:43 - 2017-09-10 17:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-10 17:43 - 2017-09-10 17:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-10 17:40 - 2017-09-10 17:41 - 000457728 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.sanuk.com_0.localstorage 2017-09-10 17:40 - 2017-09-10 17:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\http_www.sanuk.com_0.localstorage-journal 2017-09-11 05:17 - 2017-09-11 05:17 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 05:17 - 2017-09-11 05:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 05:44 - 2017-09-11 05:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_cdn-gl.imrworldwide.com_0.localstorage 2017-09-11 05:44 - 2017-09-11 05:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_cdn-gl.imrworldwide.com_0.localstorage-journal 2017-09-10 17:04 - 2017-09-10 17:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_connexity.net_0.localstorage 2017-09-10 17:04 - 2017-09-10 17:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 17:40 - 2017-09-11 15:24 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 17:40 - 2017-09-11 15:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 17:00 - 2017-09-10 17:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_hades.srvtrck.com_0.localstorage 2017-09-10 17:00 - 2017-09-10 17:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_hades.srvtrck.com_0.localstorage-journal 2017-09-10 17:00 - 2017-09-10 17:01 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 17:00 - 2017-09-10 17:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 05:44 - 2017-09-11 05:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_secure-au.imrworldwide.com_0.localstorage 2017-09-11 05:44 - 2017-09-11 05:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_secure-au.imrworldwide.com_0.localstorage-journal 2017-09-10 17:00 - 2017-09-11 15:24 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 17:00 - 2017-09-11 15:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-12 07:23 - 2017-09-12 07:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_www.101domain.com_0.localstorage 2017-09-12 07:23 - 2017-09-12 07:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_www.101domain.com_0.localstorage-journal 2017-09-11 05:44 - 2017-09-11 05:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_www.babycentre.co.uk_0.localstorage 2017-09-11 05:44 - 2017-09-11 05:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_www.babycentre.co.uk_0.localstorage-journal 2017-09-11 15:24 - 2017-09-11 15:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_www.sousvidesupreme.com_0.localstorage 2017-09-11 15:24 - 2017-09-11 15:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_www.sousvidesupreme.com_0.localstorage-journal 2017-09-10 17:00 - 2017-09-10 17:01 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_www.touchofmodern.com_0.localstorage 2017-09-10 17:00 - 2017-09-10 17:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Local Storage\https_www.touchofmodern.com_0.localstorage-journal 2017-09-10 17:00 - 2017-09-10 17:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data 2017-09-10 17:00 - 2017-09-12 07:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash 2017-09-10 17:00 - 2017-09-10 17:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 17:00 - 2017-09-10 17:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 17:00 - 2017-09-10 17:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\WM745VDW 2017-09-10 17:00 - 2017-09-10 17:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 17:00 - 2017-09-10 17:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 17:00 - 2017-09-10 17:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T 2017-09-10 17:00 - 2017-09-12 07:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\cdn.stickyadstv.com 2017-09-10 17:00 - 2017-09-10 17:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\cdncache-a.akamaihd.net 2017-09-10 17:00 - 2017-09-10 17:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\cdncache-a.akamaihd.net\items 2017-09-10 17:00 - 2017-09-10 17:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 17:00 - 2017-09-11 15:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 17:00 - 2017-09-11 15:27 - 000000502 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 17:00 - 2017-09-12 07:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\eereader.com 2017-09-10 17:01 - 2017-09-12 07:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\efreader.com 2017-09-10 17:09 - 2017-09-11 05:51 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\efreader.com\analytics.sol 2017-09-10 17:00 - 2017-09-12 07:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\egreader.com 2017-09-10 17:03 - 2017-09-11 05:19 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\egreader.com\analytics.sol 2017-09-10 17:00 - 2017-09-10 17:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\macromedia.com 2017-09-10 17:00 - 2017-09-10 17:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\macromedia.com\support 2017-09-10 17:00 - 2017-09-10 17:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\macromedia.com\support\flashplayer 2017-09-10 17:00 - 2017-09-10 17:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\macromedia.com\support\flashplayer\sys 2017-09-10 17:00 - 2017-09-10 17:01 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 17:00 - 2017-09-10 17:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 17:00 - 2017-09-10 17:00 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 17:00 - 2017-09-10 17:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 17:00 - 2017-09-10 17:00 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 17:00 - 2017-09-10 17:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 17:00 - 2017-09-10 17:00 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 17:01 - 2017-09-10 17:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 17:01 - 2017-09-10 17:01 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 17:00 - 2017-09-10 17:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 17:00 - 2017-09-10 17:00 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data682\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\59LHKA3T\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-09 23:34 - 2017-09-12 09:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683 2017-09-09 23:34 - 2017-09-12 09:22 - 000358400 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Cookies 2017-09-09 23:34 - 2017-09-12 09:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Cookies-journal 2017-09-09 23:38 - 2017-09-12 06:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\databases 2017-09-09 23:38 - 2017-09-12 06:12 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\databases\Databases.db 2017-09-09 23:38 - 2017-09-12 06:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\databases\Databases.db-journal 2017-09-12 06:12 - 2017-09-12 06:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\databases\http_www.ems.com_0 2017-09-12 06:12 - 2017-09-12 06:12 - 000020480 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\databases\http_www.ems.com_0\1 2017-09-09 23:37 - 2017-09-12 06:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System 2017-09-12 06:19 - 2017-09-12 06:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\001 2017-09-12 06:19 - 2017-09-12 09:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\001\t 2017-09-12 09:17 - 2017-09-12 09:17 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\001\t\.usage 2017-09-12 09:17 - 2017-09-12 09:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\001\t\Paths 2017-09-12 09:17 - 2017-09-12 09:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\001\t\Paths\000003.log 2017-09-12 09:17 - 2017-09-12 09:17 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\001\t\Paths\CURRENT 2017-09-12 09:17 - 2017-09-12 09:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\001\t\Paths\LOCK 2017-09-12 09:17 - 2017-09-12 09:17 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\001\t\Paths\LOG 2017-09-12 09:17 - 2017-09-12 09:17 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\001\t\Paths\MANIFEST-000001 2017-09-11 02:01 - 2017-09-11 02:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\002 2017-09-11 02:01 - 2017-09-12 06:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\002\t 2017-09-12 06:12 - 2017-09-12 06:12 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\002\t\.usage 2017-09-12 06:12 - 2017-09-12 06:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\002\t\Paths 2017-09-12 06:12 - 2017-09-12 06:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\002\t\Paths\000003.log 2017-09-12 06:12 - 2017-09-12 06:12 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\002\t\Paths\CURRENT 2017-09-12 06:12 - 2017-09-12 06:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\002\t\Paths\LOCK 2017-09-12 06:12 - 2017-09-12 06:12 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\002\t\Paths\LOG 2017-09-12 06:12 - 2017-09-12 06:12 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\002\t\Paths\MANIFEST-000001 2017-09-11 02:03 - 2017-09-11 02:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\003 2017-09-11 02:03 - 2017-09-12 06:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\003\t 2017-09-12 06:12 - 2017-09-12 06:12 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\003\t\.usage 2017-09-12 06:12 - 2017-09-12 06:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\003\t\Paths 2017-09-12 06:12 - 2017-09-12 06:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\003\t\Paths\000003.log 2017-09-12 06:12 - 2017-09-12 06:12 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\003\t\Paths\CURRENT 2017-09-12 06:12 - 2017-09-12 06:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\003\t\Paths\LOCK 2017-09-12 06:12 - 2017-09-12 06:12 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\003\t\Paths\LOG 2017-09-12 06:12 - 2017-09-12 06:12 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\003\t\Paths\MANIFEST-000001 2017-09-12 06:16 - 2017-09-12 06:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\004 2017-09-12 06:16 - 2017-09-12 09:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\004\t 2017-09-12 09:17 - 2017-09-12 09:17 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\004\t\.usage 2017-09-12 09:17 - 2017-09-12 09:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\004\t\Paths 2017-09-12 09:17 - 2017-09-12 09:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\004\t\Paths\000003.log 2017-09-12 09:17 - 2017-09-12 09:17 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\004\t\Paths\CURRENT 2017-09-12 09:17 - 2017-09-12 09:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\004\t\Paths\LOCK 2017-09-12 09:17 - 2017-09-12 09:17 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\004\t\Paths\LOG 2017-09-12 09:17 - 2017-09-12 09:17 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\004\t\Paths\MANIFEST-000001 2017-09-09 23:37 - 2017-09-12 09:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\Origins 2017-09-09 23:37 - 2017-09-12 06:17 - 000000384 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\Origins\000003.log 2017-09-09 23:37 - 2017-09-09 23:37 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\Origins\CURRENT 2017-09-09 23:37 - 2017-09-09 23:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\Origins\LOCK 2017-09-09 23:37 - 2017-09-12 09:17 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\Origins\LOG 2017-09-09 23:37 - 2017-09-12 06:19 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\Origins\LOG.old 2017-09-09 23:37 - 2017-09-09 23:37 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\Origins\MANIFEST-000001 2017-09-09 23:38 - 2017-09-09 23:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\File System\Origins\lost 2017-09-09 23:38 - 2017-09-12 09:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB 2017-09-09 23:38 - 2017-09-09 23:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.complex.com_0.indexeddb.leveldb 2017-09-09 23:38 - 2017-09-09 23:38 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.complex.com_0.indexeddb.leveldb\000003.log 2017-09-09 23:38 - 2017-09-09 23:38 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.complex.com_0.indexeddb.leveldb\CURRENT 2017-09-09 23:38 - 2017-09-09 23:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.complex.com_0.indexeddb.leveldb\LOCK 2017-09-09 23:38 - 2017-09-09 23:39 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.complex.com_0.indexeddb.leveldb\LOG 2017-09-09 23:38 - 2017-09-09 23:38 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.complex.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-09 23:39 - 2017-09-09 23:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.courant.com_0.indexeddb.leveldb 2017-09-09 23:39 - 2017-09-09 23:39 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.courant.com_0.indexeddb.leveldb\000003.log 2017-09-09 23:39 - 2017-09-09 23:39 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.courant.com_0.indexeddb.leveldb\CURRENT 2017-09-09 23:39 - 2017-09-09 23:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.courant.com_0.indexeddb.leveldb\LOCK 2017-09-09 23:39 - 2017-09-09 23:39 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.courant.com_0.indexeddb.leveldb\LOG 2017-09-09 23:39 - 2017-09-09 23:39 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.courant.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 01:59 - 2017-09-11 01:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.foodnetwork.com_0.indexeddb.leveldb 2017-09-11 01:59 - 2017-09-11 01:59 - 000000188 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.foodnetwork.com_0.indexeddb.leveldb\000003.log 2017-09-11 01:59 - 2017-09-11 01:59 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.foodnetwork.com_0.indexeddb.leveldb\CURRENT 2017-09-11 01:59 - 2017-09-11 01:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.foodnetwork.com_0.indexeddb.leveldb\LOCK 2017-09-11 01:59 - 2017-09-11 01:59 - 000000162 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.foodnetwork.com_0.indexeddb.leveldb\LOG 2017-09-11 01:59 - 2017-09-11 01:59 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.foodnetwork.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 09:17 - 2017-09-12 09:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb 2017-09-12 09:17 - 2017-09-12 09:17 - 000000172 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\000003.log 2017-09-12 09:17 - 2017-09-12 09:17 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\CURRENT 2017-09-12 09:17 - 2017-09-12 09:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOCK 2017-09-12 09:17 - 2017-09-12 09:17 - 000000154 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOG 2017-09-12 09:17 - 2017-09-12 09:17 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-09 23:38 - 2017-09-09 23:38 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\https_x.vindicosuite.com_0.indexeddb.leveldb 2017-09-09 23:38 - 2017-09-09 23:38 - 000000188 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\https_x.vindicosuite.com_0.indexeddb.leveldb\000003.log 2017-09-09 23:38 - 2017-09-09 23:38 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\https_x.vindicosuite.com_0.indexeddb.leveldb\CURRENT 2017-09-09 23:38 - 2017-09-09 23:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\https_x.vindicosuite.com_0.indexeddb.leveldb\LOCK 2017-09-09 23:38 - 2017-09-09 23:38 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\https_x.vindicosuite.com_0.indexeddb.leveldb\LOG 2017-09-09 23:38 - 2017-09-09 23:38 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\IndexedDB\https_x.vindicosuite.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-09 23:34 - 2017-09-12 09:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage 2017-09-11 13:51 - 2017-09-11 13:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_adf.ly_0.localstorage 2017-09-11 13:51 - 2017-09-11 13:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_adf.ly_0.localstorage-journal 2017-09-09 23:37 - 2017-09-09 23:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-09 23:37 - 2017-09-09 23:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 13:50 - 2017-09-11 13:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_cdn.districtm.ca_0.localstorage 2017-09-11 13:50 - 2017-09-11 13:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_cdn.districtm.ca_0.localstorage-journal 2017-09-11 01:56 - 2017-09-11 01:56 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_chicoryapp.com_0.localstorage 2017-09-11 01:56 - 2017-09-11 01:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_chicoryapp.com_0.localstorage-journal 2017-09-11 13:51 - 2017-09-11 13:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_connexity.net_0.localstorage 2017-09-11 13:51 - 2017-09-11 13:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-09 23:40 - 2017-09-09 23:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_in.reuters.com_0.localstorage 2017-09-09 23:40 - 2017-09-09 23:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_in.reuters.com_0.localstorage-journal 2017-09-12 09:20 - 2017-09-12 09:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_mashable.com_0.localstorage 2017-09-12 09:20 - 2017-09-12 09:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_mashable.com_0.localstorage-journal 2017-09-12 06:14 - 2017-09-12 06:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_myfox8.com_0.localstorage 2017-09-12 06:14 - 2017-09-12 06:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_myfox8.com_0.localstorage-journal 2017-09-11 13:56 - 2017-09-11 13:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_nadaguides.com_0.localstorage 2017-09-11 13:56 - 2017-09-11 13:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_nadaguides.com_0.localstorage-journal 2017-09-11 01:56 - 2017-09-11 13:51 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 01:56 - 2017-09-11 13:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 02:00 - 2017-09-12 06:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-11 02:00 - 2017-09-12 06:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-11 13:54 - 2017-09-11 13:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.blabbermouth.net_0.localstorage 2017-09-11 13:54 - 2017-09-11 13:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.blabbermouth.net_0.localstorage-journal 2017-09-11 02:01 - 2017-09-11 02:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.bunsinmyoven.com_0.localstorage 2017-09-11 02:01 - 2017-09-11 02:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.bunsinmyoven.com_0.localstorage-journal 2017-09-12 06:17 - 2017-09-12 06:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.cartoonnetworkasia.com_0.localstorage 2017-09-12 06:17 - 2017-09-12 06:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.cartoonnetworkasia.com_0.localstorage-journal 2017-09-09 23:36 - 2017-09-12 09:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-09 23:36 - 2017-09-12 09:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-12 09:15 - 2017-09-12 09:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.collective-evolution.com_0.localstorage 2017-09-12 09:15 - 2017-09-12 09:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.collective-evolution.com_0.localstorage-journal 2017-09-09 23:39 - 2017-09-09 23:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.complex.com_0.localstorage 2017-09-09 23:39 - 2017-09-09 23:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-09 23:38 - 2017-09-09 23:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.courant.com_0.localstorage 2017-09-09 23:38 - 2017-09-09 23:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-11 13:53 - 2017-09-11 13:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.crash.net_0.localstorage 2017-09-11 13:53 - 2017-09-11 13:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-09 23:39 - 2017-09-09 23:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.denofgeek.com_0.localstorage 2017-09-09 23:39 - 2017-09-09 23:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.denofgeek.com_0.localstorage-journal 2017-09-12 06:12 - 2017-09-12 06:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.ems.com_0.localstorage 2017-09-12 06:12 - 2017-09-12 06:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.ems.com_0.localstorage-journal 2017-09-11 13:55 - 2017-09-12 06:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.food.com_0.localstorage 2017-09-11 13:55 - 2017-09-12 06:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-11 01:59 - 2017-09-11 02:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-11 01:59 - 2017-09-11 02:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-12 09:20 - 2017-09-12 09:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.happy-mothering.com_0.localstorage 2017-09-12 09:20 - 2017-09-12 09:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.happy-mothering.com_0.localstorage-journal 2017-09-09 23:38 - 2017-09-12 09:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.insideedition.com_0.localstorage 2017-09-09 23:38 - 2017-09-12 09:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.insideedition.com_0.localstorage-journal 2017-09-11 02:01 - 2017-09-11 02:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-11 02:01 - 2017-09-11 02:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-11 01:59 - 2017-09-12 06:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 01:59 - 2017-09-12 06:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 13:53 - 2017-09-11 13:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-11 13:53 - 2017-09-11 13:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-11 01:59 - 2017-09-11 13:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-11 01:59 - 2017-09-11 13:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-12 06:15 - 2017-09-12 06:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.macworld.com_0.localstorage 2017-09-12 06:15 - 2017-09-12 06:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-09 23:37 - 2017-09-11 01:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-09 23:37 - 2017-09-11 01:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-09 23:36 - 2017-09-09 23:36 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.nfl.com_0.localstorage 2017-09-09 23:36 - 2017-09-09 23:36 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 01:56 - 2017-09-11 01:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.onlineshoes.com_0.localstorage 2017-09-11 01:56 - 2017-09-11 01:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.onlineshoes.com_0.localstorage-journal 2017-09-12 09:18 - 2017-09-12 09:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.parents.com_0.localstorage 2017-09-12 09:18 - 2017-09-12 09:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-11 13:50 - 2017-09-11 13:50 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.sparknotes.com_0.localstorage 2017-09-11 13:50 - 2017-09-11 13:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\http_www.sparknotes.com_0.localstorage-journal 2017-09-09 23:38 - 2017-09-09 23:38 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_c.betrad.com_0.localstorage 2017-09-09 23:38 - 2017-09-09 23:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 13:50 - 2017-09-11 13:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_connexity.net_0.localstorage 2017-09-11 13:50 - 2017-09-11 13:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 01:56 - 2017-09-11 13:51 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 01:56 - 2017-09-11 13:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-12 09:15 - 2017-09-12 09:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_geizhals.at_0.localstorage 2017-09-12 09:15 - 2017-09-12 09:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_geizhals.at_0.localstorage-journal 2017-09-11 13:50 - 2017-09-11 13:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 13:50 - 2017-09-11 13:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 01:56 - 2017-09-11 13:51 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 01:56 - 2017-09-11 13:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-12 09:15 - 2017-09-12 09:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_w.soundcloud.com_0.localstorage 2017-09-12 09:15 - 2017-09-12 09:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_w.soundcloud.com_0.localstorage-journal 2017-09-11 01:56 - 2017-09-11 01:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_widgets.outbrain.com_0.localstorage 2017-09-11 01:56 - 2017-09-11 01:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_widgets.outbrain.com_0.localstorage-journal 2017-09-11 13:50 - 2017-09-11 13:51 - 000090112 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_www.cheapair.com_0.localstorage 2017-09-11 13:50 - 2017-09-11 13:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_www.cheapair.com_0.localstorage-journal 2017-09-12 06:12 - 2017-09-12 06:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_www.instagram.com_0.localstorage 2017-09-12 06:12 - 2017-09-12 06:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_www.instagram.com_0.localstorage-journal 2017-09-09 23:34 - 2017-09-09 23:34 - 001969152 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_www.pacogames.com_0.localstorage 2017-09-09 23:34 - 2017-09-09 23:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_www.pacogames.com_0.localstorage-journal 2017-09-12 06:12 - 2017-09-12 06:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_www.self.com_0.localstorage 2017-09-12 06:12 - 2017-09-12 06:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Local Storage\https_www.self.com_0.localstorage-journal 2017-09-09 23:34 - 2017-09-09 23:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data 2017-09-09 23:34 - 2017-09-12 09:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash 2017-09-09 23:34 - 2017-09-09 23:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-09 23:34 - 2017-09-09 23:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-09 23:34 - 2017-09-09 23:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\Y8QAY9BX 2017-09-09 23:34 - 2017-09-09 23:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot 2017-09-09 23:34 - 2017-09-09 23:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-09 23:34 - 2017-09-12 06:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ 2017-09-09 23:34 - 2017-09-12 09:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\cdn.stickyadstv.com 2017-09-11 01:56 - 2017-09-11 01:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\cdncache-a.akamaihd.net 2017-09-11 01:56 - 2017-09-11 01:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\cdncache-a.akamaihd.net\items 2017-09-11 01:56 - 2017-09-11 01:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 01:56 - 2017-09-11 13:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 01:56 - 2017-09-11 13:50 - 000000476 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-09 23:34 - 2017-09-12 09:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\eereader.com 2017-09-11 01:57 - 2017-09-11 01:57 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\eereader.com\analytics.sol 2017-09-09 23:36 - 2017-09-12 09:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\efreader.com 2017-09-09 23:43 - 2017-09-12 06:20 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\efreader.com\analytics.sol 2017-09-09 23:34 - 2017-09-12 09:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\egreader.com 2017-09-11 13:52 - 2017-09-11 13:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\inread.anyclip.com 2017-09-11 13:52 - 2017-09-11 13:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\inread.anyclip.com\ac# 2017-09-11 13:52 - 2017-09-11 13:52 - 000000441 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-09 23:34 - 2017-09-09 23:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\macromedia.com 2017-09-09 23:34 - 2017-09-09 23:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\macromedia.com\support 2017-09-09 23:34 - 2017-09-09 23:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\macromedia.com\support\flashplayer 2017-09-09 23:34 - 2017-09-12 06:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\macromedia.com\support\flashplayer\sys 2017-09-09 23:34 - 2017-09-12 06:12 - 000000536 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-09 23:34 - 2017-09-09 23:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-09 23:34 - 2017-09-09 23:34 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 01:56 - 2017-09-11 01:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 01:56 - 2017-09-11 01:56 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-09 23:34 - 2017-09-09 23:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-09 23:34 - 2017-09-09 23:34 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-09 23:36 - 2017-09-09 23:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-09 23:36 - 2017-09-09 23:36 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-09 23:34 - 2017-09-09 23:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-09 23:34 - 2017-09-09 23:34 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 13:52 - 2017-09-11 13:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 13:52 - 2017-09-11 13:52 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-12 06:12 - 2017-09-12 06:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\macromedia.com\support\flashplayer\sys\#mpsnare.iesnare.com 2017-09-12 06:12 - 2017-09-12 06:12 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\macromedia.com\support\flashplayer\sys\#mpsnare.iesnare.com\settings.sol 2017-09-12 06:12 - 2017-09-12 06:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\mpsnare.iesnare.com 2017-09-12 06:12 - 2017-09-12 06:12 - 000000079 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data683\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SB5YPVKJ\mpsnare.iesnare.com\stm.sol 2017-09-10 23:53 - 2017-09-11 13:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684 2017-09-10 23:53 - 2017-09-11 11:32 - 000220160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Cookies 2017-09-10 23:53 - 2017-09-11 11:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Cookies-journal 2017-09-11 11:26 - 2017-09-11 11:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\databases 2017-09-11 11:26 - 2017-09-11 11:26 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\databases\Databases.db 2017-09-11 11:26 - 2017-09-11 11:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\databases\Databases.db-journal 2017-09-11 11:27 - 2017-09-11 11:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\File System 2017-09-11 11:27 - 2017-09-11 11:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\File System\000 2017-09-11 11:27 - 2017-09-11 11:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\File System\000\t 2017-09-11 11:30 - 2017-09-11 11:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\File System\001 2017-09-11 11:30 - 2017-09-11 11:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\File System\001\t 2017-09-11 11:31 - 2017-09-11 11:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\File System\002 2017-09-11 11:31 - 2017-09-11 11:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\File System\002\t 2017-09-11 11:27 - 2017-09-11 11:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\File System\Origins 2017-09-11 11:27 - 2017-09-11 11:32 - 000000237 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\File System\Origins\000003.log 2017-09-11 11:27 - 2017-09-11 11:27 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\File System\Origins\CURRENT 2017-09-11 11:27 - 2017-09-11 11:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\File System\Origins\LOCK 2017-09-11 11:27 - 2017-09-11 11:31 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\File System\Origins\LOG 2017-09-11 11:27 - 2017-09-11 11:30 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\File System\Origins\LOG.old 2017-09-11 11:27 - 2017-09-11 11:27 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\File System\Origins\MANIFEST-000001 2017-09-11 11:26 - 2017-09-11 11:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\IndexedDB 2017-09-11 11:26 - 2017-09-11 11:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb 2017-09-11 11:26 - 2017-09-11 11:26 - 000000198 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\000003.log 2017-09-11 11:26 - 2017-09-11 11:26 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\CURRENT 2017-09-11 11:26 - 2017-09-11 11:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\LOCK 2017-09-11 11:26 - 2017-09-11 11:26 - 000000168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\LOG 2017-09-11 11:26 - 2017-09-11 11:26 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\IndexedDB\http_www.popularmechanics.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 23:53 - 2017-09-11 11:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage 2017-09-10 23:55 - 2017-09-10 23:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 23:55 - 2017-09-10 23:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 23:54 - 2017-09-10 23:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 23:54 - 2017-09-10 23:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 23:59 - 2017-09-11 00:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_mashable.com_0.localstorage 2017-09-10 23:59 - 2017-09-11 00:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_mashable.com_0.localstorage-journal 2017-09-10 23:53 - 2017-09-10 23:54 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 23:53 - 2017-09-10 23:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 11:27 - 2017-09-11 11:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-11 11:27 - 2017-09-11 11:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-10 23:58 - 2017-09-10 23:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.blabbermouth.net_0.localstorage 2017-09-10 23:58 - 2017-09-10 23:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.blabbermouth.net_0.localstorage-journal 2017-09-11 11:25 - 2017-09-11 11:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.businessinsider.com_0.localstorage 2017-09-11 11:25 - 2017-09-11 11:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.businessinsider.com_0.localstorage-journal 2017-09-10 23:55 - 2017-09-10 23:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 23:55 - 2017-09-10 23:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 23:53 - 2017-09-11 11:29 - 000012288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-10 23:53 - 2017-09-11 11:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-11 11:28 - 2017-09-11 11:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.flare.com_0.localstorage 2017-09-11 11:28 - 2017-09-11 11:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.flare.com_0.localstorage-journal 2017-09-11 11:27 - 2017-09-11 11:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.foxnews.com_0.localstorage 2017-09-11 11:27 - 2017-09-11 11:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.foxnews.com_0.localstorage-journal 2017-09-11 11:25 - 2017-09-11 11:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 11:25 - 2017-09-11 11:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 23:58 - 2017-09-11 00:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.kcra.com_0.localstorage 2017-09-10 23:58 - 2017-09-11 00:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.kcra.com_0.localstorage-journal 2017-09-10 23:56 - 2017-09-10 23:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.latimes.com_0.localstorage 2017-09-10 23:56 - 2017-09-10 23:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-11 00:00 - 2017-09-11 00:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 00:00 - 2017-09-11 00:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 23:57 - 2017-09-10 23:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.parents.com_0.localstorage 2017-09-10 23:57 - 2017-09-10 23:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-11 11:26 - 2017-09-11 11:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-11 11:26 - 2017-09-11 11:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-11 11:23 - 2017-09-11 11:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.thedenverchannel.com_0.localstorage 2017-09-11 11:23 - 2017-09-11 11:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\http_www.thedenverchannel.com_0.localstorage-journal 2017-09-11 11:23 - 2017-09-11 11:23 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 11:23 - 2017-09-11 11:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 11:23 - 2017-09-11 11:24 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 11:23 - 2017-09-11 11:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 23:53 - 2017-09-10 23:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\https_sb.monetate.net_0.localstorage 2017-09-10 23:53 - 2017-09-10 23:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\https_sb.monetate.net_0.localstorage-journal 2017-09-10 23:53 - 2017-09-11 11:23 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 23:53 - 2017-09-11 11:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 23:53 - 2017-09-10 23:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\https_widgets.outbrain.com_0.localstorage 2017-09-10 23:53 - 2017-09-10 23:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\https_widgets.outbrain.com_0.localstorage-journal 2017-09-11 11:23 - 2017-09-11 11:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\https_www.48hourprint.com_0.localstorage 2017-09-11 11:23 - 2017-09-11 11:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\https_www.48hourprint.com_0.localstorage-journal 2017-09-10 23:53 - 2017-09-10 23:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\https_www.abebooks.com_0.localstorage 2017-09-10 23:53 - 2017-09-10 23:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Local Storage\https_www.abebooks.com_0.localstorage-journal 2017-09-10 23:53 - 2017-09-10 23:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data 2017-09-10 23:53 - 2017-09-11 11:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash 2017-09-10 23:53 - 2017-09-10 23:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 23:53 - 2017-09-10 23:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 23:53 - 2017-09-10 23:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\9H8PER23 2017-09-10 23:53 - 2017-09-10 23:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 23:53 - 2017-09-10 23:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 23:53 - 2017-09-11 11:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU 2017-09-10 23:55 - 2017-09-10 23:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\cdn.dashbid.io 2017-09-10 23:55 - 2017-09-10 23:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\cdn.dashbid.io\prod 2017-09-10 23:55 - 2017-09-10 23:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-10 23:55 - 2017-09-10 23:55 - 000000069 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-10 23:53 - 2017-09-11 11:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\cdn.stickyadstv.com 2017-09-10 23:53 - 2017-09-10 23:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\cdncache-a.akamaihd.net 2017-09-10 23:53 - 2017-09-10 23:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\cdncache-a.akamaihd.net\items 2017-09-10 23:53 - 2017-09-10 23:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 23:53 - 2017-09-11 11:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 23:53 - 2017-09-11 11:27 - 000000477 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 23:53 - 2017-09-11 11:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\eereader.com 2017-09-11 11:28 - 2017-09-11 11:28 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\eereader.com\analytics.sol 2017-09-10 23:55 - 2017-09-11 11:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\efreader.com 2017-09-11 11:30 - 2017-09-11 11:32 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\efreader.com\analytics.sol 2017-09-10 23:53 - 2017-09-11 11:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\egreader.com 2017-09-11 11:24 - 2017-09-11 11:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\inread.anyclip.com 2017-09-11 11:24 - 2017-09-11 11:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\inread.anyclip.com\ac# 2017-09-11 11:24 - 2017-09-11 11:24 - 000000449 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-10 23:53 - 2017-09-10 23:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\macromedia.com 2017-09-10 23:53 - 2017-09-10 23:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\macromedia.com\support 2017-09-10 23:53 - 2017-09-10 23:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\macromedia.com\support\flashplayer 2017-09-10 23:53 - 2017-09-11 11:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\macromedia.com\support\flashplayer\sys 2017-09-10 23:53 - 2017-09-11 11:24 - 000000531 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 23:55 - 2017-09-10 23:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-10 23:55 - 2017-09-10 23:55 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-10 23:53 - 2017-09-10 23:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 23:53 - 2017-09-10 23:53 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 23:53 - 2017-09-10 23:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 23:53 - 2017-09-10 23:53 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 23:53 - 2017-09-10 23:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 23:53 - 2017-09-10 23:53 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 23:55 - 2017-09-10 23:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 23:55 - 2017-09-10 23:55 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 23:53 - 2017-09-10 23:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 23:53 - 2017-09-10 23:53 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 11:24 - 2017-09-11 11:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 11:24 - 2017-09-11 11:24 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data684\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\GPPT7WVU\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-10 02:06 - 2017-09-10 13:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685 2017-09-10 02:06 - 2017-09-10 12:24 - 000237568 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Cookies 2017-09-10 02:06 - 2017-09-10 12:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Cookies-journal 2017-09-10 02:11 - 2017-09-10 02:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\databases 2017-09-10 02:11 - 2017-09-10 02:11 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\databases\Databases.db 2017-09-10 02:11 - 2017-09-10 02:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\databases\Databases.db-journal 2017-09-10 02:07 - 2017-09-10 12:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\File System 2017-09-10 02:07 - 2017-09-10 12:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\File System\Origins 2017-09-10 02:07 - 2017-09-10 12:23 - 000000401 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\File System\Origins\000003.log 2017-09-10 12:22 - 2017-09-10 12:22 - 000000304 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\File System\Origins\000004.ldb 2017-09-10 12:22 - 2017-09-10 12:22 - 000000304 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\File System\Origins\000005.ldb 2017-09-10 02:07 - 2017-09-10 02:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\File System\Origins\CURRENT 2017-09-10 02:07 - 2017-09-10 02:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\File System\Origins\LOCK 2017-09-10 02:07 - 2017-09-10 12:23 - 000000744 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\File System\Origins\LOG 2017-09-10 02:07 - 2017-09-10 12:21 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\File System\Origins\LOG.old 2017-09-10 02:07 - 2017-09-10 02:07 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\File System\Origins\MANIFEST-000001 2017-09-10 12:22 - 2017-09-10 12:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\File System\Origins\lost 2017-09-10 02:11 - 2017-09-10 12:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\IndexedDB 2017-09-10 02:11 - 2017-09-10 02:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\IndexedDB\http_www.food.com_0.indexeddb.leveldb 2017-09-10 02:11 - 2017-09-10 02:11 - 000000174 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\IndexedDB\http_www.food.com_0.indexeddb.leveldb\000003.log 2017-09-10 02:11 - 2017-09-10 02:11 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\IndexedDB\http_www.food.com_0.indexeddb.leveldb\CURRENT 2017-09-10 02:11 - 2017-09-10 02:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\IndexedDB\http_www.food.com_0.indexeddb.leveldb\LOCK 2017-09-10 02:11 - 2017-09-10 02:11 - 000000156 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\IndexedDB\http_www.food.com_0.indexeddb.leveldb\LOG 2017-09-10 02:11 - 2017-09-10 02:11 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\IndexedDB\http_www.food.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 12:22 - 2017-09-10 12:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb 2017-09-10 12:22 - 2017-09-10 12:22 - 000000172 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\000003.log 2017-09-10 12:22 - 2017-09-10 12:22 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\CURRENT 2017-09-10 12:22 - 2017-09-10 12:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOCK 2017-09-10 12:22 - 2017-09-10 12:22 - 000000155 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOG 2017-09-10 12:22 - 2017-09-10 12:22 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 12:16 - 2017-09-10 12:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\IndexedDB\https_www.whattoexpect.com_0.indexeddb.leveldb 2017-09-10 12:16 - 2017-09-10 12:16 - 000000192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\IndexedDB\https_www.whattoexpect.com_0.indexeddb.leveldb\000003.log 2017-09-10 12:16 - 2017-09-10 12:16 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\IndexedDB\https_www.whattoexpect.com_0.indexeddb.leveldb\CURRENT 2017-09-10 12:16 - 2017-09-10 12:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\IndexedDB\https_www.whattoexpect.com_0.indexeddb.leveldb\LOCK 2017-09-10 12:16 - 2017-09-10 12:16 - 000000165 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\IndexedDB\https_www.whattoexpect.com_0.indexeddb.leveldb\LOG 2017-09-10 12:16 - 2017-09-10 12:16 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\IndexedDB\https_www.whattoexpect.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 02:06 - 2017-09-10 12:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage 2017-09-10 02:06 - 2017-09-10 02:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 02:06 - 2017-09-10 02:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 02:09 - 2017-09-10 02:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_connexity.net_0.localstorage 2017-09-10 02:09 - 2017-09-10 02:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 02:08 - 2017-09-10 02:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_davedameshek.nfl.com_0.localstorage 2017-09-10 02:08 - 2017-09-10 02:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_davedameshek.nfl.com_0.localstorage-journal 2017-09-10 02:07 - 2017-09-10 02:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 02:07 - 2017-09-10 02:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 02:06 - 2017-09-10 02:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_tpc.googlesyndication.com_0.localstorage 2017-09-10 02:06 - 2017-09-10 02:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_tpc.googlesyndication.com_0.localstorage-journal 2017-09-10 12:21 - 2017-09-10 12:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-10 12:21 - 2017-09-10 12:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-10 12:21 - 2017-09-10 12:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.caranddriver.com_0.localstorage 2017-09-10 12:21 - 2017-09-10 12:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.caranddriver.com_0.localstorage-journal 2017-09-10 02:08 - 2017-09-10 02:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 02:08 - 2017-09-10 02:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 02:10 - 2017-09-10 02:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.complex.com_0.localstorage 2017-09-10 02:10 - 2017-09-10 02:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-10 12:20 - 2017-09-10 12:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.finecooking.com_0.localstorage 2017-09-10 12:20 - 2017-09-10 12:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.finecooking.com_0.localstorage-journal 2017-09-10 02:10 - 2017-09-10 02:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.food.com_0.localstorage 2017-09-10 02:10 - 2017-09-10 02:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-10 02:06 - 2017-09-10 02:07 - 000011264 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.fox5vegas.com_0.localstorage 2017-09-10 02:06 - 2017-09-10 02:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.fox5vegas.com_0.localstorage-journal 2017-09-10 02:11 - 2017-09-10 02:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.hgtv.com_0.localstorage 2017-09-10 02:11 - 2017-09-10 02:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.hgtv.com_0.localstorage-journal 2017-09-10 12:20 - 2017-09-10 12:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.innerself.com_0.localstorage 2017-09-10 12:20 - 2017-09-10 12:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.innerself.com_0.localstorage-journal 2017-09-10 02:12 - 2017-09-10 02:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-10 02:12 - 2017-09-10 02:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-10 02:08 - 2017-09-10 12:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 02:08 - 2017-09-10 12:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 02:09 - 2017-09-10 02:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-10 02:09 - 2017-09-10 02:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-10 02:12 - 2017-09-10 02:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 02:12 - 2017-09-10 02:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 02:06 - 2017-09-10 02:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.paperdirect.com_0.localstorage 2017-09-10 02:06 - 2017-09-10 02:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\http_www.paperdirect.com_0.localstorage-journal 2017-09-10 12:16 - 2017-09-10 12:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\https_a.zdbb.net_0.localstorage 2017-09-10 12:16 - 2017-09-10 12:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\https_a.zdbb.net_0.localstorage-journal 2017-09-10 02:10 - 2017-09-10 02:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\https_auid.adledge.com_0.localstorage 2017-09-10 02:10 - 2017-09-10 02:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\https_auid.adledge.com_0.localstorage-journal 2017-09-10 12:22 - 2017-09-10 12:22 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 12:22 - 2017-09-10 12:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 02:09 - 2017-09-10 02:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\https_connexity.net_0.localstorage 2017-09-10 02:09 - 2017-09-10 02:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 02:07 - 2017-09-10 02:07 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 02:07 - 2017-09-10 02:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 02:07 - 2017-09-10 02:07 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 02:07 - 2017-09-10 02:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 02:06 - 2017-09-10 02:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\https_td.yieldify.com_0.localstorage 2017-09-10 02:06 - 2017-09-10 02:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\https_td.yieldify.com_0.localstorage-journal 2017-09-10 12:16 - 2017-09-10 12:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\https_www.whattoexpect.com_0.localstorage 2017-09-10 12:16 - 2017-09-10 12:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Local Storage\https_www.whattoexpect.com_0.localstorage-journal 2017-09-10 02:06 - 2017-09-10 02:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data 2017-09-10 02:06 - 2017-09-10 12:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash 2017-09-10 02:06 - 2017-09-10 02:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 02:06 - 2017-09-10 02:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 02:06 - 2017-09-10 02:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\EHGD28AM 2017-09-10 02:06 - 2017-09-10 02:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 02:06 - 2017-09-10 02:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 02:06 - 2017-09-10 02:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ 2017-09-10 02:06 - 2017-09-10 12:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\cdn.stickyadstv.com 2017-09-10 02:06 - 2017-09-10 02:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\cdncache-a.akamaihd.net 2017-09-10 02:06 - 2017-09-10 02:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\cdncache-a.akamaihd.net\items 2017-09-10 02:06 - 2017-09-10 02:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 02:06 - 2017-09-10 02:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 02:06 - 2017-09-10 02:07 - 000000335 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 02:06 - 2017-09-10 12:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\eereader.com 2017-09-10 12:18 - 2017-09-10 12:18 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\eereader.com\analytics.sol 2017-09-10 02:08 - 2017-09-10 12:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\efreader.com 2017-09-10 12:20 - 2017-09-10 12:20 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\efreader.com\analytics.sol 2017-09-10 02:06 - 2017-09-10 12:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\egreader.com 2017-09-10 02:08 - 2017-09-10 12:23 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\egreader.com\analytics.sol 2017-09-10 02:06 - 2017-09-10 02:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\macromedia.com 2017-09-10 02:06 - 2017-09-10 02:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\macromedia.com\support 2017-09-10 02:06 - 2017-09-10 02:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\macromedia.com\support\flashplayer 2017-09-10 02:06 - 2017-09-10 02:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\macromedia.com\support\flashplayer\sys 2017-09-10 02:06 - 2017-09-10 02:08 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 02:06 - 2017-09-10 02:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 02:06 - 2017-09-10 02:06 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 02:06 - 2017-09-10 02:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 02:06 - 2017-09-10 02:06 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 02:06 - 2017-09-10 02:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 02:06 - 2017-09-10 02:06 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 02:08 - 2017-09-10 02:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 02:08 - 2017-09-10 02:08 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 02:06 - 2017-09-10 02:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 02:06 - 2017-09-10 02:06 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data685\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\VLJJ2DVJ\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 20:01 - 2017-09-12 06:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686 2017-09-10 20:01 - 2017-09-12 05:19 - 000290816 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Cookies 2017-09-10 20:01 - 2017-09-12 05:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Cookies-journal 2017-09-10 20:03 - 2017-09-10 20:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\databases 2017-09-10 20:03 - 2017-09-10 20:03 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\databases\Databases.db 2017-09-10 20:03 - 2017-09-10 20:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\databases\Databases.db-journal 2017-09-10 20:04 - 2017-09-12 05:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\File System 2017-09-10 20:04 - 2017-09-12 05:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\File System\Origins 2017-09-10 20:04 - 2017-09-12 05:18 - 000000304 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\File System\Origins\000003.log 2017-09-12 05:18 - 2017-09-12 05:18 - 000000249 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\File System\Origins\000004.ldb 2017-09-12 05:18 - 2017-09-12 05:18 - 000000249 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\File System\Origins\000005.ldb 2017-09-10 20:04 - 2017-09-10 20:04 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\File System\Origins\CURRENT 2017-09-10 20:04 - 2017-09-10 20:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\File System\Origins\LOCK 2017-09-10 20:04 - 2017-09-12 05:18 - 000000741 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\File System\Origins\LOG 2017-09-10 20:04 - 2017-09-12 05:16 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\File System\Origins\LOG.old 2017-09-10 20:04 - 2017-09-10 20:04 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\File System\Origins\MANIFEST-000001 2017-09-12 05:18 - 2017-09-12 05:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\File System\Origins\lost 2017-09-10 20:03 - 2017-09-12 05:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB 2017-09-12 05:16 - 2017-09-12 05:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\http_cas.sv.us.criteo.com_0.indexeddb.leveldb 2017-09-12 05:16 - 2017-09-12 05:16 - 000000190 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\http_cas.sv.us.criteo.com_0.indexeddb.leveldb\000003.log 2017-09-12 05:16 - 2017-09-12 05:16 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\http_cas.sv.us.criteo.com_0.indexeddb.leveldb\CURRENT 2017-09-12 05:16 - 2017-09-12 05:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\http_cas.sv.us.criteo.com_0.indexeddb.leveldb\LOCK 2017-09-12 05:16 - 2017-09-12 05:16 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\http_cas.sv.us.criteo.com_0.indexeddb.leveldb\LOG 2017-09-12 05:16 - 2017-09-12 05:16 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\http_cas.sv.us.criteo.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 20:03 - 2017-09-10 20:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\http_cas.va.us.criteo.com_0.indexeddb.leveldb 2017-09-10 20:03 - 2017-09-10 20:03 - 000000190 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\http_cas.va.us.criteo.com_0.indexeddb.leveldb\000003.log 2017-09-10 20:03 - 2017-09-10 20:03 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\http_cas.va.us.criteo.com_0.indexeddb.leveldb\CURRENT 2017-09-10 20:03 - 2017-09-10 20:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\http_cas.va.us.criteo.com_0.indexeddb.leveldb\LOCK 2017-09-10 20:03 - 2017-09-10 20:03 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\http_cas.va.us.criteo.com_0.indexeddb.leveldb\LOG 2017-09-10 20:03 - 2017-09-10 20:03 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\http_cas.va.us.criteo.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 20:06 - 2017-09-10 20:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb 2017-09-10 20:06 - 2017-09-10 20:06 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb\000003.log 2017-09-10 20:06 - 2017-09-10 20:06 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb\CURRENT 2017-09-10 20:06 - 2017-09-10 20:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb\LOCK 2017-09-10 20:06 - 2017-09-10 20:06 - 000000160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb\LOG 2017-09-10 20:06 - 2017-09-10 20:06 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 05:18 - 2017-09-12 05:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb 2017-09-12 05:18 - 2017-09-12 05:18 - 000000196 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\000003.log 2017-09-12 05:18 - 2017-09-12 05:18 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\CURRENT 2017-09-12 05:18 - 2017-09-12 05:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOCK 2017-09-12 05:18 - 2017-09-12 05:18 - 000000374 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOG 2017-09-12 05:18 - 2017-09-12 05:18 - 000000166 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOG.old 2017-09-12 05:18 - 2017-09-12 05:18 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 20:01 - 2017-09-12 05:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage 2017-09-12 05:11 - 2017-09-12 05:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_6960094.fls.doubleclick.net_0.localstorage 2017-09-12 05:11 - 2017-09-12 05:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_6960094.fls.doubleclick.net_0.localstorage-journal 2017-09-10 20:03 - 2017-09-10 20:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 20:03 - 2017-09-10 20:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-12 05:11 - 2017-09-12 05:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-12 05:11 - 2017-09-12 05:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-12 05:14 - 2017-09-12 05:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_connexity.net_0.localstorage 2017-09-12 05:14 - 2017-09-12 05:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 20:06 - 2017-09-10 20:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-10 20:06 - 2017-09-10 20:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-12 05:16 - 2017-09-12 05:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.blessyouboys.com_0.localstorage 2017-09-12 05:16 - 2017-09-12 05:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.blessyouboys.com_0.localstorage-journal 2017-09-10 20:03 - 2017-09-10 20:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 20:03 - 2017-09-10 20:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 20:05 - 2017-09-10 20:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.courant.com_0.localstorage 2017-09-10 20:05 - 2017-09-10 20:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-12 05:11 - 2017-09-12 05:13 - 000014336 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-12 05:11 - 2017-09-12 05:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-10 20:06 - 2017-09-10 20:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.espn.co.uk_0.localstorage 2017-09-10 20:06 - 2017-09-10 20:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.espn.co.uk_0.localstorage-journal 2017-09-12 05:16 - 2017-09-12 05:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.fitnessmagazine.com_0.localstorage 2017-09-12 05:16 - 2017-09-12 05:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.fitnessmagazine.com_0.localstorage-journal 2017-09-12 05:17 - 2017-09-12 05:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.food.com_0.localstorage 2017-09-12 05:17 - 2017-09-12 05:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-12 05:14 - 2017-09-12 05:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.instyle.com_0.localstorage 2017-09-12 05:14 - 2017-09-12 05:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-10 20:04 - 2017-09-10 20:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 20:04 - 2017-09-10 20:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 20:04 - 2017-09-10 20:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-10 20:04 - 2017-09-10 20:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-12 05:18 - 2017-09-12 05:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.latimes.com_0.localstorage 2017-09-12 05:18 - 2017-09-12 05:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-10 20:07 - 2017-09-10 20:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 20:07 - 2017-09-10 20:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-12 05:11 - 2017-09-12 05:13 - 000019456 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.ninewest.com_0.localstorage 2017-09-12 05:11 - 2017-09-12 05:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.ninewest.com_0.localstorage-journal 2017-09-10 20:04 - 2017-09-12 05:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.parents.com_0.localstorage 2017-09-10 20:04 - 2017-09-12 05:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-12 05:12 - 2017-09-12 05:12 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_c.betrad.com_0.localstorage 2017-09-12 05:12 - 2017-09-12 05:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-12 05:14 - 2017-09-12 05:14 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_connexity.net_0.localstorage 2017-09-12 05:14 - 2017-09-12 05:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 20:01 - 2017-09-10 20:01 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 20:01 - 2017-09-10 20:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-12 05:18 - 2017-09-12 05:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_player.mediabong.net_0.localstorage 2017-09-12 05:18 - 2017-09-12 05:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_player.mediabong.net_0.localstorage-journal 2017-09-10 20:01 - 2017-09-10 20:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 20:01 - 2017-09-10 20:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-12 05:11 - 2017-09-12 05:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_sb.monetate.net_0.localstorage 2017-09-12 05:11 - 2017-09-12 05:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_sb.monetate.net_0.localstorage-journal 2017-09-10 20:01 - 2017-09-10 20:01 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 20:01 - 2017-09-10 20:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-12 05:11 - 2017-09-12 05:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_widgets.outbrain.com_0.localstorage 2017-09-12 05:11 - 2017-09-12 05:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_widgets.outbrain.com_0.localstorage-journal 2017-09-10 20:01 - 2017-09-10 20:03 - 001888256 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_www.pacogames.com_0.localstorage 2017-09-10 20:01 - 2017-09-10 20:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_www.pacogames.com_0.localstorage-journal 2017-09-10 20:01 - 2017-09-10 20:03 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_www.spectrum.com_0.localstorage 2017-09-10 20:01 - 2017-09-10 20:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_www.spectrum.com_0.localstorage-journal 2017-09-12 05:11 - 2017-09-12 05:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_www.youtube.com_0.localstorage 2017-09-12 05:11 - 2017-09-12 05:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-10 20:01 - 2017-09-10 20:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data 2017-09-10 20:01 - 2017-09-12 05:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash 2017-09-10 20:01 - 2017-09-10 20:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 20:01 - 2017-09-10 20:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 20:01 - 2017-09-10 20:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\QFZT6SGH 2017-09-10 20:01 - 2017-09-10 20:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 20:01 - 2017-09-10 20:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 20:01 - 2017-09-10 20:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA 2017-09-10 20:01 - 2017-09-12 05:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\cdn.stickyadstv.com 2017-09-10 20:01 - 2017-09-10 20:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\cdncache-a.akamaihd.net 2017-09-10 20:01 - 2017-09-10 20:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\cdncache-a.akamaihd.net\items 2017-09-10 20:01 - 2017-09-10 20:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 20:01 - 2017-09-10 20:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 20:01 - 2017-09-10 20:05 - 000000417 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 20:01 - 2017-09-12 05:14 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\eereader.com 2017-09-12 05:12 - 2017-09-12 05:13 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\eereader.com\analytics.sol 2017-09-10 20:03 - 2017-09-12 05:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\efreader.com 2017-09-10 20:11 - 2017-09-12 05:18 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\efreader.com\analytics.sol 2017-09-10 20:01 - 2017-09-12 05:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\egreader.com 2017-09-10 20:03 - 2017-09-10 20:03 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\egreader.com\analytics.sol 2017-09-10 20:01 - 2017-09-10 20:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\macromedia.com 2017-09-10 20:01 - 2017-09-10 20:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\macromedia.com\support 2017-09-10 20:01 - 2017-09-10 20:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\macromedia.com\support\flashplayer 2017-09-10 20:01 - 2017-09-10 20:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\macromedia.com\support\flashplayer\sys 2017-09-10 20:01 - 2017-09-10 20:03 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 20:01 - 2017-09-10 20:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 20:01 - 2017-09-10 20:01 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 20:01 - 2017-09-10 20:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 20:01 - 2017-09-10 20:01 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 20:01 - 2017-09-10 20:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 20:01 - 2017-09-10 20:01 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 20:03 - 2017-09-10 20:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 20:03 - 2017-09-10 20:03 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 20:01 - 2017-09-10 20:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 20:01 - 2017-09-10 20:01 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data686\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\R6CF8QGA\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 01:56 - 2017-09-11 13:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687 2017-09-10 01:56 - 2017-09-11 12:57 - 000340992 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Cookies 2017-09-10 01:56 - 2017-09-11 12:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Cookies-journal 2017-09-10 23:07 - 2017-09-10 23:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\databases 2017-09-10 23:07 - 2017-09-10 23:07 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\databases\Databases.db 2017-09-10 23:07 - 2017-09-10 23:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\databases\Databases.db-journal 2017-09-10 02:01 - 2017-09-10 23:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System 2017-09-10 15:39 - 2017-09-10 15:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\004 2017-09-10 15:39 - 2017-09-11 12:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\004\t 2017-09-10 23:07 - 2017-09-11 12:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\004\t\Paths 2017-09-10 23:07 - 2017-09-10 23:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\004\t\Paths\000003.log 2017-09-10 23:07 - 2017-09-10 23:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\004\t\Paths\CURRENT 2017-09-10 23:07 - 2017-09-10 23:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\004\t\Paths\LOCK 2017-09-10 23:07 - 2017-09-11 12:53 - 000000307 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\004\t\Paths\LOG 2017-09-10 23:07 - 2017-09-10 23:07 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\004\t\Paths\LOG.old 2017-09-10 23:07 - 2017-09-10 23:07 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\004\t\Paths\MANIFEST-000001 2017-09-10 15:42 - 2017-09-10 15:42 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\005 2017-09-10 15:42 - 2017-09-10 23:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\005\t 2017-09-10 23:07 - 2017-09-10 23:07 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\005\t\.usage 2017-09-10 23:07 - 2017-09-10 23:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\005\t\Paths 2017-09-10 23:07 - 2017-09-10 23:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\005\t\Paths\000003.log 2017-09-10 23:07 - 2017-09-10 23:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\005\t\Paths\CURRENT 2017-09-10 23:07 - 2017-09-10 23:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\005\t\Paths\LOCK 2017-09-10 23:07 - 2017-09-10 23:07 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\005\t\Paths\LOG 2017-09-10 23:07 - 2017-09-10 23:07 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\005\t\Paths\MANIFEST-000001 2017-09-10 15:43 - 2017-09-10 15:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\006 2017-09-10 15:43 - 2017-09-10 23:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\006\t 2017-09-10 23:07 - 2017-09-10 23:07 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\006\t\.usage 2017-09-10 23:07 - 2017-09-10 23:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\006\t\Paths 2017-09-10 23:07 - 2017-09-10 23:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\006\t\Paths\000003.log 2017-09-10 23:07 - 2017-09-10 23:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\006\t\Paths\CURRENT 2017-09-10 23:07 - 2017-09-10 23:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\006\t\Paths\LOCK 2017-09-10 23:07 - 2017-09-10 23:07 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\006\t\Paths\LOG 2017-09-10 23:07 - 2017-09-10 23:07 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\006\t\Paths\MANIFEST-000001 2017-09-10 23:05 - 2017-09-10 23:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\007 2017-09-10 23:05 - 2017-09-10 23:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\007\t 2017-09-10 23:07 - 2017-09-10 23:07 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\007\t\.usage 2017-09-10 23:07 - 2017-09-10 23:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\007\t\Paths 2017-09-10 23:07 - 2017-09-10 23:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\007\t\Paths\000003.log 2017-09-10 23:07 - 2017-09-10 23:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\007\t\Paths\CURRENT 2017-09-10 23:07 - 2017-09-10 23:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\007\t\Paths\LOCK 2017-09-10 23:07 - 2017-09-10 23:07 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\007\t\Paths\LOG 2017-09-10 23:07 - 2017-09-10 23:07 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\007\t\Paths\MANIFEST-000001 2017-09-10 02:01 - 2017-09-11 12:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\Origins 2017-09-10 02:01 - 2017-09-10 23:06 - 000000584 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\Origins\000003.log 2017-09-11 12:53 - 2017-09-11 12:53 - 000000382 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\Origins\000004.ldb 2017-09-11 12:53 - 2017-09-11 12:53 - 000000382 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\Origins\000005.ldb 2017-09-10 02:01 - 2017-09-10 02:01 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\Origins\CURRENT 2017-09-10 02:01 - 2017-09-10 02:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\Origins\LOCK 2017-09-10 02:01 - 2017-09-11 12:53 - 000000744 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\Origins\LOG 2017-09-10 02:01 - 2017-09-10 23:08 - 000000744 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\Origins\LOG.old 2017-09-10 02:01 - 2017-09-10 02:01 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\Origins\MANIFEST-000001 2017-09-10 12:03 - 2017-09-10 12:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\File System\Origins\lost 2017-09-10 23:07 - 2017-09-11 12:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\IndexedDB 2017-09-11 12:52 - 2017-09-11 12:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\IndexedDB\http_www.dailymail.co.uk_0.indexeddb.leveldb 2017-09-11 12:52 - 2017-09-11 12:52 - 000000188 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\IndexedDB\http_www.dailymail.co.uk_0.indexeddb.leveldb\000003.log 2017-09-11 12:52 - 2017-09-11 12:52 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\IndexedDB\http_www.dailymail.co.uk_0.indexeddb.leveldb\CURRENT 2017-09-11 12:52 - 2017-09-11 12:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\IndexedDB\http_www.dailymail.co.uk_0.indexeddb.leveldb\LOCK 2017-09-11 12:52 - 2017-09-11 12:52 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\IndexedDB\http_www.dailymail.co.uk_0.indexeddb.leveldb\LOG 2017-09-11 12:52 - 2017-09-11 12:52 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\IndexedDB\http_www.dailymail.co.uk_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 12:53 - 2017-09-11 12:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb 2017-09-11 12:53 - 2017-09-11 12:53 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\000003.log 2017-09-11 12:53 - 2017-09-11 12:53 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\CURRENT 2017-09-11 12:53 - 2017-09-11 12:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\LOCK 2017-09-11 12:53 - 2017-09-11 12:54 - 000000361 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\LOG 2017-09-11 12:53 - 2017-09-11 12:53 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\LOG.old 2017-09-11 12:53 - 2017-09-11 12:53 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\IndexedDB\http_www.latimes.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 23:07 - 2017-09-10 23:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb 2017-09-10 23:07 - 2017-09-10 23:07 - 000000196 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\000003.log 2017-09-10 23:07 - 2017-09-10 23:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\CURRENT 2017-09-10 23:07 - 2017-09-10 23:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOCK 2017-09-10 23:07 - 2017-09-10 23:07 - 000000166 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOG 2017-09-10 23:07 - 2017-09-10 23:07 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 01:56 - 2017-09-11 12:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage 2017-09-10 02:03 - 2017-09-10 02:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-10 02:03 - 2017-09-10 02:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-10 23:05 - 2017-09-10 23:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 23:05 - 2017-09-10 23:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 15:39 - 2017-09-10 15:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 15:39 - 2017-09-10 15:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 12:01 - 2017-09-10 12:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_connexity.net_0.localstorage 2017-09-10 12:01 - 2017-09-10 12:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 15:39 - 2017-09-10 15:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 15:39 - 2017-09-10 15:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 15:39 - 2017-09-10 23:03 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 15:39 - 2017-09-10 23:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 02:00 - 2017-09-10 15:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-10 02:00 - 2017-09-10 15:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-10 01:56 - 2017-09-10 01:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_us.romwe.com_0.localstorage 2017-09-10 01:56 - 2017-09-10 01:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_us.romwe.com_0.localstorage-journal 2017-09-10 12:00 - 2017-09-10 23:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-10 12:00 - 2017-09-10 23:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-10 02:01 - 2017-09-10 02:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.bunsinmyoven.com_0.localstorage 2017-09-10 02:01 - 2017-09-10 02:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.bunsinmyoven.com_0.localstorage-journal 2017-09-10 01:58 - 2017-09-10 01:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 01:58 - 2017-09-10 01:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 12:53 - 2017-09-11 12:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.complex.com_0.localstorage 2017-09-11 12:53 - 2017-09-11 12:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-10 15:42 - 2017-09-10 15:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.crash.net_0.localstorage 2017-09-10 15:42 - 2017-09-10 15:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-10 11:59 - 2017-09-11 12:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-10 11:59 - 2017-09-11 12:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-10 15:39 - 2017-09-10 15:40 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.dailymotion.com_0.localstorage 2017-09-10 15:39 - 2017-09-10 15:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.dailymotion.com_0.localstorage-journal 2017-09-11 12:54 - 2017-09-11 12:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.detroitlions.com_0.localstorage 2017-09-11 12:54 - 2017-09-11 12:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.detroitlions.com_0.localstorage-journal 2017-09-10 02:00 - 2017-09-10 02:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-10 02:00 - 2017-09-10 02:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-10 23:03 - 2017-09-10 23:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.fromyouflowers.com_0.localstorage 2017-09-10 23:03 - 2017-09-10 23:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.fromyouflowers.com_0.localstorage-journal 2017-09-10 23:07 - 2017-09-10 23:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-10 23:07 - 2017-09-10 23:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-10 15:45 - 2017-09-10 15:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.golfdigest.com_0.localstorage 2017-09-10 15:45 - 2017-09-10 15:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.golfdigest.com_0.localstorage-journal 2017-09-10 12:01 - 2017-09-10 12:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.history.com_0.localstorage 2017-09-10 12:01 - 2017-09-10 12:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.history.com_0.localstorage-journal 2017-09-10 23:08 - 2017-09-10 23:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-10 23:08 - 2017-09-10 23:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-10 02:02 - 2017-09-10 02:03 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.instyle.com_0.localstorage 2017-09-10 02:02 - 2017-09-10 02:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-10 23:05 - 2017-09-10 23:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 23:05 - 2017-09-10 23:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 12:00 - 2017-09-10 12:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-10 12:00 - 2017-09-10 12:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-10 01:59 - 2017-09-10 15:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.latimes.com_0.localstorage 2017-09-10 01:59 - 2017-09-10 15:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-10 11:59 - 2017-09-10 15:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.macworld.com_0.localstorage 2017-09-10 11:59 - 2017-09-10 15:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-10 23:06 - 2017-09-10 23:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-10 23:06 - 2017-09-10 23:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-10 11:58 - 2017-09-10 11:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.nbc.com_0.localstorage 2017-09-10 11:58 - 2017-09-10 11:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.nbc.com_0.localstorage-journal 2017-09-10 01:57 - 2017-09-10 01:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 01:57 - 2017-09-10 01:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 01:56 - 2017-09-10 01:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.ninjakiwi.com_0.localstorage 2017-09-10 01:56 - 2017-09-10 01:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.ninjakiwi.com_0.localstorage-journal 2017-09-10 01:59 - 2017-09-11 12:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.parents.com_0.localstorage 2017-09-10 01:59 - 2017-09-11 12:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-10 23:09 - 2017-09-10 23:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.petplace.com_0.localstorage 2017-09-10 23:09 - 2017-09-10 23:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.petplace.com_0.localstorage-journal 2017-09-11 12:49 - 2017-09-11 12:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.shareasale.com_0.localstorage 2017-09-11 12:49 - 2017-09-11 12:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.shareasale.com_0.localstorage-journal 2017-09-10 23:03 - 2017-09-10 23:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.wildtangent.com_0.localstorage 2017-09-10 23:03 - 2017-09-10 23:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\http_www.wildtangent.com_0.localstorage-journal 2017-09-10 01:59 - 2017-09-10 01:59 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 01:59 - 2017-09-10 01:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 11:56 - 2017-09-10 11:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_cdn.districtm.ca_0.localstorage 2017-09-10 11:56 - 2017-09-10 11:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_cdn.districtm.ca_0.localstorage-journal 2017-09-11 12:50 - 2017-09-11 12:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_cdn-gl.imrworldwide.com_0.localstorage 2017-09-11 12:50 - 2017-09-11 12:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_cdn-gl.imrworldwide.com_0.localstorage-journal 2017-09-10 12:01 - 2017-09-10 12:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_connexity.net_0.localstorage 2017-09-10 12:01 - 2017-09-10 12:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 15:39 - 2017-09-10 15:39 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 15:39 - 2017-09-10 15:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 23:04 - 2017-09-10 23:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-10 23:04 - 2017-09-10 23:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-10 01:59 - 2017-09-10 01:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_player.mediabong.net_0.localstorage 2017-09-10 01:59 - 2017-09-10 01:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_player.mediabong.net_0.localstorage-journal 2017-09-10 15:39 - 2017-09-10 15:40 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 15:39 - 2017-09-10 15:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 15:39 - 2017-09-10 23:04 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 15:39 - 2017-09-10 23:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 15:39 - 2017-09-10 15:43 - 000020480 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_www.joesnewbalanceoutlet.com_0.localstorage 2017-09-10 15:39 - 2017-09-10 15:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_www.joesnewbalanceoutlet.com_0.localstorage-journal 2017-09-10 11:56 - 2017-09-11 12:50 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_www.mom365.com_0.localstorage 2017-09-10 11:56 - 2017-09-11 12:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_www.mom365.com_0.localstorage-journal 2017-09-10 01:56 - 2017-09-10 01:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_www.youtube.com_0.localstorage 2017-09-10 01:56 - 2017-09-10 01:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-10 01:56 - 2017-09-10 01:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data 2017-09-10 01:56 - 2017-09-11 12:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash 2017-09-10 01:56 - 2017-09-10 01:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 01:56 - 2017-09-10 01:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 01:56 - 2017-09-10 01:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\J6NDBGMC 2017-09-10 01:56 - 2017-09-10 01:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 01:56 - 2017-09-10 01:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 01:56 - 2017-09-11 12:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6 2017-09-11 12:51 - 2017-09-11 12:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\aka.spotxcdn.com 2017-09-10 23:04 - 2017-09-10 23:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\browsergames.wildtangent.com 2017-09-10 23:04 - 2017-09-10 23:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\browsergames.wildtangent.com\##4247590C849C7BFA 2017-09-10 23:04 - 2017-09-10 23:04 - 000000756 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\browsergames.wildtangent.com\##4247590C849C7BFA\00000001.sol 2017-09-10 11:59 - 2017-09-10 11:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\cdn.dashbid.io 2017-09-10 11:59 - 2017-09-10 11:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\cdn.dashbid.io\prod 2017-09-10 11:59 - 2017-09-10 11:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-10 11:59 - 2017-09-10 11:59 - 000000069 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-10 01:56 - 2017-09-11 12:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\cdn.stickyadstv.com 2017-09-10 15:39 - 2017-09-10 15:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\cdncache-a.akamaihd.net 2017-09-10 15:39 - 2017-09-10 15:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\cdncache-a.akamaihd.net\items 2017-09-10 15:39 - 2017-09-10 15:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 15:39 - 2017-09-11 12:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 15:39 - 2017-09-11 12:55 - 000000593 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 01:56 - 2017-09-11 12:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\eereader.com 2017-09-10 15:44 - 2017-09-11 12:54 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\eereader.com\analytics.sol 2017-09-10 01:57 - 2017-09-11 12:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\efreader.com 2017-09-10 02:03 - 2017-09-10 23:10 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\efreader.com\analytics.sol 2017-09-10 01:56 - 2017-09-11 12:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\egreader.com 2017-09-10 12:03 - 2017-09-10 23:06 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\egreader.com\analytics.sol 2017-09-11 12:50 - 2017-09-11 12:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\inread.anyclip.com 2017-09-11 12:50 - 2017-09-11 12:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\inread.anyclip.com\ac# 2017-09-11 12:50 - 2017-09-11 12:50 - 000000473 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-10 01:56 - 2017-09-10 01:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com 2017-09-10 01:56 - 2017-09-10 01:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support 2017-09-10 01:56 - 2017-09-10 01:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer 2017-09-10 01:56 - 2017-09-11 12:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys 2017-09-10 01:56 - 2017-09-11 12:51 - 000000610 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 12:51 - 2017-09-11 12:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\#aka.spotxcdn.com 2017-09-11 12:51 - 2017-09-11 12:51 - 000000086 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\#aka.spotxcdn.com\settings.sol 2017-09-10 23:04 - 2017-09-10 23:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\#browsergames.wildtangent.com 2017-09-10 23:04 - 2017-09-10 23:04 - 000000098 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\#browsergames.wildtangent.com\settings.sol 2017-09-10 11:59 - 2017-09-10 11:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-10 11:59 - 2017-09-10 11:59 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-10 01:56 - 2017-09-10 01:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 01:56 - 2017-09-10 01:56 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 15:39 - 2017-09-10 15:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 15:39 - 2017-09-10 15:39 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 01:56 - 2017-09-10 01:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 01:56 - 2017-09-10 01:56 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 01:57 - 2017-09-10 01:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 01:57 - 2017-09-10 01:57 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 01:56 - 2017-09-10 01:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 01:56 - 2017-09-10 01:56 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 12:50 - 2017-09-11 12:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 12:50 - 2017-09-11 12:50 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-10 23:05 - 2017-09-10 23:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com 2017-09-10 23:05 - 2017-09-10 23:05 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com\settings.sol 2017-09-10 23:05 - 2017-09-10 23:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\objects.tremormedia.com 2017-09-10 23:05 - 2017-09-10 23:05 - 000000073 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data687\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\K93JDLJ6\objects.tremormedia.com\com.quantserve.sol 2017-09-10 21:02 - 2017-09-11 03:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688 2017-09-10 21:02 - 2017-09-11 02:58 - 000252928 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Cookies 2017-09-10 21:02 - 2017-09-11 02:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Cookies-journal 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\databases 2017-09-10 21:05 - 2017-09-10 21:05 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\databases\Databases.db 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\databases\Databases.db-journal 2017-09-10 21:05 - 2017-09-11 02:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\000 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\000\t 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\000\t\Paths 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\000\t\Paths\000003.log 2017-09-10 21:05 - 2017-09-10 21:05 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\000\t\Paths\CURRENT 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\000\t\Paths\LOCK 2017-09-10 21:05 - 2017-09-10 21:05 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\000\t\Paths\LOG 2017-09-10 21:05 - 2017-09-10 21:05 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\000\t\Paths\MANIFEST-000001 2017-09-10 21:10 - 2017-09-10 21:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\001 2017-09-10 21:10 - 2017-09-10 21:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\001\t 2017-09-11 02:52 - 2017-09-11 02:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\002 2017-09-11 02:52 - 2017-09-11 02:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\002\t 2017-09-11 02:55 - 2017-09-11 02:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\003 2017-09-11 02:55 - 2017-09-11 02:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\003\t 2017-09-10 21:05 - 2017-09-11 02:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\Origins 2017-09-10 21:05 - 2017-09-11 02:56 - 000000310 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\Origins\000003.log 2017-09-10 21:05 - 2017-09-10 21:05 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\Origins\CURRENT 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\Origins\LOCK 2017-09-10 21:05 - 2017-09-11 02:55 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\Origins\LOG 2017-09-10 21:05 - 2017-09-11 02:52 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\Origins\LOG.old 2017-09-10 21:05 - 2017-09-10 21:05 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\Origins\MANIFEST-000001 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\File System\Origins\lost 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\IndexedDB 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\IndexedDB\http_www.myrecipes.com_0.indexeddb.leveldb 2017-09-10 21:05 - 2017-09-10 21:05 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\IndexedDB\http_www.myrecipes.com_0.indexeddb.leveldb\000003.log 2017-09-10 21:05 - 2017-09-10 21:05 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\IndexedDB\http_www.myrecipes.com_0.indexeddb.leveldb\CURRENT 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\IndexedDB\http_www.myrecipes.com_0.indexeddb.leveldb\LOCK 2017-09-10 21:05 - 2017-09-10 21:05 - 000000160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\IndexedDB\http_www.myrecipes.com_0.indexeddb.leveldb\LOG 2017-09-10 21:05 - 2017-09-10 21:05 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\IndexedDB\http_www.myrecipes.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 21:02 - 2017-09-11 02:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage 2017-09-10 21:07 - 2017-09-10 21:09 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 21:07 - 2017-09-10 21:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 21:05 - 2017-09-10 21:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_connexity.net_0.localstorage 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 21:08 - 2017-09-10 21:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_jobs.mashable.com_0.localstorage 2017-09-10 21:08 - 2017-09-10 21:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_jobs.mashable.com_0.localstorage-journal 2017-09-10 21:05 - 2017-09-10 21:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 21:07 - 2017-09-10 21:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.6play.fr_0.localstorage 2017-09-10 21:07 - 2017-09-10 21:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.6play.fr_0.localstorage-journal 2017-09-10 21:06 - 2017-09-10 21:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.blabbermouth.net_0.localstorage 2017-09-10 21:06 - 2017-09-10 21:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.blabbermouth.net_0.localstorage-journal 2017-09-10 21:04 - 2017-09-10 21:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 21:04 - 2017-09-10 21:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 02:55 - 2017-09-11 02:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.complex.com_0.localstorage 2017-09-11 02:55 - 2017-09-11 02:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-11 02:55 - 2017-09-11 02:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.concordmonitor.com_0.localstorage 2017-09-11 02:55 - 2017-09-11 02:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.concordmonitor.com_0.localstorage-journal 2017-09-11 02:54 - 2017-09-11 02:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-11 02:54 - 2017-09-11 02:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-11 02:56 - 2017-09-11 02:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-11 02:56 - 2017-09-11 02:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-10 21:05 - 2017-09-10 21:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-10 21:05 - 2017-09-10 21:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-10 21:04 - 2017-09-11 02:53 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 21:04 - 2017-09-11 02:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 02:54 - 2017-09-11 02:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.islandpacket.com_0.localstorage 2017-09-11 02:54 - 2017-09-11 02:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.islandpacket.com_0.localstorage-journal 2017-09-10 21:05 - 2017-09-10 21:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-10 21:04 - 2017-09-10 21:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 21:04 - 2017-09-10 21:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 02:53 - 2017-09-11 02:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.parents.com_0.localstorage 2017-09-11 02:53 - 2017-09-11 02:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-10 21:02 - 2017-09-10 21:03 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.techtimes.com_0.localstorage 2017-09-10 21:02 - 2017-09-10 21:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\http_www.techtimes.com_0.localstorage-journal 2017-09-11 02:50 - 2017-09-11 02:50 - 000028672 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\https_a236758309.cdn.optimizely.com_0.localstorage 2017-09-11 02:50 - 2017-09-11 02:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\https_a236758309.cdn.optimizely.com_0.localstorage-journal 2017-09-10 21:05 - 2017-09-10 21:05 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 21:05 - 2017-09-10 21:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\https_connexity.net_0.localstorage 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 21:05 - 2017-09-10 21:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-11 02:50 - 2017-09-11 02:50 - 000029696 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\https_fsastore.com_0.localstorage 2017-09-11 02:50 - 2017-09-11 02:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\https_fsastore.com_0.localstorage-journal 2017-09-11 02:50 - 2017-09-11 02:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\https_www.ultimate-guitar.com_0.localstorage 2017-09-11 02:50 - 2017-09-11 02:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Local Storage\https_www.ultimate-guitar.com_0.localstorage-journal 2017-09-10 21:02 - 2017-09-10 21:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data 2017-09-10 21:02 - 2017-09-11 02:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash 2017-09-10 21:02 - 2017-09-10 21:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 21:02 - 2017-09-10 21:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 21:02 - 2017-09-10 21:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\MVBZTY96 2017-09-10 21:02 - 2017-09-10 21:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 21:02 - 2017-09-10 21:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 21:02 - 2017-09-11 02:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW 2017-09-10 21:02 - 2017-09-11 02:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\cdn.stickyadstv.com 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\cdncache-a.akamaihd.net 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\cdncache-a.akamaihd.net\items 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 21:05 - 2017-09-11 02:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 21:05 - 2017-09-11 02:55 - 000000494 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 21:02 - 2017-09-11 02:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\eereader.com 2017-09-10 21:07 - 2017-09-10 21:07 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\eereader.com\analytics.sol 2017-09-10 21:03 - 2017-09-11 02:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\efreader.com 2017-09-10 21:06 - 2017-09-11 02:56 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\efreader.com\analytics.sol 2017-09-10 21:02 - 2017-09-11 02:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\egreader.com 2017-09-10 21:10 - 2017-09-10 21:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\files.provenpixel.com 2017-09-10 21:10 - 2017-09-10 21:10 - 000000073 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\files.provenpixel.com\com.quantserve.sol 2017-09-10 21:02 - 2017-09-10 21:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\macromedia.com 2017-09-10 21:02 - 2017-09-10 21:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\macromedia.com\support 2017-09-10 21:02 - 2017-09-10 21:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\macromedia.com\support\flashplayer 2017-09-10 21:02 - 2017-09-11 02:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\macromedia.com\support\flashplayer\sys 2017-09-10 21:02 - 2017-09-11 02:52 - 000000543 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 21:02 - 2017-09-10 21:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 21:02 - 2017-09-10 21:02 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 21:05 - 2017-09-10 21:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 21:05 - 2017-09-10 21:05 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 21:02 - 2017-09-10 21:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 21:02 - 2017-09-10 21:02 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 21:03 - 2017-09-10 21:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 21:03 - 2017-09-10 21:03 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 21:02 - 2017-09-10 21:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 21:02 - 2017-09-10 21:02 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 21:10 - 2017-09-10 21:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\macromedia.com\support\flashplayer\sys\#files.provenpixel.com 2017-09-10 21:10 - 2017-09-10 21:10 - 000000091 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\macromedia.com\support\flashplayer\sys\#files.provenpixel.com\settings.sol 2017-09-11 02:52 - 2017-09-11 02:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com 2017-09-11 02:52 - 2017-09-11 02:52 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com\settings.sol 2017-09-11 02:52 - 2017-09-11 02:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\objects.tremormedia.com 2017-09-11 02:52 - 2017-09-11 02:52 - 000000073 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data688\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\TMRFUFDW\objects.tremormedia.com\com.quantserve.sol 2017-09-12 00:21 - 2017-09-12 00:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689 2017-09-12 00:21 - 2017-09-12 00:29 - 000204800 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Cookies 2017-09-12 00:21 - 2017-09-12 00:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Cookies-journal 2017-09-12 00:23 - 2017-09-12 00:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\databases 2017-09-12 00:23 - 2017-09-12 00:23 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\databases\Databases.db 2017-09-12 00:23 - 2017-09-12 00:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\databases\Databases.db-journal 2017-09-12 00:27 - 2017-09-12 00:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\File System 2017-09-12 00:27 - 2017-09-12 00:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\File System\000 2017-09-12 00:27 - 2017-09-12 00:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\File System\000\t 2017-09-12 00:27 - 2017-09-12 00:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\File System\Origins 2017-09-12 00:27 - 2017-09-12 00:27 - 000000098 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\File System\Origins\000003.log 2017-09-12 00:27 - 2017-09-12 00:27 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\File System\Origins\CURRENT 2017-09-12 00:27 - 2017-09-12 00:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\File System\Origins\LOCK 2017-09-12 00:27 - 2017-09-12 00:27 - 000000127 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\File System\Origins\LOG 2017-09-12 00:27 - 2017-09-12 00:27 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\File System\Origins\MANIFEST-000001 2017-09-12 00:23 - 2017-09-12 00:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\IndexedDB 2017-09-12 00:23 - 2017-09-12 00:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb 2017-09-12 00:23 - 2017-09-12 00:23 - 000000172 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\000003.log 2017-09-12 00:23 - 2017-09-12 00:23 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\CURRENT 2017-09-12 00:23 - 2017-09-12 00:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOCK 2017-09-12 00:23 - 2017-09-12 00:24 - 000000154 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\LOG 2017-09-12 00:23 - 2017-09-12 00:23 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\IndexedDB\http_www.nfl.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 00:21 - 2017-09-12 00:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage 2017-09-12 00:21 - 2017-09-12 00:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_cdn.cxense.com_0.localstorage 2017-09-12 00:21 - 2017-09-12 00:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_cdn.cxense.com_0.localstorage-journal 2017-09-12 00:21 - 2017-09-12 00:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_code3.adtlgc.com_0.localstorage 2017-09-12 00:21 - 2017-09-12 00:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_code3.adtlgc.com_0.localstorage-journal 2017-09-12 00:27 - 2017-09-12 00:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_mashable.com_0.localstorage 2017-09-12 00:27 - 2017-09-12 00:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_mashable.com_0.localstorage-journal 2017-09-12 00:25 - 2017-09-12 00:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_www.bounty.com_0.localstorage 2017-09-12 00:25 - 2017-09-12 00:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_www.bounty.com_0.localstorage-journal 2017-09-12 00:23 - 2017-09-12 00:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-12 00:23 - 2017-09-12 00:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-12 00:25 - 2017-09-12 00:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_www.courant.com_0.localstorage 2017-09-12 00:25 - 2017-09-12 00:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-12 00:27 - 2017-09-12 00:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_www.dictionary.com_0.localstorage 2017-09-12 00:27 - 2017-09-12 00:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_www.dictionary.com_0.localstorage-journal 2017-09-12 00:24 - 2017-09-12 00:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_www.latimes.com_0.localstorage 2017-09-12 00:24 - 2017-09-12 00:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-12 00:24 - 2017-09-12 00:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-12 00:24 - 2017-09-12 00:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-12 00:21 - 2017-09-12 00:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_www.memedeportes.com_0.localstorage 2017-09-12 00:21 - 2017-09-12 00:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_www.memedeportes.com_0.localstorage-journal 2017-09-12 00:23 - 2017-09-12 00:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_www.nfl.com_0.localstorage 2017-09-12 00:23 - 2017-09-12 00:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-12 00:21 - 2017-09-12 00:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_www.scosche.com_0.localstorage 2017-09-12 00:21 - 2017-09-12 00:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\http_www.scosche.com_0.localstorage-journal 2017-09-12 00:25 - 2017-09-12 00:25 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\https_c.betrad.com_0.localstorage 2017-09-12 00:25 - 2017-09-12 00:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-12 00:21 - 2017-09-12 00:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data 2017-09-12 00:21 - 2017-09-12 00:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash 2017-09-12 00:21 - 2017-09-12 00:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-12 00:21 - 2017-09-12 00:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-12 00:21 - 2017-09-12 00:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\SCL88UT5 2017-09-12 00:21 - 2017-09-12 00:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot 2017-09-12 00:21 - 2017-09-12 00:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-12 00:21 - 2017-09-12 00:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUKVPBMG 2017-09-12 00:21 - 2017-09-12 00:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUKVPBMG\cdn.stickyadstv.com 2017-09-12 00:21 - 2017-09-12 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUKVPBMG\eereader.com 2017-09-12 00:23 - 2017-09-12 00:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUKVPBMG\efreader.com 2017-09-12 00:28 - 2017-09-12 00:28 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUKVPBMG\efreader.com\analytics.sol 2017-09-12 00:21 - 2017-09-12 00:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUKVPBMG\egreader.com 2017-09-12 00:21 - 2017-09-12 00:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUKVPBMG\macromedia.com 2017-09-12 00:21 - 2017-09-12 00:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUKVPBMG\macromedia.com\support 2017-09-12 00:21 - 2017-09-12 00:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUKVPBMG\macromedia.com\support\flashplayer 2017-09-12 00:21 - 2017-09-12 00:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUKVPBMG\macromedia.com\support\flashplayer\sys 2017-09-12 00:21 - 2017-09-12 00:23 - 000000464 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUKVPBMG\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-12 00:21 - 2017-09-12 00:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUKVPBMG\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-12 00:21 - 2017-09-12 00:21 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUKVPBMG\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-12 00:21 - 2017-09-12 00:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUKVPBMG\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-12 00:21 - 2017-09-12 00:21 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUKVPBMG\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-12 00:23 - 2017-09-12 00:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUKVPBMG\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-12 00:23 - 2017-09-12 00:23 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUKVPBMG\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-12 00:21 - 2017-09-12 00:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUKVPBMG\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-12 00:21 - 2017-09-12 00:21 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data689\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUKVPBMG\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 14:00 - 2017-09-11 22:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690 2017-09-11 14:00 - 2017-09-11 21:27 - 000285696 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Cookies 2017-09-11 14:00 - 2017-09-11 21:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Cookies-journal 2017-09-11 14:00 - 2017-09-11 14:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\databases 2017-09-11 14:00 - 2017-09-11 14:00 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\databases\Databases.db 2017-09-11 14:00 - 2017-09-11 14:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\databases\Databases.db-journal 2017-09-11 14:00 - 2017-09-11 21:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\File System 2017-09-11 14:00 - 2017-09-11 21:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\File System\Origins 2017-09-11 14:00 - 2017-09-11 21:24 - 000000248 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\File System\Origins\000003.log 2017-09-11 21:23 - 2017-09-11 21:23 - 000000246 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\File System\Origins\000004.ldb 2017-09-11 21:23 - 2017-09-11 21:23 - 000000246 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\File System\Origins\000005.ldb 2017-09-11 14:00 - 2017-09-11 14:00 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\File System\Origins\CURRENT 2017-09-11 14:00 - 2017-09-11 14:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\File System\Origins\LOCK 2017-09-11 14:00 - 2017-09-11 21:23 - 000000736 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\File System\Origins\LOG 2017-09-11 14:00 - 2017-09-11 21:21 - 000000736 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\File System\Origins\LOG.old 2017-09-11 14:00 - 2017-09-11 14:00 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\File System\Origins\MANIFEST-000001 2017-09-11 21:20 - 2017-09-11 21:20 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\File System\Origins\lost 2017-09-11 14:00 - 2017-09-11 14:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\IndexedDB 2017-09-11 14:03 - 2017-09-11 14:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb 2017-09-11 14:03 - 2017-09-11 14:03 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\000003.log 2017-09-11 14:03 - 2017-09-11 14:03 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\CURRENT 2017-09-11 14:03 - 2017-09-11 14:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\LOCK 2017-09-11 14:03 - 2017-09-11 14:03 - 000000159 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\LOG 2017-09-11 14:03 - 2017-09-11 14:03 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 14:00 - 2017-09-11 14:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\IndexedDB\https_www.fandango.com_0.indexeddb.leveldb 2017-09-11 14:00 - 2017-09-11 14:00 - 000252558 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\IndexedDB\https_www.fandango.com_0.indexeddb.leveldb\000003.log 2017-09-11 14:00 - 2017-09-11 14:00 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\IndexedDB\https_www.fandango.com_0.indexeddb.leveldb\CURRENT 2017-09-11 14:00 - 2017-09-11 14:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\IndexedDB\https_www.fandango.com_0.indexeddb.leveldb\LOCK 2017-09-11 14:00 - 2017-09-11 14:00 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\IndexedDB\https_www.fandango.com_0.indexeddb.leveldb\LOG 2017-09-11 14:00 - 2017-09-11 14:00 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\IndexedDB\https_www.fandango.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 14:00 - 2017-09-11 21:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage 2017-09-11 21:20 - 2017-09-11 21:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_cdn.districtm.ca_0.localstorage 2017-09-11 21:20 - 2017-09-11 21:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_cdn.districtm.ca_0.localstorage-journal 2017-09-11 21:22 - 2017-09-11 21:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_connexity.net_0.localstorage 2017-09-11 21:22 - 2017-09-11 21:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 14:06 - 2017-09-11 14:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_diethood.com_0.localstorage 2017-09-11 14:06 - 2017-09-11 14:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_diethood.com_0.localstorage-journal 2017-09-11 21:20 - 2017-09-11 21:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-11 21:20 - 2017-09-11 21:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-11 21:22 - 2017-09-11 21:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_prod.www.raiders.clubs.nfl.com_0.localstorage 2017-09-11 21:22 - 2017-09-11 21:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_prod.www.raiders.clubs.nfl.com_0.localstorage-journal 2017-09-11 21:20 - 2017-09-11 21:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 21:20 - 2017-09-11 21:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 21:24 - 2017-09-11 21:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_washingtonmonthly.com_0.localstorage 2017-09-11 21:24 - 2017-09-11 21:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_washingtonmonthly.com_0.localstorage-journal 2017-09-11 14:04 - 2017-09-11 14:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-11 14:04 - 2017-09-11 14:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-11 14:03 - 2017-09-11 21:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 14:03 - 2017-09-11 21:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 21:23 - 2017-09-11 21:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.crash.net_0.localstorage 2017-09-11 21:23 - 2017-09-11 21:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-11 14:03 - 2017-09-11 14:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-11 14:03 - 2017-09-11 14:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-11 14:03 - 2017-09-11 21:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.instyle.com_0.localstorage 2017-09-11 14:03 - 2017-09-11 21:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 14:02 - 2017-09-11 14:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 14:02 - 2017-09-11 14:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 21:25 - 2017-09-11 21:25 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.latimes.com_0.localstorage 2017-09-11 21:25 - 2017-09-11 21:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-11 21:26 - 2017-09-11 21:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.macworld.com_0.localstorage 2017-09-11 21:26 - 2017-09-11 21:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-11 21:20 - 2017-09-11 21:21 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.mom365.com_0.localstorage 2017-09-11 21:20 - 2017-09-11 21:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.mom365.com_0.localstorage-journal 2017-09-11 21:22 - 2017-09-11 21:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.nbc.com_0.localstorage 2017-09-11 21:22 - 2017-09-11 21:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.nbc.com_0.localstorage-journal 2017-09-11 21:23 - 2017-09-11 21:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.nbcconnecticut.com_0.localstorage 2017-09-11 21:23 - 2017-09-11 21:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.nbcconnecticut.com_0.localstorage-journal 2017-09-11 14:02 - 2017-09-11 14:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 14:02 - 2017-09-11 14:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 14:03 - 2017-09-11 14:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-11 14:03 - 2017-09-11 14:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-11 14:00 - 2017-09-11 14:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.zonediet.com_0.localstorage 2017-09-11 14:00 - 2017-09-11 14:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\http_www.zonediet.com_0.localstorage-journal 2017-09-11 21:23 - 2017-09-11 21:23 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 21:23 - 2017-09-11 21:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 14:00 - 2017-09-11 14:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\https_cdn.krxd.net_0.localstorage 2017-09-11 14:00 - 2017-09-11 14:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\https_cdn.krxd.net_0.localstorage-journal 2017-09-11 21:22 - 2017-09-11 21:22 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\https_connexity.net_0.localstorage 2017-09-11 21:22 - 2017-09-11 21:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 21:20 - 2017-09-11 21:20 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 21:20 - 2017-09-11 21:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 21:20 - 2017-09-11 21:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 21:20 - 2017-09-11 21:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 21:20 - 2017-09-11 21:20 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 21:20 - 2017-09-11 21:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 14:00 - 2017-09-11 14:01 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\https_www.fandango.com_0.localstorage 2017-09-11 14:00 - 2017-09-11 14:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\https_www.fandango.com_0.localstorage-journal 2017-09-11 21:20 - 2017-09-11 21:25 - 000076800 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\https_www.thredup.com_0.localstorage 2017-09-11 21:20 - 2017-09-11 21:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Local Storage\https_www.thredup.com_0.localstorage-journal 2017-09-11 14:00 - 2017-09-11 14:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data 2017-09-11 14:00 - 2017-09-11 21:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash 2017-09-11 14:00 - 2017-09-11 14:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 14:00 - 2017-09-11 14:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 14:00 - 2017-09-11 14:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\4SD6ALUQ 2017-09-11 14:00 - 2017-09-11 14:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 14:00 - 2017-09-11 14:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 14:00 - 2017-09-11 14:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF 2017-09-11 14:01 - 2017-09-11 14:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\cdn.dashbid.io 2017-09-11 14:01 - 2017-09-11 14:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\cdn.dashbid.io\prod 2017-09-11 14:01 - 2017-09-11 21:21 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-11 14:01 - 2017-09-11 21:21 - 000000069 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-11 14:00 - 2017-09-11 21:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\cdn.stickyadstv.com 2017-09-11 14:02 - 2017-09-11 14:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\cdncache-a.akamaihd.net 2017-09-11 14:02 - 2017-09-11 14:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\cdncache-a.akamaihd.net\items 2017-09-11 14:02 - 2017-09-11 14:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 14:02 - 2017-09-11 21:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 14:02 - 2017-09-11 21:27 - 000000532 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 14:00 - 2017-09-11 21:23 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\eereader.com 2017-09-11 14:01 - 2017-09-11 21:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\efreader.com 2017-09-11 14:00 - 2017-09-11 21:25 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\egreader.com 2017-09-11 14:00 - 2017-09-11 14:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\macromedia.com 2017-09-11 14:00 - 2017-09-11 14:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\macromedia.com\support 2017-09-11 14:00 - 2017-09-11 14:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\macromedia.com\support\flashplayer 2017-09-11 14:00 - 2017-09-11 14:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\macromedia.com\support\flashplayer\sys 2017-09-11 14:00 - 2017-09-11 14:02 - 000000509 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 14:01 - 2017-09-11 14:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-11 14:01 - 2017-09-11 14:01 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-11 14:00 - 2017-09-11 14:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 14:00 - 2017-09-11 14:00 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 14:02 - 2017-09-11 14:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 14:02 - 2017-09-11 14:02 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 14:00 - 2017-09-11 14:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 14:00 - 2017-09-11 14:00 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 14:01 - 2017-09-11 14:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 14:01 - 2017-09-11 14:01 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 14:00 - 2017-09-11 14:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 14:00 - 2017-09-11 14:00 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data690\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\5JNKK3YF\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 07:27 - 2017-09-12 04:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691 2017-09-11 07:27 - 2017-09-12 03:49 - 000281600 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Cookies 2017-09-11 07:27 - 2017-09-12 03:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Cookies-journal 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\databases 2017-09-11 07:27 - 2017-09-11 07:27 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\databases\Databases.db 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\databases\Databases.db-journal 2017-09-11 07:33 - 2017-09-11 07:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\File System 2017-09-11 07:33 - 2017-09-11 07:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\File System\000 2017-09-11 07:33 - 2017-09-11 10:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\File System\000\t 2017-09-11 10:13 - 2017-09-11 10:13 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\File System\000\t\.usage 2017-09-11 10:13 - 2017-09-11 10:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\File System\000\t\Paths 2017-09-11 10:13 - 2017-09-11 10:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\File System\000\t\Paths\000003.log 2017-09-11 10:13 - 2017-09-11 10:13 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\File System\000\t\Paths\CURRENT 2017-09-11 10:13 - 2017-09-11 10:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\File System\000\t\Paths\LOCK 2017-09-11 10:13 - 2017-09-11 10:13 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\File System\000\t\Paths\LOG 2017-09-11 10:13 - 2017-09-11 10:13 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\File System\000\t\Paths\MANIFEST-000001 2017-09-11 07:33 - 2017-09-12 03:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\File System\Origins 2017-09-11 07:33 - 2017-09-11 07:33 - 000000098 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\File System\Origins\000003.log 2017-09-11 07:33 - 2017-09-11 07:33 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\File System\Origins\CURRENT 2017-09-11 07:33 - 2017-09-11 07:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\File System\Origins\LOCK 2017-09-11 07:33 - 2017-09-12 03:46 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\File System\Origins\LOG 2017-09-11 07:33 - 2017-09-12 03:45 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\File System\Origins\LOG.old 2017-09-11 07:33 - 2017-09-11 07:33 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\File System\Origins\MANIFEST-000001 2017-09-11 07:27 - 2017-09-12 03:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB 2017-09-11 07:28 - 2017-09-11 07:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\http_www.familycircle.com_0.indexeddb.leveldb 2017-09-11 07:28 - 2017-09-11 07:28 - 000000190 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\http_www.familycircle.com_0.indexeddb.leveldb\000003.log 2017-09-11 07:28 - 2017-09-11 07:28 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\http_www.familycircle.com_0.indexeddb.leveldb\CURRENT 2017-09-11 07:28 - 2017-09-11 07:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\http_www.familycircle.com_0.indexeddb.leveldb\LOCK 2017-09-11 07:28 - 2017-09-11 07:28 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\http_www.familycircle.com_0.indexeddb.leveldb\LOG 2017-09-11 07:28 - 2017-09-11 07:28 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\http_www.familycircle.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 10:13 - 2017-09-11 10:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb 2017-09-11 10:13 - 2017-09-11 10:13 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb\000003.log 2017-09-11 10:13 - 2017-09-11 10:13 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb\CURRENT 2017-09-11 10:13 - 2017-09-11 10:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb\LOCK 2017-09-11 10:13 - 2017-09-11 10:13 - 000000160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb\LOG 2017-09-11 10:13 - 2017-09-11 10:13 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\http_www.hollywood.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\https_91373412.va.cobrowse.liveperson.net_0.indexeddb.leveldb 2017-09-11 07:27 - 2017-09-11 07:27 - 000000587 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\https_91373412.va.cobrowse.liveperson.net_0.indexeddb.leveldb\000003.log 2017-09-11 07:27 - 2017-09-11 07:27 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\https_91373412.va.cobrowse.liveperson.net_0.indexeddb.leveldb\CURRENT 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\https_91373412.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOCK 2017-09-11 07:27 - 2017-09-11 07:27 - 000000179 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\https_91373412.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOG 2017-09-11 07:27 - 2017-09-11 07:27 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\https_91373412.va.cobrowse.liveperson.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 03:45 - 2017-09-12 03:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb 2017-09-12 03:45 - 2017-09-12 03:45 - 000000196 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\000003.log 2017-09-12 03:45 - 2017-09-12 03:45 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\CURRENT 2017-09-12 03:45 - 2017-09-12 03:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOCK 2017-09-12 03:45 - 2017-09-12 03:45 - 000000166 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOG 2017-09-12 03:45 - 2017-09-12 03:45 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb 2017-09-11 07:27 - 2017-09-11 07:27 - 000001336 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\000003.log 2017-09-11 07:27 - 2017-09-11 07:27 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\CURRENT 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOCK 2017-09-11 07:27 - 2017-09-11 07:27 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOG 2017-09-11 07:27 - 2017-09-11 07:27 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 07:27 - 2017-09-12 03:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage 2017-09-11 07:27 - 2017-09-11 07:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-11 10:13 - 2017-09-11 10:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_cdn-gl.imrworldwide.com_0.localstorage 2017-09-11 10:13 - 2017-09-11 10:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_cdn-gl.imrworldwide.com_0.localstorage-journal 2017-09-11 10:18 - 2017-09-11 10:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_cn.reuters.com_0.localstorage 2017-09-11 10:18 - 2017-09-11 10:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_cn.reuters.com_0.localstorage-journal 2017-09-11 20:39 - 2017-09-11 20:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_connexity.net_0.localstorage 2017-09-11 20:39 - 2017-09-11 20:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 20:38 - 2017-09-11 20:38 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_edata.ndtv.com_0.localstorage 2017-09-11 20:38 - 2017-09-11 20:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_edata.ndtv.com_0.localstorage-journal 2017-09-11 20:43 - 2017-09-11 20:44 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_mashable.com_0.localstorage 2017-09-11 20:43 - 2017-09-11 20:44 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_mashable.com_0.localstorage-journal 2017-09-11 07:27 - 2017-09-11 20:38 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 07:27 - 2017-09-11 20:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-12 03:46 - 2017-09-12 03:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-12 03:46 - 2017-09-12 03:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-11 20:37 - 2017-09-11 20:37 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_tpc.googlesyndication.com_0.localstorage 2017-09-11 20:37 - 2017-09-11 20:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_tpc.googlesyndication.com_0.localstorage-journal 2017-09-11 20:41 - 2017-09-11 20:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_washingtonmonthly.com_0.localstorage 2017-09-11 20:41 - 2017-09-11 20:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_washingtonmonthly.com_0.localstorage-journal 2017-09-11 10:17 - 2017-09-11 10:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-11 10:17 - 2017-09-11 10:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-11 07:32 - 2017-09-11 07:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.bendbulletin.com_0.localstorage 2017-09-11 07:32 - 2017-09-11 07:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.bendbulletin.com_0.localstorage-journal 2017-09-11 07:30 - 2017-09-11 10:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 07:30 - 2017-09-11 10:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 07:31 - 2017-09-11 07:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.crash.net_0.localstorage 2017-09-11 07:31 - 2017-09-11 07:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-11 07:28 - 2017-09-11 07:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.dropped-clicks.com_0.localstorage 2017-09-11 07:28 - 2017-09-11 07:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.dropped-clicks.com_0.localstorage-journal 2017-09-11 07:27 - 2017-09-11 07:28 - 000011264 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.familycircle.com_0.localstorage 2017-09-11 07:27 - 2017-09-11 07:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.familycircle.com_0.localstorage-journal 2017-09-12 03:45 - 2017-09-12 03:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.food.com_0.localstorage 2017-09-12 03:45 - 2017-09-12 03:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-11 10:16 - 2017-09-11 10:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-11 10:16 - 2017-09-11 10:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-12 03:46 - 2017-09-12 03:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.happy-mothering.com_0.localstorage 2017-09-12 03:46 - 2017-09-12 03:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.happy-mothering.com_0.localstorage-journal 2017-09-11 20:40 - 2017-09-11 20:40 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-11 20:40 - 2017-09-11 20:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-11 10:13 - 2017-09-11 10:14 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.hollywood.com_0.localstorage 2017-09-11 10:13 - 2017-09-11 10:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.hollywood.com_0.localstorage-journal 2017-09-11 07:30 - 2017-09-11 07:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-11 07:30 - 2017-09-11 07:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-11 07:34 - 2017-09-11 07:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 07:34 - 2017-09-11 07:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 10:16 - 2017-09-11 10:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.islandpacket.com_0.localstorage 2017-09-11 10:16 - 2017-09-11 10:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.islandpacket.com_0.localstorage-journal 2017-09-11 07:33 - 2017-09-12 03:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.macworld.com_0.localstorage 2017-09-11 07:33 - 2017-09-12 03:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-11 10:18 - 2017-09-11 10:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.marketwatch.com_0.localstorage 2017-09-11 10:18 - 2017-09-11 10:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.marketwatch.com_0.localstorage-journal 2017-09-11 20:40 - 2017-09-11 20:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-11 20:40 - 2017-09-11 20:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-11 10:16 - 2017-09-11 10:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.nbcconnecticut.com_0.localstorage 2017-09-11 10:16 - 2017-09-11 10:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.nbcconnecticut.com_0.localstorage-journal 2017-09-11 20:37 - 2017-09-11 20:39 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.ndtv.com_0.localstorage 2017-09-11 20:37 - 2017-09-11 20:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.ndtv.com_0.localstorage-journal 2017-09-11 07:29 - 2017-09-12 03:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 07:29 - 2017-09-12 03:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 07:30 - 2017-09-11 07:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.parents.com_0.localstorage 2017-09-11 07:30 - 2017-09-11 07:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-12 03:45 - 2017-09-12 03:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.reuters.com_0.localstorage 2017-09-12 03:45 - 2017-09-12 03:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-11 20:38 - 2017-09-11 20:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.wineexpress.com_0.localstorage 2017-09-11 20:38 - 2017-09-11 20:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www.wineexpress.com_0.localstorage-journal 2017-09-11 20:42 - 2017-09-11 20:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www4.fmovies.io_0.localstorage 2017-09-11 20:42 - 2017-09-11 20:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\http_www4.fmovies.io_0.localstorage-journal 2017-09-11 20:41 - 2017-09-11 20:41 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 20:41 - 2017-09-11 20:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 20:39 - 2017-09-11 20:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\https_connexity.net_0.localstorage 2017-09-11 20:39 - 2017-09-11 20:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 07:27 - 2017-09-11 20:37 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 07:27 - 2017-09-11 20:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-12 03:41 - 2017-09-12 03:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\https_pokemondb.net_0.localstorage 2017-09-12 03:41 - 2017-09-12 03:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\https_pokemondb.net_0.localstorage-journal 2017-09-11 07:27 - 2017-09-11 07:28 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 07:27 - 2017-09-11 07:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 07:27 - 2017-09-11 07:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\https_sb.monetate.net_0.localstorage 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\https_sb.monetate.net_0.localstorage-journal 2017-09-11 07:27 - 2017-09-11 20:38 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 07:27 - 2017-09-11 20:38 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 07:27 - 2017-09-11 07:28 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\https_www.chewy.com_0.localstorage 2017-09-11 07:27 - 2017-09-11 07:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\https_www.chewy.com_0.localstorage-journal 2017-09-12 03:41 - 2017-09-12 03:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\https_www.yola.com_0.localstorage 2017-09-12 03:41 - 2017-09-12 03:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\https_www.yola.com_0.localstorage-journal 2017-09-11 10:13 - 2017-09-11 10:14 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\https_www.zales.com_0.localstorage 2017-09-11 10:13 - 2017-09-11 10:14 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Local Storage\https_www.zales.com_0.localstorage-journal 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data 2017-09-11 07:27 - 2017-09-12 03:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\D56MNC5H 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 07:27 - 2017-09-11 10:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ 2017-09-11 07:28 - 2017-09-12 03:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\cdn.stickyadstv.com 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\cdncache-a.akamaihd.net 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\cdncache-a.akamaihd.net\items 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 07:27 - 2017-09-11 20:40 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 07:27 - 2017-09-11 20:40 - 000000490 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 07:27 - 2017-09-12 03:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\eereader.com 2017-09-11 07:29 - 2017-09-12 03:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\efreader.com 2017-09-11 07:34 - 2017-09-12 03:48 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\efreader.com\analytics.sol 2017-09-11 07:29 - 2017-09-12 03:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\egreader.com 2017-09-11 10:13 - 2017-09-11 10:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\inread.anyclip.com 2017-09-11 10:13 - 2017-09-11 10:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\inread.anyclip.com\ac# 2017-09-11 10:13 - 2017-09-11 10:13 - 000000443 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\macromedia.com 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\macromedia.com\support 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\macromedia.com\support\flashplayer 2017-09-11 07:27 - 2017-09-11 10:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\macromedia.com\support\flashplayer\sys 2017-09-11 07:27 - 2017-09-11 10:13 - 000000513 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 07:28 - 2017-09-11 07:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 07:28 - 2017-09-11 07:28 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 07:27 - 2017-09-11 07:27 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 07:27 - 2017-09-11 07:27 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 07:27 - 2017-09-11 07:27 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 07:29 - 2017-09-11 07:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 07:29 - 2017-09-11 07:29 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 07:29 - 2017-09-11 07:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 07:29 - 2017-09-11 07:29 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 10:13 - 2017-09-11 10:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 10:13 - 2017-09-11 10:13 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data691\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UDT6BAYQ\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-10 00:24 - 2017-09-12 04:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692 2017-09-10 00:24 - 2017-09-12 02:37 - 000352256 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Cookies 2017-09-10 00:24 - 2017-09-12 02:37 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Cookies-journal 2017-09-10 00:28 - 2017-09-10 00:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\databases 2017-09-10 00:28 - 2017-09-10 00:28 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\databases\Databases.db 2017-09-10 00:28 - 2017-09-10 00:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\databases\Databases.db-journal 2017-09-10 00:24 - 2017-09-12 02:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\File System 2017-09-10 00:24 - 2017-09-12 02:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\File System\Origins 2017-09-10 00:24 - 2017-09-11 04:56 - 000000504 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\File System\Origins\000003.log 2017-09-12 02:34 - 2017-09-12 02:34 - 000000319 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\File System\Origins\000004.ldb 2017-09-12 02:34 - 2017-09-12 02:34 - 000000319 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\File System\Origins\000005.ldb 2017-09-10 00:24 - 2017-09-10 00:24 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\File System\Origins\CURRENT 2017-09-10 00:24 - 2017-09-10 00:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\File System\Origins\LOCK 2017-09-10 00:24 - 2017-09-12 02:35 - 000000744 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\File System\Origins\LOG 2017-09-10 00:24 - 2017-09-11 04:55 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\File System\Origins\LOG.old 2017-09-10 00:24 - 2017-09-10 00:24 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\File System\Origins\MANIFEST-000001 2017-09-10 00:31 - 2017-09-10 00:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\File System\Origins\lost 2017-09-10 00:28 - 2017-09-12 02:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB 2017-09-10 00:28 - 2017-09-10 00:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_ams1-ib.adnxs.com_0.indexeddb.leveldb 2017-09-10 00:28 - 2017-09-10 00:28 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_ams1-ib.adnxs.com_0.indexeddb.leveldb\000003.log 2017-09-10 00:28 - 2017-09-10 00:28 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_ams1-ib.adnxs.com_0.indexeddb.leveldb\CURRENT 2017-09-10 00:28 - 2017-09-10 00:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_ams1-ib.adnxs.com_0.indexeddb.leveldb\LOCK 2017-09-10 00:28 - 2017-09-10 00:29 - 000000161 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_ams1-ib.adnxs.com_0.indexeddb.leveldb\LOG 2017-09-10 00:28 - 2017-09-10 00:28 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_ams1-ib.adnxs.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 02:34 - 2017-09-12 02:34 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb 2017-09-12 02:34 - 2017-09-12 02:34 - 000000184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb\000003.log 2017-09-12 02:34 - 2017-09-12 02:34 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb\CURRENT 2017-09-12 02:34 - 2017-09-12 02:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb\LOCK 2017-09-12 02:34 - 2017-09-12 02:34 - 000000160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb\LOG 2017-09-12 02:34 - 2017-09-12 02:34 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_www.bicycling.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 11:22 - 2017-09-10 11:22 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_www.food.com_0.indexeddb.leveldb 2017-09-10 11:22 - 2017-09-10 11:22 - 000000174 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_www.food.com_0.indexeddb.leveldb\000003.log 2017-09-10 11:22 - 2017-09-10 11:22 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_www.food.com_0.indexeddb.leveldb\CURRENT 2017-09-10 11:22 - 2017-09-10 11:22 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_www.food.com_0.indexeddb.leveldb\LOCK 2017-09-10 11:22 - 2017-09-10 11:22 - 000000156 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_www.food.com_0.indexeddb.leveldb\LOG 2017-09-10 11:22 - 2017-09-10 11:22 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_www.food.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 11:16 - 2017-09-10 11:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_www.nydailynews.com_0.indexeddb.leveldb 2017-09-10 11:16 - 2017-09-10 11:16 - 000000188 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_www.nydailynews.com_0.indexeddb.leveldb\000003.log 2017-09-10 11:16 - 2017-09-10 11:16 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_www.nydailynews.com_0.indexeddb.leveldb\CURRENT 2017-09-10 11:16 - 2017-09-10 11:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_www.nydailynews.com_0.indexeddb.leveldb\LOCK 2017-09-10 11:16 - 2017-09-10 11:16 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_www.nydailynews.com_0.indexeddb.leveldb\LOG 2017-09-10 11:16 - 2017-09-10 11:16 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\IndexedDB\http_www.nydailynews.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 00:24 - 2017-09-12 02:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage 2017-09-10 00:30 - 2017-09-10 00:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-10 00:30 - 2017-09-10 00:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-10 11:18 - 2017-09-10 11:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-10 11:18 - 2017-09-10 11:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-10 00:24 - 2017-09-10 00:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-10 00:24 - 2017-09-10 00:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 11:18 - 2017-09-10 11:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_connexity.net_0.localstorage 2017-09-10 11:18 - 2017-09-10 11:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 00:30 - 2017-09-10 00:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_mashable.com_0.localstorage 2017-09-10 00:30 - 2017-09-10 00:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_mashable.com_0.localstorage-journal 2017-09-11 04:56 - 2017-09-11 04:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-11 04:56 - 2017-09-11 04:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-11 04:58 - 2017-09-11 04:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_uk.reuters.com_0.localstorage 2017-09-11 04:58 - 2017-09-11 04:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_uk.reuters.com_0.localstorage-journal 2017-09-10 00:24 - 2017-09-10 00:26 - 000014336 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.bhg.com_0.localstorage 2017-09-10 00:24 - 2017-09-10 00:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.bhg.com_0.localstorage-journal 2017-09-10 00:29 - 2017-09-10 17:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-10 00:29 - 2017-09-10 17:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-10 00:27 - 2017-09-10 00:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 00:27 - 2017-09-10 00:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 11:20 - 2017-09-10 11:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.complex.com_0.localstorage 2017-09-10 11:20 - 2017-09-10 11:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-12 02:28 - 2017-09-12 02:30 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.countryliving.com_0.localstorage 2017-09-12 02:28 - 2017-09-12 02:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.countryliving.com_0.localstorage-journal 2017-09-10 11:20 - 2017-09-10 11:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.crash.net_0.localstorage 2017-09-10 11:20 - 2017-09-10 11:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-11 04:57 - 2017-09-11 04:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.detroitnews.com_0.localstorage 2017-09-11 04:57 - 2017-09-11 04:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.detroitnews.com_0.localstorage-journal 2017-09-10 00:28 - 2017-09-10 00:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-10 00:28 - 2017-09-10 00:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-10 17:56 - 2017-09-12 02:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-10 17:56 - 2017-09-12 02:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-10 11:22 - 2017-09-10 11:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.food.com_0.localstorage 2017-09-10 11:22 - 2017-09-10 11:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-10 17:54 - 2017-09-10 17:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-10 17:54 - 2017-09-10 17:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-12 02:32 - 2017-09-12 02:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-12 02:32 - 2017-09-12 02:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-10 11:19 - 2017-09-10 11:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.insidenova.com_0.localstorage 2017-09-10 11:19 - 2017-09-10 11:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.insidenova.com_0.localstorage-journal 2017-09-10 17:54 - 2017-09-10 17:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.instyle.com_0.localstorage 2017-09-10 17:54 - 2017-09-10 17:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-10 00:26 - 2017-09-10 00:26 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 00:26 - 2017-09-10 00:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 00:28 - 2017-09-10 00:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.islandpacket.com_0.localstorage 2017-09-10 00:28 - 2017-09-10 00:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.islandpacket.com_0.localstorage-journal 2017-09-10 11:21 - 2017-09-11 04:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.latimes.com_0.localstorage 2017-09-10 11:21 - 2017-09-11 04:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-12 02:29 - 2017-09-12 02:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.milly.com_0.localstorage 2017-09-12 02:29 - 2017-09-12 02:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.milly.com_0.localstorage-journal 2017-09-11 04:54 - 2017-09-11 04:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.nbc.com_0.localstorage 2017-09-11 04:54 - 2017-09-11 04:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.nbc.com_0.localstorage-journal 2017-09-10 11:18 - 2017-09-10 11:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 11:18 - 2017-09-10 11:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 11:16 - 2017-09-10 11:17 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.nydailynews.com_0.localstorage 2017-09-10 11:16 - 2017-09-10 11:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.nydailynews.com_0.localstorage-journal 2017-09-10 00:27 - 2017-09-10 11:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.parents.com_0.localstorage 2017-09-10 00:27 - 2017-09-10 11:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-12 02:31 - 2017-09-12 02:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-12 02:31 - 2017-09-12 02:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-11 04:54 - 2017-09-11 04:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.reuters.com_0.localstorage 2017-09-11 04:54 - 2017-09-11 04:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-12 02:33 - 2017-09-12 02:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.torontosun.com_0.localstorage 2017-09-12 02:33 - 2017-09-12 02:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www.torontosun.com_0.localstorage-journal 2017-09-10 17:55 - 2017-09-10 17:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www4.fmovies.io_0.localstorage 2017-09-10 17:55 - 2017-09-10 17:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\http_www4.fmovies.io_0.localstorage-journal 2017-09-10 00:25 - 2017-09-10 00:25 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 00:25 - 2017-09-10 00:25 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 11:18 - 2017-09-10 11:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_connexity.net_0.localstorage 2017-09-10 11:18 - 2017-09-10 11:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-12 02:29 - 2017-09-12 02:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_content.shoprunner.com_0.localstorage 2017-09-12 02:29 - 2017-09-12 02:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_content.shoprunner.com_0.localstorage-journal 2017-09-10 17:50 - 2017-09-11 04:52 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 17:50 - 2017-09-11 04:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 11:22 - 2017-09-10 11:23 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-10 11:22 - 2017-09-10 11:23 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-10 00:24 - 2017-09-10 00:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_gateway.foresee.com_0.localstorage 2017-09-10 00:24 - 2017-09-10 00:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_gateway.foresee.com_0.localstorage-journal 2017-09-10 17:50 - 2017-09-11 04:52 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 17:50 - 2017-09-11 04:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 00:24 - 2017-09-10 00:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_sb.monetate.net_0.localstorage 2017-09-10 00:24 - 2017-09-10 00:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_sb.monetate.net_0.localstorage-journal 2017-09-10 17:50 - 2017-09-11 04:52 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 17:50 - 2017-09-11 04:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 11:16 - 2017-09-10 11:17 - 000049152 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_static.olark.com_0.localstorage 2017-09-10 11:16 - 2017-09-10 11:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_static.olark.com_0.localstorage-journal 2017-09-10 17:50 - 2017-09-10 17:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_www.apple.com_0.localstorage 2017-09-10 17:50 - 2017-09-10 17:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_www.apple.com_0.localstorage-journal 2017-09-11 04:52 - 2017-09-11 04:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_www.instagram.com_0.localstorage 2017-09-11 04:52 - 2017-09-11 04:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_www.instagram.com_0.localstorage-journal 2017-09-10 11:16 - 2017-09-10 11:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_www.lorextechnology.com_0.localstorage 2017-09-10 11:16 - 2017-09-10 11:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_www.lorextechnology.com_0.localstorage-journal 2017-09-10 00:24 - 2017-09-10 00:26 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_www.tanga.com_0.localstorage 2017-09-10 00:24 - 2017-09-10 00:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_www.tanga.com_0.localstorage-journal 2017-09-11 04:52 - 2017-09-11 04:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_www.thisisanfield.com_0.localstorage 2017-09-11 04:52 - 2017-09-11 04:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_www.thisisanfield.com_0.localstorage-journal 2017-09-10 17:50 - 2017-09-10 17:54 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_www.ultimate-guitar.com_0.localstorage 2017-09-10 17:50 - 2017-09-10 17:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Local Storage\https_www.ultimate-guitar.com_0.localstorage-journal 2017-09-10 00:24 - 2017-09-10 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data 2017-09-10 00:24 - 2017-09-12 02:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash 2017-09-10 00:24 - 2017-09-10 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 00:24 - 2017-09-10 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 00:24 - 2017-09-10 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\GQN8K83X 2017-09-10 00:24 - 2017-09-10 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 00:24 - 2017-09-10 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 00:24 - 2017-09-10 17:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E 2017-09-10 00:24 - 2017-09-12 02:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\cdn.stickyadstv.com 2017-09-10 17:50 - 2017-09-10 17:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\cdncache-a.akamaihd.net 2017-09-10 17:50 - 2017-09-10 17:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\cdncache-a.akamaihd.net\items 2017-09-10 17:50 - 2017-09-10 17:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 17:50 - 2017-09-11 04:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 17:50 - 2017-09-11 04:52 - 000000488 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 00:24 - 2017-09-12 02:32 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\eereader.com 2017-09-10 00:26 - 2017-09-12 02:35 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\efreader.com 2017-09-10 00:32 - 2017-09-12 02:35 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\efreader.com\analytics.sol 2017-09-10 00:24 - 2017-09-12 02:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\egreader.com 2017-09-10 11:16 - 2017-09-10 11:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\launch.newsinc.com 2017-09-10 11:17 - 2017-09-10 11:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\launch.newsinc.com\##42DCB6319DD46C29 2017-09-10 11:17 - 2017-09-10 11:17 - 000000207 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\launch.newsinc.com\##42DCB6319DD46C29\00000001.sol 2017-09-10 11:16 - 2017-09-10 11:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\launch.newsinc.com\##D54BB033D4ABD0B7 2017-09-10 11:16 - 2017-09-10 11:16 - 000000190 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\launch.newsinc.com\##D54BB033D4ABD0B7\00000001.sol 2017-09-10 11:16 - 2017-09-10 11:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\launch.newsinc.com\198 2017-09-10 11:16 - 2017-09-10 11:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\launch.newsinc.com\198\js 2017-09-10 11:16 - 2017-09-10 11:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\launch.newsinc.com\198\js\lib 2017-09-10 11:16 - 2017-09-10 11:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\launch.newsinc.com\198\js\lib\amp.premier 2017-09-10 11:16 - 2017-09-10 11:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\launch.newsinc.com\198\js\lib\amp.premier\AkamaiPremierPlayer.swf 2017-09-10 11:16 - 2017-09-10 11:17 - 000000125 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\launch.newsinc.com\198\js\lib\amp.premier\AkamaiPremierPlayer.swf\ndn.userData.sol 2017-09-10 00:24 - 2017-09-10 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\macromedia.com 2017-09-10 00:24 - 2017-09-10 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\macromedia.com\support 2017-09-10 00:24 - 2017-09-10 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\macromedia.com\support\flashplayer 2017-09-10 00:24 - 2017-09-10 17:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\macromedia.com\support\flashplayer\sys 2017-09-10 00:24 - 2017-09-10 17:50 - 000000513 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 00:24 - 2017-09-10 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 00:24 - 2017-09-10 00:24 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 17:50 - 2017-09-10 17:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 17:50 - 2017-09-10 17:50 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 00:24 - 2017-09-10 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 00:24 - 2017-09-10 00:24 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 00:26 - 2017-09-10 00:26 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 00:26 - 2017-09-10 00:26 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 00:24 - 2017-09-10 00:24 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 00:24 - 2017-09-10 00:24 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 11:16 - 2017-09-10 11:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\macromedia.com\support\flashplayer\sys\#launch.newsinc.com 2017-09-10 11:16 - 2017-09-10 11:16 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data692\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\SL96EH3E\macromedia.com\support\flashplayer\sys\#launch.newsinc.com\settings.sol 2017-09-12 02:39 - 2017-09-12 09:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693 2017-09-12 02:39 - 2017-09-12 07:51 - 000278528 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Cookies 2017-09-12 02:39 - 2017-09-12 07:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Cookies-journal 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\databases 2017-09-12 07:43 - 2017-09-12 07:43 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\databases\Databases.db 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\databases\Databases.db-journal 2017-09-12 02:43 - 2017-09-12 07:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System 2017-09-12 02:43 - 2017-09-12 02:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\000 2017-09-12 02:43 - 2017-09-12 07:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\000\t 2017-09-12 07:46 - 2017-09-12 07:46 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\000\t\.usage 2017-09-12 07:43 - 2017-09-12 07:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\000\t\Paths 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\000\t\Paths\000003.log 2017-09-12 07:43 - 2017-09-12 07:43 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\000\t\Paths\CURRENT 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\000\t\Paths\LOCK 2017-09-12 07:43 - 2017-09-12 07:46 - 000000307 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\000\t\Paths\LOG 2017-09-12 07:43 - 2017-09-12 07:43 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\000\t\Paths\LOG.old 2017-09-12 07:43 - 2017-09-12 07:43 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\000\t\Paths\MANIFEST-000001 2017-09-12 02:43 - 2017-09-12 02:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\001 2017-09-12 02:43 - 2017-09-12 07:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\001\t 2017-09-12 07:43 - 2017-09-12 07:43 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\001\t\.usage 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\001\t\Paths 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\001\t\Paths\000003.log 2017-09-12 07:43 - 2017-09-12 07:43 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\001\t\Paths\CURRENT 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\001\t\Paths\LOCK 2017-09-12 07:43 - 2017-09-12 07:43 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\001\t\Paths\LOG 2017-09-12 07:43 - 2017-09-12 07:43 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\001\t\Paths\MANIFEST-000001 2017-09-12 02:45 - 2017-09-12 02:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\002 2017-09-12 02:45 - 2017-09-12 07:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\002\t 2017-09-12 07:43 - 2017-09-12 07:43 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\002\t\.usage 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\002\t\Paths 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\002\t\Paths\000003.log 2017-09-12 07:43 - 2017-09-12 07:43 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\002\t\Paths\CURRENT 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\002\t\Paths\LOCK 2017-09-12 07:43 - 2017-09-12 07:43 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\002\t\Paths\LOG 2017-09-12 07:43 - 2017-09-12 07:43 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\002\t\Paths\MANIFEST-000001 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\003 2017-09-12 07:43 - 2017-09-12 07:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\003\t 2017-09-12 07:46 - 2017-09-12 07:46 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\003\t\.usage 2017-09-12 07:46 - 2017-09-12 07:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\003\t\Paths 2017-09-12 07:46 - 2017-09-12 07:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\003\t\Paths\000003.log 2017-09-12 07:46 - 2017-09-12 07:46 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\003\t\Paths\CURRENT 2017-09-12 07:46 - 2017-09-12 07:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\003\t\Paths\LOCK 2017-09-12 07:46 - 2017-09-12 07:46 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\003\t\Paths\LOG 2017-09-12 07:46 - 2017-09-12 07:46 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\003\t\Paths\MANIFEST-000001 2017-09-12 02:43 - 2017-09-12 07:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\Origins 2017-09-12 02:43 - 2017-09-12 07:45 - 000000311 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\Origins\000003.log 2017-09-12 02:43 - 2017-09-12 02:43 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\Origins\CURRENT 2017-09-12 02:43 - 2017-09-12 02:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\Origins\LOCK 2017-09-12 02:43 - 2017-09-12 07:46 - 000000440 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\Origins\LOG 2017-09-12 02:43 - 2017-09-12 07:44 - 000000794 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\Origins\LOG.old 2017-09-12 02:43 - 2017-09-12 02:43 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\Origins\MANIFEST-000001 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\File System\Origins\lost 2017-09-12 07:43 - 2017-09-12 07:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\http_www.memedeportes.com_0.indexeddb.leveldb 2017-09-12 07:43 - 2017-09-12 07:43 - 000000190 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\http_www.memedeportes.com_0.indexeddb.leveldb\000003.log 2017-09-12 07:43 - 2017-09-12 07:43 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\http_www.memedeportes.com_0.indexeddb.leveldb\CURRENT 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\http_www.memedeportes.com_0.indexeddb.leveldb\LOCK 2017-09-12 07:43 - 2017-09-12 07:43 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\http_www.memedeportes.com_0.indexeddb.leveldb\LOG 2017-09-12 07:43 - 2017-09-12 07:43 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\http_www.memedeportes.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 07:46 - 2017-09-12 07:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\http_www.nbcconnecticut.com_0.indexeddb.leveldb 2017-09-12 07:46 - 2017-09-12 07:46 - 000000194 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\http_www.nbcconnecticut.com_0.indexeddb.leveldb\000003.log 2017-09-12 07:46 - 2017-09-12 07:46 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\http_www.nbcconnecticut.com_0.indexeddb.leveldb\CURRENT 2017-09-12 07:46 - 2017-09-12 07:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\http_www.nbcconnecticut.com_0.indexeddb.leveldb\LOCK 2017-09-12 07:46 - 2017-09-12 07:46 - 000000165 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\http_www.nbcconnecticut.com_0.indexeddb.leveldb\LOG 2017-09-12 07:46 - 2017-09-12 07:46 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\http_www.nbcconnecticut.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\https_30696373.va.cobrowse.liveperson.net_0.indexeddb.leveldb 2017-09-12 07:43 - 2017-09-12 07:43 - 000000587 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\https_30696373.va.cobrowse.liveperson.net_0.indexeddb.leveldb\000003.log 2017-09-12 07:43 - 2017-09-12 07:43 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\https_30696373.va.cobrowse.liveperson.net_0.indexeddb.leveldb\CURRENT 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\https_30696373.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOCK 2017-09-12 07:43 - 2017-09-12 07:44 - 000000179 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\https_30696373.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOG 2017-09-12 07:43 - 2017-09-12 07:43 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\https_30696373.va.cobrowse.liveperson.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb 2017-09-12 07:43 - 2017-09-12 07:43 - 000001348 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\000003.log 2017-09-12 07:43 - 2017-09-12 07:43 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\CURRENT 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOCK 2017-09-12 07:43 - 2017-09-12 07:44 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOG 2017-09-12 07:43 - 2017-09-12 07:43 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 02:39 - 2017-09-12 07:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage 2017-09-12 07:45 - 2017-09-12 07:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-12 07:45 - 2017-09-12 07:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-12 07:43 - 2017-09-12 07:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_cdn.cxense.com_0.localstorage 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_cdn.cxense.com_0.localstorage-journal 2017-09-12 02:39 - 2017-09-12 02:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-12 02:39 - 2017-09-12 02:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-12 07:43 - 2017-09-12 07:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_code3.adtlgc.com_0.localstorage 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_code3.adtlgc.com_0.localstorage-journal 2017-09-12 02:43 - 2017-09-12 02:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_sync.graph.bluecava.com_0.localstorage 2017-09-12 02:43 - 2017-09-12 02:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_sync.graph.bluecava.com_0.localstorage-journal 2017-09-12 02:39 - 2017-09-12 02:40 - 000008192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.billboard.com_0.localstorage 2017-09-12 02:39 - 2017-09-12 02:40 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.billboard.com_0.localstorage-journal 2017-09-12 02:43 - 2017-09-12 02:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.bounty.com_0.localstorage 2017-09-12 02:43 - 2017-09-12 02:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.bounty.com_0.localstorage-journal 2017-09-12 02:48 - 2017-09-12 02:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.cbs.com_0.localstorage 2017-09-12 02:48 - 2017-09-12 02:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.cbs.com_0.localstorage-journal 2017-09-12 02:41 - 2017-09-12 02:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-12 02:41 - 2017-09-12 02:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-12 07:48 - 2017-09-12 07:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.complex.com_0.localstorage 2017-09-12 07:48 - 2017-09-12 07:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-12 07:49 - 2017-09-12 07:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.eatingwell.com_0.localstorage 2017-09-12 07:49 - 2017-09-12 07:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.eatingwell.com_0.localstorage-journal 2017-09-12 02:42 - 2017-09-12 02:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.finecooking.com_0.localstorage 2017-09-12 02:42 - 2017-09-12 02:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.finecooking.com_0.localstorage-journal 2017-09-12 07:47 - 2017-09-12 07:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.food.com_0.localstorage 2017-09-12 07:47 - 2017-09-12 07:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-12 02:42 - 2017-09-12 07:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.instyle.com_0.localstorage 2017-09-12 02:42 - 2017-09-12 07:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-12 02:41 - 2017-09-12 02:41 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-12 02:41 - 2017-09-12 02:41 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-12 02:42 - 2017-09-12 02:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.macworld.com_0.localstorage 2017-09-12 02:42 - 2017-09-12 02:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-12 07:43 - 2017-09-12 07:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.memedeportes.com_0.localstorage 2017-09-12 07:43 - 2017-09-12 07:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.memedeportes.com_0.localstorage-journal 2017-09-12 07:46 - 2017-09-12 07:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.nbcconnecticut.com_0.localstorage 2017-09-12 07:46 - 2017-09-12 07:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.nbcconnecticut.com_0.localstorage-journal 2017-09-12 07:49 - 2017-09-12 07:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.nfl.com_0.localstorage 2017-09-12 07:49 - 2017-09-12 07:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-12 07:48 - 2017-09-12 07:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.vogue.com_0.localstorage 2017-09-12 07:48 - 2017-09-12 07:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\http_www.vogue.com_0.localstorage-journal 2017-09-12 02:43 - 2017-09-12 02:43 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\https_c.betrad.com_0.localstorage 2017-09-12 02:43 - 2017-09-12 02:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-12 07:48 - 2017-09-12 07:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\https_connexity.net_0.localstorage 2017-09-12 07:48 - 2017-09-12 07:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-12 02:42 - 2017-09-12 02:42 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\https_tpc.googlesyndication.com_0.localstorage 2017-09-12 02:42 - 2017-09-12 02:42 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\https_tpc.googlesyndication.com_0.localstorage-journal 2017-09-12 07:43 - 2017-09-12 07:43 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\https_www.competitivecyclist.com_0.localstorage 2017-09-12 07:43 - 2017-09-12 07:43 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\https_www.competitivecyclist.com_0.localstorage-journal 2017-09-12 02:39 - 2017-09-12 02:39 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\https_www.wine.com_0.localstorage 2017-09-12 02:39 - 2017-09-12 02:39 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Local Storage\https_www.wine.com_0.localstorage-journal 2017-09-12 02:39 - 2017-09-12 02:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data 2017-09-12 02:39 - 2017-09-12 07:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash 2017-09-12 02:39 - 2017-09-12 02:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-12 02:39 - 2017-09-12 02:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-12 02:39 - 2017-09-12 02:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\BHR5J977 2017-09-12 02:39 - 2017-09-12 02:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot 2017-09-12 02:39 - 2017-09-12 02:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-12 02:39 - 2017-09-12 02:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG 2017-09-12 02:39 - 2017-09-12 07:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG\cdn.stickyadstv.com 2017-09-12 02:39 - 2017-09-12 07:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG\eereader.com 2017-09-12 07:45 - 2017-09-12 07:45 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG\eereader.com\analytics.sol 2017-09-12 02:41 - 2017-09-12 07:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG\efreader.com 2017-09-12 02:47 - 2017-09-12 02:47 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG\efreader.com\analytics.sol 2017-09-12 02:39 - 2017-09-12 07:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG\egreader.com 2017-09-12 02:42 - 2017-09-12 02:42 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG\egreader.com\analytics.sol 2017-09-12 02:39 - 2017-09-12 02:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG\macromedia.com 2017-09-12 02:39 - 2017-09-12 02:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG\macromedia.com\support 2017-09-12 02:39 - 2017-09-12 02:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG\macromedia.com\support\flashplayer 2017-09-12 02:39 - 2017-09-12 02:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG\macromedia.com\support\flashplayer\sys 2017-09-12 02:39 - 2017-09-12 02:41 - 000000464 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-12 02:39 - 2017-09-12 02:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-12 02:39 - 2017-09-12 02:39 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-12 02:39 - 2017-09-12 02:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-12 02:39 - 2017-09-12 02:39 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-12 02:41 - 2017-09-12 02:41 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-12 02:41 - 2017-09-12 02:41 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-12 02:39 - 2017-09-12 02:39 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-12 02:39 - 2017-09-12 02:39 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data693\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\F2KZLHXG\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 18:50 - 2017-09-10 19:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694 2017-09-10 18:50 - 2017-09-10 18:59 - 000175104 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Cookies 2017-09-10 18:50 - 2017-09-10 18:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Cookies-journal 2017-09-10 18:50 - 2017-09-10 18:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\File System 2017-09-10 18:50 - 2017-09-10 18:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\File System\000 2017-09-10 18:50 - 2017-09-10 18:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\File System\000\t 2017-09-10 18:51 - 2017-09-10 18:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\File System\001 2017-09-10 18:51 - 2017-09-10 18:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\File System\001\t 2017-09-10 18:52 - 2017-09-10 18:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\File System\002 2017-09-10 18:52 - 2017-09-10 18:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\File System\002\t 2017-09-10 18:58 - 2017-09-10 18:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\File System\003 2017-09-10 18:58 - 2017-09-10 18:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\File System\003\t 2017-09-10 18:50 - 2017-09-10 18:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\File System\Origins 2017-09-10 18:50 - 2017-09-10 19:00 - 000000311 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\File System\Origins\000003.log 2017-09-10 18:50 - 2017-09-10 18:50 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\File System\Origins\CURRENT 2017-09-10 18:50 - 2017-09-10 18:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\File System\Origins\LOCK 2017-09-10 18:50 - 2017-09-10 18:58 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\File System\Origins\LOG 2017-09-10 18:50 - 2017-09-10 18:52 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\File System\Origins\LOG.old 2017-09-10 18:50 - 2017-09-10 18:50 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\File System\Origins\MANIFEST-000001 2017-09-10 18:50 - 2017-09-10 19:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage 2017-09-10 18:56 - 2017-09-10 18:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_dish.allrecipes.com_0.localstorage 2017-09-10 18:56 - 2017-09-10 18:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_dish.allrecipes.com_0.localstorage-journal 2017-09-10 18:51 - 2017-09-10 18:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 18:51 - 2017-09-10 18:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 18:50 - 2017-09-10 18:51 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 18:50 - 2017-09-10 18:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 18:56 - 2017-09-10 18:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_up.nfl.com_0.localstorage 2017-09-10 18:56 - 2017-09-10 18:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_up.nfl.com_0.localstorage-journal 2017-09-10 18:55 - 2017-09-10 18:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-10 18:55 - 2017-09-10 18:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-10 18:52 - 2017-09-10 18:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 18:52 - 2017-09-10 18:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 18:50 - 2017-09-10 18:51 - 000096256 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_www.cleveland.com_0.localstorage 2017-09-10 18:50 - 2017-09-10 18:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_www.cleveland.com_0.localstorage-journal 2017-09-10 18:55 - 2017-09-10 18:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_www.foxsports.com_0.localstorage 2017-09-10 18:55 - 2017-09-10 18:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_www.foxsports.com_0.localstorage-journal 2017-09-10 18:54 - 2017-09-10 18:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-10 18:54 - 2017-09-10 18:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-10 18:52 - 2017-09-10 18:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 18:52 - 2017-09-10 18:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 18:53 - 2017-09-10 18:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 18:53 - 2017-09-10 18:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 18:53 - 2017-09-10 18:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_www.parents.com_0.localstorage 2017-09-10 18:53 - 2017-09-10 18:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-10 18:55 - 2017-09-10 18:55 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 18:55 - 2017-09-10 18:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 18:51 - 2017-09-10 18:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\https_connexity.net_0.localstorage 2017-09-10 18:51 - 2017-09-10 18:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 18:51 - 2017-09-10 18:51 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 18:51 - 2017-09-10 18:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 18:51 - 2017-09-10 18:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\https_jasmin.com_0.localstorage 2017-09-10 18:51 - 2017-09-10 18:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\https_jasmin.com_0.localstorage-journal 2017-09-10 18:51 - 2017-09-10 18:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\https_player.mediabong.net_0.localstorage 2017-09-10 18:51 - 2017-09-10 18:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\https_player.mediabong.net_0.localstorage-journal 2017-09-10 18:51 - 2017-09-10 18:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-10 18:51 - 2017-09-10 18:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 18:50 - 2017-09-10 18:51 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 18:50 - 2017-09-10 18:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 18:50 - 2017-09-10 18:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data 2017-09-10 18:50 - 2017-09-10 18:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash 2017-09-10 18:50 - 2017-09-10 18:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 18:50 - 2017-09-10 18:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 18:50 - 2017-09-10 18:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\FPF7L58K 2017-09-10 18:50 - 2017-09-10 18:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 18:50 - 2017-09-10 18:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 18:50 - 2017-09-10 18:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C 2017-09-10 18:51 - 2017-09-10 18:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\cdn.stickyadstv.com 2017-09-10 18:50 - 2017-09-10 18:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\cdncache-a.akamaihd.net 2017-09-10 18:50 - 2017-09-10 18:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\cdncache-a.akamaihd.net\items 2017-09-10 18:50 - 2017-09-10 18:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 18:50 - 2017-09-10 18:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 18:50 - 2017-09-10 18:55 - 000000535 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 18:50 - 2017-09-10 18:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\eereader.com 2017-09-10 18:52 - 2017-09-10 19:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\efreader.com 2017-09-10 19:00 - 2017-09-10 19:00 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\efreader.com\analytics.sol 2017-09-10 18:51 - 2017-09-10 18:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\egreader.com 2017-09-10 18:51 - 2017-09-10 18:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\flashx.dditscdn.com 2017-09-10 18:51 - 2017-09-10 18:51 - 000000118 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\flashx.dditscdn.com\savedData.sol 2017-09-10 18:52 - 2017-09-10 18:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\inread.anyclip.com 2017-09-10 18:52 - 2017-09-10 18:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\inread.anyclip.com\ac# 2017-09-10 18:52 - 2017-09-10 18:52 - 000000483 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-10 18:50 - 2017-09-10 18:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\macromedia.com 2017-09-10 18:50 - 2017-09-10 18:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\macromedia.com\support 2017-09-10 18:50 - 2017-09-10 18:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\macromedia.com\support\flashplayer 2017-09-10 18:50 - 2017-09-10 18:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\macromedia.com\support\flashplayer\sys 2017-09-10 18:50 - 2017-09-10 18:52 - 000000513 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 18:51 - 2017-09-10 18:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 18:51 - 2017-09-10 18:51 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 18:50 - 2017-09-10 18:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 18:50 - 2017-09-10 18:50 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 18:50 - 2017-09-10 18:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 18:50 - 2017-09-10 18:50 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 18:52 - 2017-09-10 18:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 18:52 - 2017-09-10 18:52 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 18:51 - 2017-09-10 18:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 18:51 - 2017-09-10 18:51 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 18:51 - 2017-09-10 18:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\macromedia.com\support\flashplayer\sys\#flashx.dditscdn.com 2017-09-10 18:51 - 2017-09-10 18:51 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\macromedia.com\support\flashplayer\sys\#flashx.dditscdn.com\settings.sol 2017-09-10 18:52 - 2017-09-10 18:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-10 18:52 - 2017-09-10 18:52 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data694\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\PUD5YB3C\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-10 14:47 - 2017-09-11 07:19 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695 2017-09-10 14:47 - 2017-09-11 06:12 - 000221184 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Cookies 2017-09-10 14:47 - 2017-09-11 06:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Cookies-journal 2017-09-11 06:07 - 2017-09-11 06:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\databases 2017-09-11 06:07 - 2017-09-11 06:07 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\databases\Databases.db 2017-09-11 06:07 - 2017-09-11 06:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\databases\Databases.db-journal 2017-09-10 14:50 - 2017-09-11 06:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System 2017-09-10 14:50 - 2017-09-10 14:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\000 2017-09-10 14:50 - 2017-09-11 06:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\000\t 2017-09-11 06:07 - 2017-09-11 06:07 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\000\t\.usage 2017-09-11 06:07 - 2017-09-11 06:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\000\t\Paths 2017-09-11 06:07 - 2017-09-11 06:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\000\t\Paths\000003.log 2017-09-11 06:07 - 2017-09-11 06:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\000\t\Paths\CURRENT 2017-09-11 06:07 - 2017-09-11 06:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\000\t\Paths\LOCK 2017-09-11 06:07 - 2017-09-11 06:08 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\000\t\Paths\LOG 2017-09-11 06:07 - 2017-09-11 06:07 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\000\t\Paths\MANIFEST-000001 2017-09-11 06:07 - 2017-09-11 06:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\001 2017-09-11 06:07 - 2017-09-11 06:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\001\t 2017-09-11 06:07 - 2017-09-11 06:07 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\001\t\.usage 2017-09-11 06:07 - 2017-09-11 06:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\001\t\Paths 2017-09-11 06:07 - 2017-09-11 06:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\001\t\Paths\000003.log 2017-09-11 06:07 - 2017-09-11 06:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\001\t\Paths\CURRENT 2017-09-11 06:07 - 2017-09-11 06:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\001\t\Paths\LOCK 2017-09-11 06:07 - 2017-09-11 06:08 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\001\t\Paths\LOG 2017-09-11 06:07 - 2017-09-11 06:07 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\001\t\Paths\MANIFEST-000001 2017-09-10 14:50 - 2017-09-11 06:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\Origins 2017-09-10 14:50 - 2017-09-11 06:08 - 000000171 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\Origins\000003.log 2017-09-10 14:50 - 2017-09-10 14:50 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\Origins\CURRENT 2017-09-10 14:50 - 2017-09-10 14:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\Origins\LOCK 2017-09-10 14:50 - 2017-09-11 06:07 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\Origins\LOG 2017-09-10 14:50 - 2017-09-10 14:50 - 000000127 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\Origins\LOG.old 2017-09-10 14:50 - 2017-09-10 14:50 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\File System\Origins\MANIFEST-000001 2017-09-11 06:07 - 2017-09-11 06:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\IndexedDB 2017-09-11 06:07 - 2017-09-11 06:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\IndexedDB\http_www.parents.com_0.indexeddb.leveldb 2017-09-11 06:07 - 2017-09-11 06:07 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\IndexedDB\http_www.parents.com_0.indexeddb.leveldb\000003.log 2017-09-11 06:07 - 2017-09-11 06:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\IndexedDB\http_www.parents.com_0.indexeddb.leveldb\CURRENT 2017-09-11 06:07 - 2017-09-11 06:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\IndexedDB\http_www.parents.com_0.indexeddb.leveldb\LOCK 2017-09-11 06:07 - 2017-09-11 06:07 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\IndexedDB\http_www.parents.com_0.indexeddb.leveldb\LOG 2017-09-11 06:07 - 2017-09-11 06:07 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\IndexedDB\http_www.parents.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 14:47 - 2017-09-11 06:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage 2017-09-11 06:06 - 2017-09-11 06:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 06:06 - 2017-09-11 06:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 06:06 - 2017-09-11 06:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_connexity.net_0.localstorage 2017-09-11 06:06 - 2017-09-11 06:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 14:49 - 2017-09-10 14:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_nflfilms.nfl.com_0.localstorage 2017-09-10 14:49 - 2017-09-10 14:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_nflfilms.nfl.com_0.localstorage-journal 2017-09-11 06:04 - 2017-09-11 06:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 06:04 - 2017-09-11 06:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 06:09 - 2017-09-11 06:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_thedroidguy.com_0.localstorage 2017-09-11 06:09 - 2017-09-11 06:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_thedroidguy.com_0.localstorage-journal 2017-09-11 06:10 - 2017-09-11 06:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.aetv.com_0.localstorage 2017-09-11 06:10 - 2017-09-11 06:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.aetv.com_0.localstorage-journal 2017-09-10 14:51 - 2017-09-10 14:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-10 14:51 - 2017-09-10 14:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-10 14:49 - 2017-09-10 14:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 14:49 - 2017-09-10 14:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 14:50 - 2017-09-10 14:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.courant.com_0.localstorage 2017-09-10 14:50 - 2017-09-10 14:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-11 06:08 - 2017-09-11 06:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-11 06:08 - 2017-09-11 06:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-10 14:52 - 2017-09-10 14:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.food.com_0.localstorage 2017-09-10 14:52 - 2017-09-10 14:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-11 06:10 - 2017-09-11 06:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.instyle.com_0.localstorage 2017-09-11 06:10 - 2017-09-11 06:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-11 06:07 - 2017-09-11 06:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 06:07 - 2017-09-11 06:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 14:50 - 2017-09-10 14:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.latimes.com_0.localstorage 2017-09-10 14:50 - 2017-09-10 14:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-10 14:52 - 2017-09-10 14:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.lifeandstylemag.com_0.localstorage 2017-09-10 14:52 - 2017-09-10 14:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.lifeandstylemag.com_0.localstorage-journal 2017-09-10 14:49 - 2017-09-10 14:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 14:49 - 2017-09-10 14:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 14:50 - 2017-09-10 14:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.parents.com_0.localstorage 2017-09-10 14:50 - 2017-09-10 14:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-11 06:04 - 2017-09-11 06:05 - 000246784 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.vistaprint.com_0.localstorage 2017-09-11 06:04 - 2017-09-11 06:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\http_www.vistaprint.com_0.localstorage-journal 2017-09-10 14:52 - 2017-09-10 14:52 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 14:52 - 2017-09-10 14:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 06:04 - 2017-09-11 06:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\https_connexity.net_0.localstorage 2017-09-11 06:04 - 2017-09-11 06:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 06:04 - 2017-09-11 06:04 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 06:04 - 2017-09-11 06:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 06:04 - 2017-09-11 06:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 06:04 - 2017-09-11 06:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 06:04 - 2017-09-11 06:04 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 06:04 - 2017-09-11 06:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-10 14:47 - 2017-09-10 14:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\https_www.clickatell.com_0.localstorage 2017-09-10 14:47 - 2017-09-10 14:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\https_www.clickatell.com_0.localstorage-journal 2017-09-10 14:47 - 2017-09-11 06:05 - 003804160 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\https_www.pacogames.com_0.localstorage 2017-09-10 14:47 - 2017-09-11 06:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Local Storage\https_www.pacogames.com_0.localstorage-journal 2017-09-10 14:47 - 2017-09-10 14:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data 2017-09-10 14:47 - 2017-09-11 06:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash 2017-09-10 14:47 - 2017-09-10 14:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 14:47 - 2017-09-10 14:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 14:47 - 2017-09-10 14:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\CJEBLDA2 2017-09-10 14:47 - 2017-09-10 14:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 14:47 - 2017-09-10 14:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 14:47 - 2017-09-11 06:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T 2017-09-10 14:47 - 2017-09-11 06:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\cdn.stickyadstv.com 2017-09-11 06:04 - 2017-09-11 06:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\cdncache-a.akamaihd.net 2017-09-11 06:04 - 2017-09-11 06:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\cdncache-a.akamaihd.net\items 2017-09-11 06:04 - 2017-09-11 06:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 06:04 - 2017-09-11 06:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 06:04 - 2017-09-11 06:07 - 000000476 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 14:47 - 2017-09-11 06:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\eereader.com 2017-09-10 14:48 - 2017-09-11 06:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\efreader.com 2017-09-11 06:08 - 2017-09-11 06:08 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\efreader.com\analytics.sol 2017-09-10 14:47 - 2017-09-11 06:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\egreader.com 2017-09-10 14:47 - 2017-09-10 14:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\macromedia.com 2017-09-10 14:47 - 2017-09-10 14:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\macromedia.com\support 2017-09-10 14:47 - 2017-09-10 14:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\macromedia.com\support\flashplayer 2017-09-10 14:47 - 2017-09-11 06:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\macromedia.com\support\flashplayer\sys 2017-09-10 14:47 - 2017-09-11 06:04 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 14:47 - 2017-09-10 14:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 14:47 - 2017-09-10 14:47 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 06:04 - 2017-09-11 06:04 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 06:04 - 2017-09-11 06:04 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 14:47 - 2017-09-10 14:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 14:47 - 2017-09-10 14:47 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 14:48 - 2017-09-10 14:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 14:48 - 2017-09-10 14:48 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 14:47 - 2017-09-10 14:47 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 14:47 - 2017-09-10 14:47 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data695\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\D2VW7G4T\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 08:11 - 2017-09-12 04:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696 2017-09-11 08:11 - 2017-09-12 03:08 - 000325632 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Cookies 2017-09-11 08:11 - 2017-09-12 03:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Cookies-journal 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\databases 2017-09-11 08:11 - 2017-09-11 08:11 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\databases\Databases.db 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\databases\Databases.db-journal 2017-09-11 22:02 - 2017-09-12 03:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System 2017-09-11 22:02 - 2017-09-11 22:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\000 2017-09-11 22:02 - 2017-09-12 03:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\000\t 2017-09-12 03:07 - 2017-09-12 03:07 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\000\t\.usage 2017-09-12 03:07 - 2017-09-12 03:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\000\t\Paths 2017-09-12 03:07 - 2017-09-12 03:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\000\t\Paths\000003.log 2017-09-12 03:07 - 2017-09-12 03:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\000\t\Paths\CURRENT 2017-09-12 03:07 - 2017-09-12 03:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\000\t\Paths\LOCK 2017-09-12 03:07 - 2017-09-12 03:07 - 000000131 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\000\t\Paths\LOG 2017-09-12 03:07 - 2017-09-12 03:07 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\000\t\Paths\MANIFEST-000001 2017-09-12 03:00 - 2017-09-12 03:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\001 2017-09-12 03:00 - 2017-09-12 03:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\001\t 2017-09-12 03:07 - 2017-09-12 03:07 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\001\t\.usage 2017-09-12 03:07 - 2017-09-12 03:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\001\t\Paths 2017-09-12 03:07 - 2017-09-12 03:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\001\t\Paths\000003.log 2017-09-12 03:07 - 2017-09-12 03:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\001\t\Paths\CURRENT 2017-09-12 03:07 - 2017-09-12 03:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\001\t\Paths\LOCK 2017-09-12 03:07 - 2017-09-12 03:07 - 000000131 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\001\t\Paths\LOG 2017-09-12 03:07 - 2017-09-12 03:07 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\001\t\Paths\MANIFEST-000001 2017-09-12 03:08 - 2017-09-12 03:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\002 2017-09-12 03:08 - 2017-09-12 03:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\002\t 2017-09-11 22:02 - 2017-09-12 03:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\Origins 2017-09-11 22:02 - 2017-09-12 03:10 - 000000230 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\Origins\000003.log 2017-09-11 22:02 - 2017-09-11 22:02 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\Origins\CURRENT 2017-09-11 22:02 - 2017-09-11 22:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\Origins\LOCK 2017-09-11 22:02 - 2017-09-12 03:08 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\Origins\LOG 2017-09-11 22:02 - 2017-09-12 03:07 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\Origins\LOG.old 2017-09-11 22:02 - 2017-09-11 22:02 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\File System\Origins\MANIFEST-000001 2017-09-11 08:11 - 2017-09-12 03:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\IndexedDB 2017-09-12 03:07 - 2017-09-12 03:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb 2017-09-12 03:07 - 2017-09-12 03:07 - 000000196 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\000003.log 2017-09-12 03:07 - 2017-09-12 03:07 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\CURRENT 2017-09-12 03:07 - 2017-09-12 03:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOCK 2017-09-12 03:07 - 2017-09-12 03:07 - 000000166 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOG 2017-09-12 03:07 - 2017-09-12 03:07 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\IndexedDB\https_www.nationalcar.com_0.indexeddb.leveldb 2017-09-11 08:11 - 2017-09-11 08:11 - 000082420 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\IndexedDB\https_www.nationalcar.com_0.indexeddb.leveldb\000003.log 2017-09-11 08:11 - 2017-09-11 08:11 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\IndexedDB\https_www.nationalcar.com_0.indexeddb.leveldb\CURRENT 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\IndexedDB\https_www.nationalcar.com_0.indexeddb.leveldb\LOCK 2017-09-11 08:11 - 2017-09-11 08:11 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\IndexedDB\https_www.nationalcar.com_0.indexeddb.leveldb\LOG 2017-09-11 08:11 - 2017-09-11 08:11 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\IndexedDB\https_www.nationalcar.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 08:11 - 2017-09-12 03:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage 2017-09-11 22:04 - 2017-09-11 22:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-11 22:04 - 2017-09-11 22:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-11 08:13 - 2017-09-12 03:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 08:13 - 2017-09-12 03:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 08:12 - 2017-09-12 03:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 08:12 - 2017-09-12 03:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-11 22:03 - 2017-09-11 22:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_es.reuters.com_0.localstorage 2017-09-11 22:03 - 2017-09-11 22:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_es.reuters.com_0.localstorage-journal 2017-09-12 03:02 - 2017-09-12 03:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_nflfilms.nfl.com_0.localstorage 2017-09-12 03:02 - 2017-09-12 03:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_nflfilms.nfl.com_0.localstorage-journal 2017-09-11 08:11 - 2017-09-11 08:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_player.ooyala.com_0.localstorage 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_player.ooyala.com_0.localstorage-journal 2017-09-11 08:11 - 2017-09-11 08:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-11 08:11 - 2017-09-11 08:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 08:12 - 2017-09-11 08:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_tracking.publicidees.com_0.localstorage 2017-09-11 08:12 - 2017-09-11 08:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_tracking.publicidees.com_0.localstorage-journal 2017-09-11 08:11 - 2017-09-12 03:02 - 000016384 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.bhg.com_0.localstorage 2017-09-11 08:11 - 2017-09-12 03:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.bhg.com_0.localstorage-journal 2017-09-11 21:59 - 2017-09-11 22:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.businessinsider.com_0.localstorage 2017-09-11 21:59 - 2017-09-11 22:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.businessinsider.com_0.localstorage-journal 2017-09-11 08:13 - 2017-09-12 03:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 08:13 - 2017-09-12 03:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 08:15 - 2017-09-11 08:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.complex.com_0.localstorage 2017-09-11 08:15 - 2017-09-11 08:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-11 22:01 - 2017-09-11 22:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-11 22:01 - 2017-09-11 22:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-11 21:57 - 2017-09-11 21:58 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.detroitnews.com_0.localstorage 2017-09-11 21:57 - 2017-09-11 21:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.detroitnews.com_0.localstorage-journal 2017-09-11 22:02 - 2017-09-11 22:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.flare.com_0.localstorage 2017-09-11 22:02 - 2017-09-11 22:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.flare.com_0.localstorage-journal 2017-09-11 08:15 - 2017-09-12 03:07 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.food.com_0.localstorage 2017-09-11 08:15 - 2017-09-12 03:07 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-11 22:00 - 2017-09-11 22:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.heart.co.uk_0.localstorage 2017-09-11 22:00 - 2017-09-11 22:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.heart.co.uk_0.localstorage-journal 2017-09-11 08:13 - 2017-09-12 03:02 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 08:13 - 2017-09-12 03:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 08:14 - 2017-09-12 03:05 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.jamieoliver.com_0.localstorage 2017-09-11 08:14 - 2017-09-12 03:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.jamieoliver.com_0.localstorage-journal 2017-09-11 08:17 - 2017-09-11 08:17 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.macworld.com_0.localstorage 2017-09-11 08:17 - 2017-09-11 08:17 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-11 22:01 - 2017-09-11 22:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.marthastewart.com_0.localstorage 2017-09-11 22:01 - 2017-09-11 22:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.marthastewart.com_0.localstorage-journal 2017-09-12 03:05 - 2017-09-12 03:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-12 03:05 - 2017-09-12 03:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-11 21:59 - 2017-09-11 21:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 21:59 - 2017-09-11 21:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-12 03:03 - 2017-09-12 03:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.reuters.com_0.localstorage 2017-09-12 03:03 - 2017-09-12 03:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.reuters.com_0.localstorage-journal 2017-09-11 08:12 - 2017-09-11 08:12 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.vacanceo.com_0.localstorage 2017-09-11 08:12 - 2017-09-11 08:12 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\http_www.vacanceo.com_0.localstorage-journal 2017-09-11 21:57 - 2017-09-11 21:58 - 000004096 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_assets.bounceexchange.com_0.localstorage 2017-09-11 21:57 - 2017-09-11 21:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_assets.bounceexchange.com_0.localstorage-journal 2017-09-11 21:59 - 2017-09-11 21:59 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 21:59 - 2017-09-11 21:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 21:58 - 2017-09-11 21:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_connexity.net_0.localstorage 2017-09-11 21:58 - 2017-09-11 21:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 21:57 - 2017-09-11 21:57 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 21:57 - 2017-09-11 21:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 08:11 - 2017-09-11 08:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_gateway.answerscloud.com_0.localstorage 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_gateway.answerscloud.com_0.localstorage-journal 2017-09-12 03:00 - 2017-09-12 03:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_gateway.foresee.com_0.localstorage 2017-09-12 03:00 - 2017-09-12 03:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_gateway.foresee.com_0.localstorage-journal 2017-09-11 21:58 - 2017-09-11 21:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_player.mediabong.net_0.localstorage 2017-09-11 21:58 - 2017-09-11 21:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_player.mediabong.net_0.localstorage-journal 2017-09-11 08:11 - 2017-09-11 21:58 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 08:11 - 2017-09-11 21:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 08:11 - 2017-09-11 08:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_sb.monetate.net_0.localstorage 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_sb.monetate.net_0.localstorage-journal 2017-09-11 08:11 - 2017-09-11 21:58 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 08:11 - 2017-09-11 21:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-12 03:00 - 2017-09-12 03:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_td.yieldify.com_0.localstorage 2017-09-12 03:00 - 2017-09-12 03:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_td.yieldify.com_0.localstorage-journal 2017-09-11 21:57 - 2017-09-11 21:58 - 000126976 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_www.jcrew.com_0.localstorage 2017-09-11 21:57 - 2017-09-11 21:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_www.jcrew.com_0.localstorage-journal 2017-09-12 03:00 - 2017-09-12 03:02 - 000015360 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_www.jellybelly.com_0.localstorage 2017-09-12 03:00 - 2017-09-12 03:02 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_www.jellybelly.com_0.localstorage-journal 2017-09-11 08:11 - 2017-09-11 08:13 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_www.nationalcar.com_0.localstorage 2017-09-11 08:11 - 2017-09-11 08:13 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Local Storage\https_www.nationalcar.com_0.localstorage-journal 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data 2017-09-11 08:11 - 2017-09-12 03:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\Z2TF5RCB 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 08:11 - 2017-09-11 08:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C 2017-09-11 08:12 - 2017-09-12 03:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\cdn.stickyadstv.com 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\cdncache-a.akamaihd.net 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\cdncache-a.akamaihd.net\items 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 08:11 - 2017-09-11 22:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 08:11 - 2017-09-11 22:03 - 000000489 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 08:11 - 2017-09-12 03:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\eereader.com 2017-09-12 03:02 - 2017-09-12 03:02 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\eereader.com\analytics.sol 2017-09-11 08:13 - 2017-09-12 03:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\efreader.com 2017-09-11 08:15 - 2017-09-12 03:10 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\efreader.com\analytics.sol 2017-09-11 08:11 - 2017-09-12 03:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\egreader.com 2017-09-11 08:17 - 2017-09-11 08:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\inread.anyclip.com 2017-09-11 08:17 - 2017-09-11 08:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\inread.anyclip.com\ac# 2017-09-11 08:17 - 2017-09-11 08:17 - 000000467 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\macromedia.com 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\macromedia.com\support 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\macromedia.com\support\flashplayer 2017-09-11 08:11 - 2017-09-11 08:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\macromedia.com\support\flashplayer\sys 2017-09-11 08:11 - 2017-09-11 08:17 - 000000513 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 08:12 - 2017-09-11 08:12 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 08:12 - 2017-09-11 08:12 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 08:11 - 2017-09-11 08:11 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 08:11 - 2017-09-11 08:11 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 08:13 - 2017-09-11 08:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 08:13 - 2017-09-11 08:13 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 08:11 - 2017-09-11 08:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 08:11 - 2017-09-11 08:11 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 08:17 - 2017-09-11 08:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 08:17 - 2017-09-11 08:17 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data696\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\UZFB2Z5C\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-11 15:53 - 2017-09-11 17:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697 2017-09-11 15:53 - 2017-09-11 16:01 - 000194560 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Cookies 2017-09-11 15:53 - 2017-09-11 16:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Cookies-journal 2017-09-11 15:53 - 2017-09-11 16:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage 2017-09-11 16:00 - 2017-09-11 16:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-11 16:00 - 2017-09-11 16:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-11 16:01 - 2017-09-11 16:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 16:01 - 2017-09-11 16:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 15:57 - 2017-09-11 15:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_connexity.net_0.localstorage 2017-09-11 15:57 - 2017-09-11 15:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-11 15:59 - 2017-09-11 16:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_mashable.com_0.localstorage 2017-09-11 15:59 - 2017-09-11 16:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_mashable.com_0.localstorage-journal 2017-09-11 15:57 - 2017-09-11 15:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-11 15:57 - 2017-09-11 15:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-11 15:55 - 2017-09-11 15:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 15:55 - 2017-09-11 15:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 15:57 - 2017-09-11 15:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_www.foxnews.com_0.localstorage 2017-09-11 15:57 - 2017-09-11 15:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_www.foxnews.com_0.localstorage-journal 2017-09-11 15:57 - 2017-09-11 15:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_www.latimes.com_0.localstorage 2017-09-11 15:57 - 2017-09-11 15:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_www.latimes.com_0.localstorage-journal 2017-09-11 15:55 - 2017-09-11 15:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 15:55 - 2017-09-11 15:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 15:56 - 2017-09-11 15:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-11 15:56 - 2017-09-11 15:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-11 15:59 - 2017-09-11 16:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_www.qvc.com_0.localstorage 2017-09-11 15:59 - 2017-09-11 16:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\http_www.qvc.com_0.localstorage-journal 2017-09-11 15:56 - 2017-09-11 15:56 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 15:56 - 2017-09-11 15:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-11 15:53 - 2017-09-11 15:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_cdn-gl.imrworldwide.com_0.localstorage 2017-09-11 15:53 - 2017-09-11 15:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_cdn-gl.imrworldwide.com_0.localstorage-journal 2017-09-11 15:57 - 2017-09-11 15:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_connexity.net_0.localstorage 2017-09-11 15:57 - 2017-09-11 15:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 15:53 - 2017-09-11 15:53 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 15:53 - 2017-09-11 15:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 15:55 - 2017-09-11 15:55 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_ec-ns.sascdn.com_0.localstorage 2017-09-11 15:55 - 2017-09-11 15:55 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_ec-ns.sascdn.com_0.localstorage-journal 2017-09-11 15:53 - 2017-09-11 15:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_hades.srvtrck.com_0.localstorage 2017-09-11 15:53 - 2017-09-11 15:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_hades.srvtrck.com_0.localstorage-journal 2017-09-11 15:53 - 2017-09-11 15:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 15:53 - 2017-09-11 15:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 15:53 - 2017-09-11 15:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_secure-au.imrworldwide.com_0.localstorage 2017-09-11 15:53 - 2017-09-11 15:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_secure-au.imrworldwide.com_0.localstorage-journal 2017-09-11 15:53 - 2017-09-11 15:54 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 15:53 - 2017-09-11 15:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 15:53 - 2017-09-11 15:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_www.babycentre.co.uk_0.localstorage 2017-09-11 15:53 - 2017-09-11 15:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_www.babycentre.co.uk_0.localstorage-journal 2017-09-11 15:53 - 2017-09-11 15:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_www.bluehost.com_0.localstorage 2017-09-11 15:53 - 2017-09-11 15:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Local Storage\https_www.bluehost.com_0.localstorage-journal 2017-09-11 15:53 - 2017-09-11 15:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data 2017-09-11 15:53 - 2017-09-11 16:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash 2017-09-11 15:53 - 2017-09-11 15:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 15:53 - 2017-09-11 15:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 15:53 - 2017-09-11 15:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\96PL72UC 2017-09-11 15:53 - 2017-09-11 15:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 15:53 - 2017-09-11 15:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 15:53 - 2017-09-11 15:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X 2017-09-11 15:53 - 2017-09-11 16:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\cdn.stickyadstv.com 2017-09-11 15:53 - 2017-09-11 15:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\cdncache-a.akamaihd.net 2017-09-11 15:53 - 2017-09-11 15:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\cdncache-a.akamaihd.net\items 2017-09-11 15:53 - 2017-09-11 15:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 15:53 - 2017-09-11 15:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 15:53 - 2017-09-11 15:58 - 000000475 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 15:53 - 2017-09-11 15:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\eereader.com 2017-09-11 15:59 - 2017-09-11 15:59 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\eereader.com\analytics.sol 2017-09-11 15:55 - 2017-09-11 16:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\efreader.com 2017-09-11 15:59 - 2017-09-11 15:59 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\efreader.com\analytics.sol 2017-09-11 15:55 - 2017-09-11 15:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\egreader.com 2017-09-11 15:54 - 2017-09-11 15:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\inread.anyclip.com 2017-09-11 15:54 - 2017-09-11 15:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\inread.anyclip.com\ac# 2017-09-11 15:54 - 2017-09-11 15:54 - 000000435 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-11 15:53 - 2017-09-11 15:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\macromedia.com 2017-09-11 15:53 - 2017-09-11 15:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\macromedia.com\support 2017-09-11 15:53 - 2017-09-11 15:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\macromedia.com\support\flashplayer 2017-09-11 15:53 - 2017-09-11 15:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\macromedia.com\support\flashplayer\sys 2017-09-11 15:53 - 2017-09-11 15:56 - 000000511 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 15:53 - 2017-09-11 15:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 15:53 - 2017-09-11 15:53 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 15:53 - 2017-09-11 15:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 15:53 - 2017-09-11 15:53 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 15:53 - 2017-09-11 15:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 15:53 - 2017-09-11 15:53 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 15:55 - 2017-09-11 15:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 15:55 - 2017-09-11 15:55 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 15:55 - 2017-09-11 15:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 15:55 - 2017-09-11 15:55 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 15:54 - 2017-09-11 15:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 15:54 - 2017-09-11 15:54 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-11 15:55 - 2017-09-11 15:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\macromedia.com\support\flashplayer\sys\#www.bluehost.com 2017-09-11 15:55 - 2017-09-11 15:55 - 000000086 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\macromedia.com\support\flashplayer\sys\#www.bluehost.com\settings.sol 2017-09-11 15:55 - 2017-09-11 15:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\www.bluehost.com 2017-09-11 15:55 - 2017-09-11 15:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\www.bluehost.com\media 2017-09-11 15:55 - 2017-09-11 15:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\www.bluehost.com\media\shared 2017-09-11 15:55 - 2017-09-11 15:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\www.bluehost.com\media\shared\general 2017-09-11 15:55 - 2017-09-11 15:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\www.bluehost.com\media\shared\general\trackr.swf 2017-09-11 15:55 - 2017-09-11 15:55 - 000000050 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data697\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\ZC6DX76X\www.bluehost.com\media\shared\general\trackr.swf\v.sol 2017-09-10 16:29 - 2017-09-11 17:29 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698 2017-09-10 16:29 - 2017-09-11 16:11 - 000270336 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Cookies 2017-09-10 16:29 - 2017-09-11 16:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Cookies-journal 2017-09-11 04:33 - 2017-09-11 16:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\databases 2017-09-11 04:33 - 2017-09-11 16:03 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\databases\Databases.db 2017-09-11 04:33 - 2017-09-11 16:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\databases\Databases.db-journal 2017-09-11 16:03 - 2017-09-11 16:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\databases\http_www.medtargetsystem.com_0 2017-09-11 16:03 - 2017-09-11 16:03 - 000016384 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\databases\http_www.medtargetsystem.com_0\1 2017-09-11 04:32 - 2017-09-11 04:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\File System 2017-09-11 04:33 - 2017-09-11 04:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\File System\001 2017-09-11 04:33 - 2017-09-11 16:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\File System\001\t 2017-09-11 16:03 - 2017-09-11 16:03 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\File System\001\t\.usage 2017-09-11 16:03 - 2017-09-11 16:03 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\File System\001\t\Paths 2017-09-11 16:03 - 2017-09-11 16:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\File System\001\t\Paths\000003.log 2017-09-11 16:03 - 2017-09-11 16:03 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\File System\001\t\Paths\CURRENT 2017-09-11 16:03 - 2017-09-11 16:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\File System\001\t\Paths\LOCK 2017-09-11 16:03 - 2017-09-11 16:03 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\File System\001\t\Paths\LOG 2017-09-11 16:03 - 2017-09-11 16:03 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\File System\001\t\Paths\MANIFEST-000001 2017-09-11 04:32 - 2017-09-11 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\File System\Origins 2017-09-11 04:32 - 2017-09-11 04:35 - 000000169 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\File System\Origins\000003.log 2017-09-11 04:32 - 2017-09-11 04:32 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\File System\Origins\CURRENT 2017-09-11 04:32 - 2017-09-11 04:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\File System\Origins\LOCK 2017-09-11 04:32 - 2017-09-11 16:09 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\File System\Origins\LOG 2017-09-11 04:32 - 2017-09-11 16:08 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\File System\Origins\LOG.old 2017-09-11 04:32 - 2017-09-11 04:32 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\File System\Origins\MANIFEST-000001 2017-09-11 04:33 - 2017-09-11 04:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\File System\Origins\lost 2017-09-11 04:33 - 2017-09-11 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB 2017-09-11 16:09 - 2017-09-11 16:09 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\http_www.detroitlions.com_0.indexeddb.leveldb 2017-09-11 16:09 - 2017-09-11 16:09 - 000000190 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\http_www.detroitlions.com_0.indexeddb.leveldb\000003.log 2017-09-11 16:09 - 2017-09-11 16:09 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\http_www.detroitlions.com_0.indexeddb.leveldb\CURRENT 2017-09-11 16:09 - 2017-09-11 16:09 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\http_www.detroitlions.com_0.indexeddb.leveldb\LOCK 2017-09-11 16:09 - 2017-09-11 16:09 - 000000164 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\http_www.detroitlions.com_0.indexeddb.leveldb\LOG 2017-09-11 16:09 - 2017-09-11 16:09 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\http_www.detroitlions.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 04:33 - 2017-09-11 04:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\http_www.food.com_0.indexeddb.leveldb 2017-09-11 04:33 - 2017-09-11 04:33 - 000000174 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\http_www.food.com_0.indexeddb.leveldb\000003.log 2017-09-11 04:33 - 2017-09-11 04:33 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\http_www.food.com_0.indexeddb.leveldb\CURRENT 2017-09-11 04:33 - 2017-09-11 04:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\http_www.food.com_0.indexeddb.leveldb\LOCK 2017-09-11 04:33 - 2017-09-11 04:33 - 000000155 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\http_www.food.com_0.indexeddb.leveldb\LOG 2017-09-11 04:33 - 2017-09-11 04:33 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\http_www.food.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 16:08 - 2017-09-11 16:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\http_www.insideedition.com_0.indexeddb.leveldb 2017-09-11 16:08 - 2017-09-11 16:08 - 000000192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\http_www.insideedition.com_0.indexeddb.leveldb\000003.log 2017-09-11 16:08 - 2017-09-11 16:08 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\http_www.insideedition.com_0.indexeddb.leveldb\CURRENT 2017-09-11 16:08 - 2017-09-11 16:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\http_www.insideedition.com_0.indexeddb.leveldb\LOCK 2017-09-11 16:08 - 2017-09-11 16:08 - 000000165 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\http_www.insideedition.com_0.indexeddb.leveldb\LOG 2017-09-11 16:08 - 2017-09-11 16:08 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\http_www.insideedition.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 04:33 - 2017-09-11 04:33 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb 2017-09-11 04:33 - 2017-09-11 04:33 - 000000196 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\000003.log 2017-09-11 04:33 - 2017-09-11 04:33 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\CURRENT 2017-09-11 04:33 - 2017-09-11 04:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOCK 2017-09-11 04:33 - 2017-09-11 04:33 - 000000374 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOG 2017-09-11 04:33 - 2017-09-11 04:33 - 000000166 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\LOG.old 2017-09-11 04:33 - 2017-09-11 04:33 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\IndexedDB\https_fw.adsafeprotected.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 16:30 - 2017-09-11 16:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage 2017-09-11 16:10 - 2017-09-11 16:11 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_bleacherreport.com_0.localstorage 2017-09-11 16:10 - 2017-09-11 16:11 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_bleacherreport.com_0.localstorage-journal 2017-09-11 16:10 - 2017-09-11 16:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-11 16:10 - 2017-09-11 16:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-11 04:26 - 2017-09-11 16:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_cdn.krxd.net_0.localstorage 2017-09-11 04:26 - 2017-09-11 16:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_cdn.krxd.net_0.localstorage-journal 2017-09-10 16:31 - 2017-09-10 16:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_connexity.net_0.localstorage 2017-09-10 16:31 - 2017-09-10 16:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-10 16:30 - 2017-09-11 04:27 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 16:30 - 2017-09-11 04:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 04:27 - 2017-09-11 04:27 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_universal.iperceptions.com_0.localstorage 2017-09-11 04:27 - 2017-09-11 04:27 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_universal.iperceptions.com_0.localstorage-journal 2017-09-11 04:30 - 2017-09-11 04:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.architecturaldigest.com_0.localstorage 2017-09-11 04:30 - 2017-09-11 04:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.architecturaldigest.com_0.localstorage-journal 2017-09-10 16:34 - 2017-09-10 16:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.bendbulletin.com_0.localstorage 2017-09-10 16:34 - 2017-09-10 16:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.bendbulletin.com_0.localstorage-journal 2017-09-11 16:08 - 2017-09-11 16:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.bicycling.com_0.localstorage 2017-09-11 16:08 - 2017-09-11 16:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.bicycling.com_0.localstorage-journal 2017-09-11 04:29 - 2017-09-11 04:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.businessinsider.com_0.localstorage 2017-09-11 04:29 - 2017-09-11 04:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.businessinsider.com_0.localstorage-journal 2017-09-10 16:32 - 2017-09-10 16:32 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 16:32 - 2017-09-10 16:32 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 04:30 - 2017-09-11 04:30 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.courant.com_0.localstorage 2017-09-11 04:30 - 2017-09-11 04:30 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.courant.com_0.localstorage-journal 2017-09-11 16:09 - 2017-09-11 16:10 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.detroitlions.com_0.localstorage 2017-09-11 16:09 - 2017-09-11 16:10 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.detroitlions.com_0.localstorage-journal 2017-09-10 16:30 - 2017-09-10 16:31 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.detroitnews.com_0.localstorage 2017-09-10 16:30 - 2017-09-10 16:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.detroitnews.com_0.localstorage-journal 2017-09-10 16:33 - 2017-09-10 16:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.diynetwork.com_0.localstorage 2017-09-10 16:33 - 2017-09-10 16:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.diynetwork.com_0.localstorage-journal 2017-09-10 16:30 - 2017-09-10 16:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.fifa.com_0.localstorage 2017-09-10 16:30 - 2017-09-10 16:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.fifa.com_0.localstorage-journal 2017-09-11 04:32 - 2017-09-11 04:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.food.com_0.localstorage 2017-09-11 04:32 - 2017-09-11 04:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.food.com_0.localstorage-journal 2017-09-11 04:26 - 2017-09-11 04:28 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.gmc.com_0.localstorage 2017-09-11 04:26 - 2017-09-11 04:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.gmc.com_0.localstorage-journal 2017-09-11 16:03 - 2017-09-11 16:04 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.healthline.com_0.localstorage 2017-09-11 16:03 - 2017-09-11 16:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.healthline.com_0.localstorage-journal 2017-09-11 16:07 - 2017-09-11 16:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.insideedition.com_0.localstorage 2017-09-11 16:07 - 2017-09-11 16:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.insideedition.com_0.localstorage-journal 2017-09-10 16:35 - 2017-09-11 04:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.instyle.com_0.localstorage 2017-09-10 16:35 - 2017-09-11 04:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-10 16:31 - 2017-09-11 16:06 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 16:31 - 2017-09-11 16:06 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-10 16:33 - 2017-09-10 16:34 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.islandpacket.com_0.localstorage 2017-09-10 16:33 - 2017-09-10 16:34 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.islandpacket.com_0.localstorage-journal 2017-09-11 16:06 - 2017-09-11 16:08 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.myrecipes.com_0.localstorage 2017-09-11 16:06 - 2017-09-11 16:08 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.myrecipes.com_0.localstorage-journal 2017-09-10 16:31 - 2017-09-10 16:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 16:31 - 2017-09-10 16:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 16:33 - 2017-09-10 16:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.parents.com_0.localstorage 2017-09-10 16:33 - 2017-09-10 16:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-11 04:29 - 2017-09-11 04:29 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.popularmechanics.com_0.localstorage 2017-09-11 04:29 - 2017-09-11 04:29 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.popularmechanics.com_0.localstorage-journal 2017-09-11 04:26 - 2017-09-11 04:28 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.sheknows.com_0.localstorage 2017-09-11 04:26 - 2017-09-11 04:28 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www.sheknows.com_0.localstorage-journal 2017-09-11 04:32 - 2017-09-11 04:33 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www4.fmovies.io_0.localstorage 2017-09-11 04:32 - 2017-09-11 04:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\http_www4.fmovies.io_0.localstorage-journal 2017-09-10 16:33 - 2017-09-10 16:33 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 16:33 - 2017-09-10 16:33 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 16:31 - 2017-09-10 16:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\https_connexity.net_0.localstorage 2017-09-10 16:31 - 2017-09-10 16:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-10 16:30 - 2017-09-11 04:26 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-10 16:30 - 2017-09-11 04:26 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-10 16:31 - 2017-09-10 16:31 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\https_player.mediabong.net_0.localstorage 2017-09-10 16:31 - 2017-09-10 16:31 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\https_player.mediabong.net_0.localstorage-journal 2017-09-11 16:04 - 2017-09-11 16:04 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 16:04 - 2017-09-11 16:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 16:30 - 2017-09-11 16:04 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 16:30 - 2017-09-11 16:04 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 16:04 - 2017-09-11 16:05 - 000006144 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\https_www.designtoscano.com_0.localstorage 2017-09-11 16:04 - 2017-09-11 16:05 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Local Storage\https_www.designtoscano.com_0.localstorage-journal 2017-09-10 16:30 - 2017-09-10 16:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data 2017-09-10 16:30 - 2017-09-11 16:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash 2017-09-10 16:30 - 2017-09-10 16:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 16:30 - 2017-09-10 16:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 16:30 - 2017-09-10 16:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\379CYEPC 2017-09-10 16:30 - 2017-09-10 16:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 16:30 - 2017-09-10 16:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 16:30 - 2017-09-11 16:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S 2017-09-11 04:28 - 2017-09-11 04:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\cdn.dashbid.io 2017-09-11 04:28 - 2017-09-11 04:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\cdn.dashbid.io\prod 2017-09-11 04:28 - 2017-09-11 04:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\cdn.dashbid.io\prod\db-sdkv30.swf 2017-09-11 04:28 - 2017-09-11 04:28 - 000000069 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\cdn.dashbid.io\prod\db-sdkv30.swf\dbStore.sol 2017-09-10 16:31 - 2017-09-11 16:10 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\cdn.stickyadstv.com 2017-09-10 16:30 - 2017-09-10 16:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\cdncache-a.akamaihd.net 2017-09-10 16:30 - 2017-09-10 16:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\cdncache-a.akamaihd.net\items 2017-09-10 16:30 - 2017-09-10 16:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 16:30 - 2017-09-11 16:07 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 16:30 - 2017-09-11 16:07 - 000000489 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 16:30 - 2017-09-11 16:06 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\eereader.com 2017-09-10 16:31 - 2017-09-11 16:11 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\efreader.com 2017-09-11 04:33 - 2017-09-11 04:35 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\efreader.com\analytics.sol 2017-09-10 16:30 - 2017-09-11 16:08 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\egreader.com 2017-09-11 16:05 - 2017-09-11 16:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\inread.anyclip.com 2017-09-11 16:05 - 2017-09-11 16:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\inread.anyclip.com\ac# 2017-09-11 16:05 - 2017-09-11 16:05 - 000000447 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-10 16:30 - 2017-09-10 16:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com 2017-09-10 16:30 - 2017-09-10 16:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com\support 2017-09-10 16:30 - 2017-09-10 16:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com\support\flashplayer 2017-09-10 16:30 - 2017-09-11 16:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com\support\flashplayer\sys 2017-09-10 16:30 - 2017-09-11 16:05 - 000000558 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 04:28 - 2017-09-11 04:28 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io 2017-09-11 04:28 - 2017-09-11 04:28 - 000000084 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com\support\flashplayer\sys\#cdn.dashbid.io\settings.sol 2017-09-10 16:31 - 2017-09-10 16:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 16:31 - 2017-09-10 16:31 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 16:30 - 2017-09-10 16:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 16:30 - 2017-09-10 16:30 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 16:30 - 2017-09-10 16:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 16:30 - 2017-09-10 16:30 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 16:31 - 2017-09-10 16:31 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 16:31 - 2017-09-10 16:31 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 16:30 - 2017-09-10 16:30 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 16:30 - 2017-09-10 16:30 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-11 16:05 - 2017-09-11 16:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-11 16:05 - 2017-09-11 16:05 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-11 16:05 - 2017-09-11 16:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com\support\flashplayer\sys\#www.medtargetsystem.com 2017-09-11 16:05 - 2017-09-11 16:05 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\macromedia.com\support\flashplayer\sys\#www.medtargetsystem.com\settings.sol 2017-09-11 16:05 - 2017-09-11 16:05 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data698\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\WT96BN8S\www.medtargetsystem.com 2017-09-11 18:56 - 2017-09-12 07:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699 2017-09-11 18:56 - 2017-09-12 07:01 - 000247808 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Cookies 2017-09-11 18:56 - 2017-09-12 07:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Cookies-journal 2017-09-11 18:57 - 2017-09-11 18:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\databases 2017-09-11 18:57 - 2017-09-11 18:57 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\databases\Databases.db 2017-09-11 18:57 - 2017-09-11 18:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\databases\Databases.db-journal 2017-09-11 18:57 - 2017-09-11 18:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\databases\https_accounts.intuit.com_0 2017-09-11 18:57 - 2017-09-11 18:57 - 000028672 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\databases\https_accounts.intuit.com_0\1 2017-09-11 18:58 - 2017-09-12 06:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\File System 2017-09-11 19:01 - 2017-09-11 19:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\File System\001 2017-09-11 19:01 - 2017-09-12 06:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\File System\001\t 2017-09-12 06:53 - 2017-09-12 06:53 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\File System\001\t\.usage 2017-09-12 06:53 - 2017-09-12 06:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\File System\001\t\Paths 2017-09-12 06:53 - 2017-09-12 06:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\File System\001\t\Paths\000003.log 2017-09-12 06:53 - 2017-09-12 06:53 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\File System\001\t\Paths\CURRENT 2017-09-12 06:53 - 2017-09-12 06:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\File System\001\t\Paths\LOCK 2017-09-12 06:53 - 2017-09-12 06:53 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\File System\001\t\Paths\LOG 2017-09-12 06:53 - 2017-09-12 06:53 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\File System\001\t\Paths\MANIFEST-000001 2017-09-12 06:55 - 2017-09-12 06:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\File System\002 2017-09-12 06:55 - 2017-09-12 06:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\File System\002\t 2017-09-11 18:58 - 2017-09-12 06:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\File System\Origins 2017-09-11 18:58 - 2017-09-12 06:57 - 000000252 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\File System\Origins\000003.log 2017-09-11 18:58 - 2017-09-11 18:58 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\File System\Origins\CURRENT 2017-09-11 18:58 - 2017-09-11 18:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\File System\Origins\LOCK 2017-09-11 18:58 - 2017-09-12 06:55 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\File System\Origins\LOG 2017-09-11 18:58 - 2017-09-12 06:53 - 000000299 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\File System\Origins\LOG.old 2017-09-11 18:58 - 2017-09-11 18:58 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\File System\Origins\MANIFEST-000001 2017-09-11 18:59 - 2017-09-11 18:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\File System\Origins\lost 2017-09-12 06:52 - 2017-09-12 06:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\IndexedDB 2017-09-12 06:53 - 2017-09-12 06:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\IndexedDB\https_80139247.va.cobrowse.liveperson.net_0.indexeddb.leveldb 2017-09-12 06:53 - 2017-09-12 06:53 - 000000587 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\IndexedDB\https_80139247.va.cobrowse.liveperson.net_0.indexeddb.leveldb\000003.log 2017-09-12 06:53 - 2017-09-12 06:53 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\IndexedDB\https_80139247.va.cobrowse.liveperson.net_0.indexeddb.leveldb\CURRENT 2017-09-12 06:53 - 2017-09-12 06:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\IndexedDB\https_80139247.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOCK 2017-09-12 06:53 - 2017-09-12 06:53 - 000000179 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\IndexedDB\https_80139247.va.cobrowse.liveperson.net_0.indexeddb.leveldb\LOG 2017-09-12 06:53 - 2017-09-12 06:53 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\IndexedDB\https_80139247.va.cobrowse.liveperson.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 06:52 - 2017-09-12 06:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb 2017-09-12 06:53 - 2017-09-12 06:53 - 000001338 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\000003.log 2017-09-12 06:52 - 2017-09-12 06:52 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\CURRENT 2017-09-12 06:52 - 2017-09-12 06:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOCK 2017-09-12 06:52 - 2017-09-12 06:53 - 000000163 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOG 2017-09-12 06:52 - 2017-09-12 06:52 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\MANIFEST-000001 2017-09-11 18:56 - 2017-09-12 06:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage 2017-09-12 06:54 - 2017-09-12 06:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_blogs.nfl.com_0.localstorage 2017-09-12 06:54 - 2017-09-12 06:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_blogs.nfl.com_0.localstorage-journal 2017-09-12 06:54 - 2017-09-12 06:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_connexity.net_0.localstorage 2017-09-12 06:54 - 2017-09-12 06:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-12 06:58 - 2017-09-12 06:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_jobs.mashable.com_0.localstorage 2017-09-12 06:58 - 2017-09-12 06:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_jobs.mashable.com_0.localstorage-journal 2017-09-11 18:59 - 2017-09-11 18:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-11 18:59 - 2017-09-11 18:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-12 06:57 - 2017-09-12 06:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.blessyouboys.com_0.localstorage 2017-09-12 06:57 - 2017-09-12 06:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.blessyouboys.com_0.localstorage-journal 2017-09-11 18:59 - 2017-09-12 06:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-11 18:59 - 2017-09-12 06:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-11 19:01 - 2017-09-11 19:01 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.foodnetwork.com_0.localstorage 2017-09-11 19:01 - 2017-09-11 19:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.foodnetwork.com_0.localstorage-journal 2017-09-12 06:56 - 2017-09-12 06:56 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-12 06:56 - 2017-09-12 06:56 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-11 19:00 - 2017-09-11 19:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-11 19:00 - 2017-09-11 19:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-12 06:56 - 2017-09-12 06:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.islandpacket.com_0.localstorage 2017-09-12 06:56 - 2017-09-12 06:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.islandpacket.com_0.localstorage-journal 2017-09-11 18:59 - 2017-09-11 19:00 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-11 18:59 - 2017-09-11 19:00 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-12 06:55 - 2017-09-12 06:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.macworld.com_0.localstorage 2017-09-12 06:55 - 2017-09-12 06:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-12 06:58 - 2017-09-12 06:59 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.newsru.com_0.localstorage 2017-09-12 06:58 - 2017-09-12 06:59 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.newsru.com_0.localstorage-journal 2017-09-11 18:58 - 2017-09-11 18:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.nfl.com_0.localstorage 2017-09-11 18:58 - 2017-09-11 18:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-11 19:01 - 2017-09-11 19:03 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.parents.com_0.localstorage 2017-09-11 19:01 - 2017-09-11 19:03 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.parents.com_0.localstorage-journal 2017-09-12 06:52 - 2017-09-12 06:54 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.techtimes.com_0.localstorage 2017-09-12 06:52 - 2017-09-12 06:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\http_www.techtimes.com_0.localstorage-journal 2017-09-11 18:57 - 2017-09-11 18:57 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\https_accounts.intuit.com_0.localstorage 2017-09-11 18:57 - 2017-09-11 18:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\https_accounts.intuit.com_0.localstorage-journal 2017-09-11 19:01 - 2017-09-11 19:01 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\https_c.betrad.com_0.localstorage 2017-09-11 19:01 - 2017-09-11 19:01 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-12 06:54 - 2017-09-12 06:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\https_connexity.net_0.localstorage 2017-09-12 06:54 - 2017-09-12 06:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 18:57 - 2017-09-11 18:57 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage 2017-09-11 18:57 - 2017-09-11 18:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal 2017-09-11 18:57 - 2017-09-11 18:57 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 18:57 - 2017-09-11 18:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 18:57 - 2017-09-11 18:57 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-11 18:57 - 2017-09-11 18:57 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-12 06:53 - 2017-09-12 06:53 - 000020480 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\https_www.coastal.com_0.localstorage 2017-09-12 06:53 - 2017-09-12 06:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\https_www.coastal.com_0.localstorage-journal 2017-09-11 18:56 - 2017-09-11 18:58 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\https_www.ultimate-guitar.com_0.localstorage 2017-09-11 18:56 - 2017-09-11 18:58 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Local Storage\https_www.ultimate-guitar.com_0.localstorage-journal 2017-09-11 18:56 - 2017-09-11 18:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data 2017-09-11 18:56 - 2017-09-12 07:01 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash 2017-09-11 18:56 - 2017-09-11 18:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-11 18:56 - 2017-09-11 18:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-11 18:56 - 2017-09-11 18:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\68PD9EFG 2017-09-11 18:56 - 2017-09-11 18:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot 2017-09-11 18:56 - 2017-09-11 18:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-11 18:56 - 2017-09-11 18:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2 2017-09-11 18:56 - 2017-09-12 06:59 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\cdn.stickyadstv.com 2017-09-11 18:56 - 2017-09-11 18:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\cdncache-a.akamaihd.net 2017-09-11 18:56 - 2017-09-11 18:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\cdncache-a.akamaihd.net\items 2017-09-11 18:56 - 2017-09-11 18:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\cdncache-a.akamaihd.net\items\e6a00 2017-09-11 18:56 - 2017-09-11 19:02 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-11 18:56 - 2017-09-11 19:02 - 000000414 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-11 18:56 - 2017-09-12 06:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\eereader.com 2017-09-11 18:58 - 2017-09-12 07:00 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\efreader.com 2017-09-11 19:02 - 2017-09-11 19:02 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\efreader.com\analytics.sol 2017-09-11 18:57 - 2017-09-12 06:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\egreader.com 2017-09-11 18:56 - 2017-09-11 18:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\macromedia.com 2017-09-11 18:56 - 2017-09-11 18:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\macromedia.com\support 2017-09-11 18:56 - 2017-09-11 18:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\macromedia.com\support\flashplayer 2017-09-11 18:56 - 2017-09-11 18:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\macromedia.com\support\flashplayer\sys 2017-09-11 18:56 - 2017-09-11 18:58 - 000000491 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-11 18:56 - 2017-09-11 18:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-11 18:56 - 2017-09-11 18:56 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-11 18:56 - 2017-09-11 18:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-11 18:56 - 2017-09-11 18:56 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-11 18:56 - 2017-09-11 18:56 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-11 18:56 - 2017-09-11 18:56 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-11 18:58 - 2017-09-11 18:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-11 18:58 - 2017-09-11 18:58 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-11 18:57 - 2017-09-11 18:57 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-11 18:57 - 2017-09-11 18:57 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data699\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\E924CJA2\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 01:15 - 2017-09-12 02:36 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700 2017-09-10 01:15 - 2017-09-12 00:54 - 000330752 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Cookies 2017-09-10 01:15 - 2017-09-12 00:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Cookies-journal 2017-09-10 01:18 - 2017-09-10 01:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\databases 2017-09-10 01:18 - 2017-09-10 01:18 - 000007168 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\databases\Databases.db 2017-09-10 01:18 - 2017-09-10 01:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\databases\Databases.db-journal 2017-09-10 01:15 - 2017-09-12 00:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System 2017-09-11 17:48 - 2017-09-11 17:48 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\003 2017-09-11 17:48 - 2017-09-11 17:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\003\t 2017-09-11 17:50 - 2017-09-11 17:51 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\003\t\.usage 2017-09-11 17:50 - 2017-09-11 17:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\003\t\Paths 2017-09-11 17:50 - 2017-09-11 17:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\003\t\Paths\000003.log 2017-09-11 17:50 - 2017-09-11 17:50 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\003\t\Paths\CURRENT 2017-09-11 17:50 - 2017-09-11 17:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\003\t\Paths\LOCK 2017-09-11 17:50 - 2017-09-11 17:51 - 000000132 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\003\t\Paths\LOG 2017-09-11 17:50 - 2017-09-11 17:50 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\003\t\Paths\MANIFEST-000001 2017-09-11 17:52 - 2017-09-11 17:52 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\004 2017-09-11 17:52 - 2017-09-12 00:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\004\t 2017-09-12 00:49 - 2017-09-12 00:49 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\004\t\.usage 2017-09-12 00:49 - 2017-09-12 00:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\004\t\Paths 2017-09-12 00:49 - 2017-09-12 00:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\004\t\Paths\000003.log 2017-09-12 00:49 - 2017-09-12 00:49 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\004\t\Paths\CURRENT 2017-09-12 00:49 - 2017-09-12 00:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\004\t\Paths\LOCK 2017-09-12 00:49 - 2017-09-12 00:50 - 000000131 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\004\t\Paths\LOG 2017-09-12 00:49 - 2017-09-12 00:49 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\004\t\Paths\MANIFEST-000001 2017-09-12 00:46 - 2017-09-12 00:46 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\005 2017-09-12 00:46 - 2017-09-12 00:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\005\t 2017-09-12 00:49 - 2017-09-12 00:50 - 000000024 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\005\t\.usage 2017-09-12 00:49 - 2017-09-12 00:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\005\t\Paths 2017-09-12 00:49 - 2017-09-12 00:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\005\t\Paths\000003.log 2017-09-12 00:49 - 2017-09-12 00:49 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\005\t\Paths\CURRENT 2017-09-12 00:49 - 2017-09-12 00:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\005\t\Paths\LOCK 2017-09-12 00:49 - 2017-09-12 00:50 - 000000131 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\005\t\Paths\LOG 2017-09-12 00:49 - 2017-09-12 00:49 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\005\t\Paths\MANIFEST-000001 2017-09-10 01:15 - 2017-09-12 00:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\Origins 2017-09-10 01:15 - 2017-09-12 00:48 - 000000453 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\Origins\000003.log 2017-09-10 01:15 - 2017-09-10 01:15 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\Origins\CURRENT 2017-09-10 01:15 - 2017-09-10 01:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\Origins\LOCK 2017-09-10 01:15 - 2017-09-12 00:50 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\Origins\LOG 2017-09-10 01:15 - 2017-09-12 00:46 - 000000296 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\Origins\LOG.old 2017-09-10 01:15 - 2017-09-10 01:15 - 000000041 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\Origins\MANIFEST-000001 2017-09-10 01:16 - 2017-09-10 01:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\File System\Origins\lost 2017-09-10 01:18 - 2017-09-12 00:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\IndexedDB 2017-09-11 17:50 - 2017-09-11 17:50 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\IndexedDB\http_www.bendbulletin.com_0.indexeddb.leveldb 2017-09-11 17:50 - 2017-09-11 17:50 - 000000190 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\IndexedDB\http_www.bendbulletin.com_0.indexeddb.leveldb\000003.log 2017-09-11 17:50 - 2017-09-11 17:50 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\IndexedDB\http_www.bendbulletin.com_0.indexeddb.leveldb\CURRENT 2017-09-11 17:50 - 2017-09-11 17:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\IndexedDB\http_www.bendbulletin.com_0.indexeddb.leveldb\LOCK 2017-09-11 17:50 - 2017-09-11 17:50 - 000000164 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\IndexedDB\http_www.bendbulletin.com_0.indexeddb.leveldb\LOG 2017-09-11 17:50 - 2017-09-11 17:50 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\IndexedDB\http_www.bendbulletin.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-12 00:49 - 2017-09-12 00:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb 2017-09-12 00:49 - 2017-09-12 00:49 - 000000180 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\000003.log 2017-09-12 00:49 - 2017-09-12 00:49 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\CURRENT 2017-09-12 00:49 - 2017-09-12 00:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\LOCK 2017-09-12 00:49 - 2017-09-12 00:50 - 000000158 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\LOG 2017-09-12 00:49 - 2017-09-12 00:49 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\IndexedDB\http_www.instyle.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 01:18 - 2017-09-10 01:18 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\IndexedDB\http_www.nbcconnecticut.com_0.indexeddb.leveldb 2017-09-10 01:18 - 2017-09-10 01:18 - 000000194 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\IndexedDB\http_www.nbcconnecticut.com_0.indexeddb.leveldb\000003.log 2017-09-10 01:18 - 2017-09-10 01:18 - 000000016 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\IndexedDB\http_www.nbcconnecticut.com_0.indexeddb.leveldb\CURRENT 2017-09-10 01:18 - 2017-09-10 01:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\IndexedDB\http_www.nbcconnecticut.com_0.indexeddb.leveldb\LOCK 2017-09-10 01:18 - 2017-09-10 01:19 - 000000166 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\IndexedDB\http_www.nbcconnecticut.com_0.indexeddb.leveldb\LOG 2017-09-10 01:18 - 2017-09-10 01:18 - 000000023 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\IndexedDB\http_www.nbcconnecticut.com_0.indexeddb.leveldb\MANIFEST-000001 2017-09-10 01:15 - 2017-09-12 00:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage 2017-09-11 17:51 - 2017-09-11 17:53 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_cn.reuters.com_0.localstorage 2017-09-11 17:51 - 2017-09-11 17:53 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_cn.reuters.com_0.localstorage-journal 2017-09-10 01:19 - 2017-09-10 01:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_connexity.net_0.localstorage 2017-09-10 01:19 - 2017-09-10 01:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_connexity.net_0.localstorage-journal 2017-09-12 00:52 - 2017-09-12 00:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_dessert.food.com_0.localstorage 2017-09-12 00:52 - 2017-09-12 00:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_dessert.food.com_0.localstorage-journal 2017-09-12 00:53 - 2017-09-12 00:54 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_lax1-ib.adnxs.com_0.localstorage 2017-09-12 00:53 - 2017-09-12 00:54 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_lax1-ib.adnxs.com_0.localstorage-journal 2017-09-11 17:46 - 2017-09-11 17:47 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_lpm-offers.com_0.localstorage 2017-09-11 17:46 - 2017-09-11 17:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_lpm-offers.com_0.localstorage-journal 2017-09-10 01:18 - 2017-09-10 01:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_nflfilms.nfl.com_0.localstorage 2017-09-10 01:18 - 2017-09-10 01:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_nflfilms.nfl.com_0.localstorage-journal 2017-09-10 01:16 - 2017-09-10 01:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_piet2eix3l.com_0.localstorage 2017-09-10 01:16 - 2017-09-10 01:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_piet2eix3l.com_0.localstorage-journal 2017-09-10 01:16 - 2017-09-10 01:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_pstatic.davebestdeals.com_0.localstorage 2017-09-10 01:16 - 2017-09-10 01:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-11 17:46 - 2017-09-11 17:46 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_tpc.googlesyndication.com_0.localstorage 2017-09-11 17:46 - 2017-09-11 17:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_tpc.googlesyndication.com_0.localstorage-journal 2017-09-12 00:48 - 2017-09-12 00:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_variance.tv_0.localstorage 2017-09-12 00:48 - 2017-09-12 00:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_variance.tv_0.localstorage-journal 2017-09-11 17:49 - 2017-09-11 17:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.bendbulletin.com_0.localstorage 2017-09-11 17:49 - 2017-09-11 17:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.bendbulletin.com_0.localstorage-journal 2017-09-10 01:16 - 2017-09-10 01:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.bmwusa.com_0.localstorage 2017-09-10 01:16 - 2017-09-10 01:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.bmwusa.com_0.localstorage-journal 2017-09-12 00:51 - 2017-09-12 00:51 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.bounty.com_0.localstorage 2017-09-12 00:51 - 2017-09-12 00:51 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.bounty.com_0.localstorage-journal 2017-09-10 01:23 - 2017-09-10 01:24 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.cbs.com_0.localstorage 2017-09-10 01:23 - 2017-09-10 01:24 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.cbs.com_0.localstorage-journal 2017-09-10 01:18 - 2017-09-10 01:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.cbssports.com_0.localstorage 2017-09-10 01:18 - 2017-09-10 01:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.cbssports.com_0.localstorage-journal 2017-09-10 01:20 - 2017-09-10 01:20 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.complex.com_0.localstorage 2017-09-10 01:20 - 2017-09-10 01:20 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.complex.com_0.localstorage-journal 2017-09-11 17:50 - 2017-09-11 17:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.crash.net_0.localstorage 2017-09-11 17:50 - 2017-09-11 17:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.crash.net_0.localstorage-journal 2017-09-10 01:19 - 2017-09-10 01:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.dailymail.co.uk_0.localstorage 2017-09-10 01:19 - 2017-09-10 01:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.dailymail.co.uk_0.localstorage-journal 2017-09-12 00:50 - 2017-09-12 00:50 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.funnyordie.com_0.localstorage 2017-09-12 00:50 - 2017-09-12 00:50 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.funnyordie.com_0.localstorage-journal 2017-09-11 17:45 - 2017-09-11 17:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.golf.com_0.localstorage 2017-09-11 17:45 - 2017-09-11 17:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.golf.com_0.localstorage-journal 2017-09-10 01:21 - 2017-09-10 01:21 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.hgtv.com_0.localstorage 2017-09-10 01:21 - 2017-09-10 01:21 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.hgtv.com_0.localstorage-journal 2017-09-11 17:49 - 2017-09-12 00:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.instyle.com_0.localstorage 2017-09-11 17:49 - 2017-09-12 00:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.instyle.com_0.localstorage-journal 2017-09-10 01:17 - 2017-09-10 01:18 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.investopedia.com_0.localstorage 2017-09-10 01:17 - 2017-09-10 01:18 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.investopedia.com_0.localstorage-journal 2017-09-11 17:48 - 2017-09-11 17:48 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.lfpress.com_0.localstorage 2017-09-11 17:48 - 2017-09-11 17:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.lfpress.com_0.localstorage-journal 2017-09-12 00:49 - 2017-09-12 00:49 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.macworld.com_0.localstorage 2017-09-12 00:49 - 2017-09-12 00:49 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.macworld.com_0.localstorage-journal 2017-09-12 00:46 - 2017-09-12 00:48 - 000008192 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.mmo-champion.com_0.localstorage 2017-09-12 00:46 - 2017-09-12 00:48 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.mmo-champion.com_0.localstorage-journal 2017-09-10 01:18 - 2017-09-10 01:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.nbcconnecticut.com_0.localstorage 2017-09-10 01:18 - 2017-09-10 01:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.nbcconnecticut.com_0.localstorage-journal 2017-09-10 01:21 - 2017-09-11 17:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.nfl.com_0.localstorage 2017-09-10 01:21 - 2017-09-11 17:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.nfl.com_0.localstorage-journal 2017-09-10 01:15 - 2017-09-10 01:16 - 000018432 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.nola.com_0.localstorage 2017-09-10 01:15 - 2017-09-10 01:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.nola.com_0.localstorage-journal 2017-09-12 00:51 - 2017-09-12 00:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.teenvogue.com_0.localstorage 2017-09-12 00:51 - 2017-09-12 00:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.teenvogue.com_0.localstorage-journal 2017-09-11 17:51 - 2017-09-11 17:52 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.today.com_0.localstorage 2017-09-11 17:51 - 2017-09-11 17:52 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\http_www.today.com_0.localstorage-journal 2017-09-10 01:16 - 2017-09-10 01:16 - 000089088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\https_c.betrad.com_0.localstorage 2017-09-10 01:16 - 2017-09-10 01:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\https_c.betrad.com_0.localstorage-journal 2017-09-10 01:19 - 2017-09-10 01:19 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\https_connexity.net_0.localstorage 2017-09-10 01:19 - 2017-09-10 01:19 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\https_connexity.net_0.localstorage-journal 2017-09-11 17:45 - 2017-09-11 17:46 - 000005120 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\https_pstatic.davebestdeals.com_0.localstorage 2017-09-11 17:45 - 2017-09-11 17:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\https_pstatic.davebestdeals.com_0.localstorage-journal 2017-09-10 01:16 - 2017-09-11 17:46 - 000010240 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\https_static.donation-tools.org_0.localstorage 2017-09-10 01:16 - 2017-09-11 17:46 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\https_static.donation-tools.org_0.localstorage-journal 2017-09-11 17:45 - 2017-09-11 17:45 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\https_widgets.outbrain.com_0.localstorage 2017-09-11 17:45 - 2017-09-11 17:45 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\https_widgets.outbrain.com_0.localstorage-journal 2017-09-10 01:16 - 2017-09-10 01:16 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\https_www.ebay.com_0.localstorage 2017-09-10 01:16 - 2017-09-10 01:16 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\https_www.ebay.com_0.localstorage-journal 2017-09-11 17:45 - 2017-09-11 17:47 - 000012288 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\https_www.gothamcigars.com_0.localstorage 2017-09-11 17:45 - 2017-09-11 17:47 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\https_www.gothamcigars.com_0.localstorage-journal 2017-09-10 01:15 - 2017-09-10 01:15 - 000003072 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\https_www.youtube.com_0.localstorage 2017-09-10 01:15 - 2017-09-10 01:15 - 000000000 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Local Storage\https_www.youtube.com_0.localstorage-journal 2017-09-10 01:15 - 2017-09-10 01:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data 2017-09-10 01:15 - 2017-09-12 00:55 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash 2017-09-10 01:15 - 2017-09-10 01:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot 2017-09-10 01:15 - 2017-09-10 01:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache 2017-09-10 01:15 - 2017-09-10 01:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\CacheWritableAdobeRoot\AssetCache\KAASX48X 2017-09-10 01:15 - 2017-09-10 01:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot 2017-09-10 01:15 - 2017-09-10 01:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects 2017-09-10 01:15 - 2017-09-10 01:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW 2017-09-10 01:16 - 2017-09-12 00:53 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\cdn.stickyadstv.com 2017-09-10 01:16 - 2017-09-10 01:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\cdncache-a.akamaihd.net 2017-09-10 01:16 - 2017-09-10 01:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\cdncache-a.akamaihd.net\items 2017-09-10 01:16 - 2017-09-10 01:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\cdncache-a.akamaihd.net\items\e6a00 2017-09-10 01:16 - 2017-09-11 17:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\cdncache-a.akamaihd.net\items\e6a00\storage.swf 2017-09-10 01:16 - 2017-09-11 17:51 - 000000620 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\cdncache-a.akamaihd.net\items\e6a00\storage.swf\gpl.sol 2017-09-10 01:15 - 2017-09-12 00:49 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\eereader.com 2017-09-10 01:17 - 2017-09-12 00:54 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\efreader.com 2017-09-11 17:54 - 2017-09-11 17:54 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\efreader.com\analytics.sol 2017-09-10 01:15 - 2017-09-12 00:51 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\egreader.com 2017-09-10 01:19 - 2017-09-10 01:19 - 000000257 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\egreader.com\analytics.sol 2017-09-10 01:16 - 2017-09-10 01:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\inread.anyclip.com 2017-09-10 01:16 - 2017-09-10 01:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\inread.anyclip.com\ac# 2017-09-10 01:16 - 2017-09-10 01:16 - 000000437 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\inread.anyclip.com\ac#\_manager_any20170118-163652.sol 2017-09-10 01:15 - 2017-09-10 01:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\macromedia.com 2017-09-10 01:15 - 2017-09-10 01:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\macromedia.com\support 2017-09-10 01:15 - 2017-09-10 01:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\macromedia.com\support\flashplayer 2017-09-10 01:15 - 2017-09-11 17:45 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\macromedia.com\support\flashplayer\sys 2017-09-10 01:15 - 2017-09-11 17:45 - 000000513 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\macromedia.com\support\flashplayer\sys\settings.sol 2017-09-10 01:16 - 2017-09-10 01:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com 2017-09-10 01:16 - 2017-09-10 01:16 - 000000089 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\macromedia.com\support\flashplayer\sys\#cdn.stickyadstv.com\settings.sol 2017-09-10 01:16 - 2017-09-10 01:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net 2017-09-10 01:16 - 2017-09-10 01:16 - 000000093 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\macromedia.com\support\flashplayer\sys\#cdncache-a.akamaihd.net\settings.sol 2017-09-10 01:15 - 2017-09-10 01:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\macromedia.com\support\flashplayer\sys\#eereader.com 2017-09-10 01:15 - 2017-09-10 01:15 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\macromedia.com\support\flashplayer\sys\#eereader.com\settings.sol 2017-09-10 01:17 - 2017-09-10 01:17 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\macromedia.com\support\flashplayer\sys\#efreader.com 2017-09-10 01:17 - 2017-09-10 01:17 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\macromedia.com\support\flashplayer\sys\#efreader.com\settings.sol 2017-09-10 01:15 - 2017-09-10 01:15 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\macromedia.com\support\flashplayer\sys\#egreader.com 2017-09-10 01:15 - 2017-09-10 01:15 - 000000082 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\macromedia.com\support\flashplayer\sys\#egreader.com\settings.sol 2017-09-10 01:16 - 2017-09-10 01:16 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\macromedia.com\support\flashplayer\sys\#inread.anyclip.com 2017-09-10 01:16 - 2017-09-10 01:16 - 000000088 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\data700\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\XGZNG2PW\macromedia.com\support\flashplayer\sys\#inread.anyclip.com\settings.sol 2017-09-09 22:05 - 2017-09-12 09:44 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\dump 2017-09-11 23:54 - 2017-09-11 23:54 - 000139286 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\dump\13884342-a650-40d5-a546-48eaff753593.dmp 2017-09-12 09:44 - 2017-09-12 09:44 - 000133446 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\dump\4a919061-4b7d-42e9-9f20-935e0130190b.dmp 2017-09-11 22:51 - 2017-09-11 22:51 - 000140486 _____ () C:\FRST\Quarantine\C\Users\admin\AppData\Local\vgavlch\dump\6b6d3537-97ba-49b1-b3ca-e00ca4645f71.dmp 2017-09-12 13:13 - 2017-09-12 13:13 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Roaming 2017-09-09 21:58 - 2017-09-09 21:58 - 000000000 ____D () C:\FRST\Quarantine\C\Users\admin\AppData\Roaming\et 2017-09-12 13:13 - 2017-09-12 13:13 - 000000000 ____D () C:\FRST\Quarantine\C\Windows 2017-09-12 13:13 - 2017-09-12 16:40 - 000000000 ____D () C:\FRST\Quarantine\C\Windows\system32 2017-09-12 13:13 - 2017-09-12 14:53 - 000000000 ____D () C:\FRST\Quarantine\C\Windows\system32\Drivers 2017-09-12 09:45 - 2017-09-12 09:45 - 000253888 _____ (Malwarebytes) C:\FRST\Quarantine\C\Windows\system32\Drivers\050F0493.sys.xBAD 2017-09-12 09:51 - 2017-09-12 09:51 - 000253888 _____ (Malwarebytes) C:\FRST\Quarantine\C\Windows\system32\Drivers\120C0921.sys.xBAD 2017-09-12 00:12 - 2017-09-12 00:12 - 000253888 _____ (Malwarebytes) C:\FRST\Quarantine\C\Windows\system32\Drivers\13874E25.sys.xBAD 2017-09-12 00:16 - 2017-09-12 00:16 - 000253888 _____ (Malwarebytes) C:\FRST\Quarantine\C\Windows\system32\Drivers\2045511B.sys.xBAD 2017-09-12 00:16 - 2017-09-12 00:16 - 000253888 _____ (Malwarebytes) C:\FRST\Quarantine\C\Windows\system32\Drivers\245B5107.sys.xBAD 2017-09-12 09:45 - 2017-09-12 09:45 - 000253888 _____ (Malwarebytes) C:\FRST\Quarantine\C\Windows\system32\Drivers\33210483.sys.xBAD 2017-09-12 12:42 - 2017-09-12 12:42 - 000253888 _____ (Malwarebytes) C:\FRST\Quarantine\C\Windows\system32\Drivers\37A40C5A.sys.xBAD 2017-09-12 10:46 - 2017-09-12 10:46 - 000253888 _____ (Malwarebytes) C:\FRST\Quarantine\C\Windows\system32\Drivers\602532D8.sys.xBAD 2017-09-11 22:52 - 2017-09-11 22:52 - 000253888 _____ (Malwarebytes) C:\FRST\Quarantine\C\Windows\system32\Drivers\632910B0.sys.xBAD 2017-09-12 00:31 - 2017-09-12 00:31 - 000253888 _____ (Malwarebytes) C:\FRST\Quarantine\C\Windows\system32\Drivers\75F65C4B.sys.xBAD 2017-09-11 21:51 - 2017-09-11 21:51 - 000079064 _____ (Malwarebytes Corporation) C:\FRST\Quarantine\C\Windows\system32\Drivers\bkddf.sys.xBAD 2017-09-12 10:45 - 2017-09-12 10:49 - 000014040 _____ () C:\FRST\Quarantine\C\Windows\system32\Drivers\msidntfs.sys.xBAD 2017-09-12 12:45 - 2017-09-12 12:45 - 000014040 _____ () C:\FRST\Quarantine\C\Windows\system32\Drivers\rasfjmps.sys.xBAD 2017-09-12 16:40 - 2017-09-12 16:40 - 000000000 ____D () C:\FRST\Quarantine\C\Windows\system32\Tasks 2017-09-09 21:58 - 2017-09-09 21:58 - 000021602 _____ () C:\FRST\Quarantine\C\Windows\system32\Tasks\kQROyonIElr4.xBAD 2017-09-09 21:58 - 2017-09-09 21:58 - 000000000 ____D () C:\FRST\Quarantine\C\Windows\system32\utccofs 2017-09-04 15:03 - 2017-09-04 15:03 - 002799616 _____ () C:\FRST\Quarantine\C\Windows\system32\utccofs\msrzdhu.exe 2013-07-06 13:27 - 2013-07-06 13:27 - 000081696 _____ () C:\FRST\Quarantine\C\Windows\system32\utccofs\msrzdhu.sys 2017-09-12 13:13 - 2017-09-12 13:13 - 000000000 ____D () C:\FRST\Quarantine\C\Windows\SysWOW64 2017-09-09 21:58 - 2017-09-09 21:58 - 000000000 ____D () C:\FRST\Quarantine\C\Windows\SysWOW64\utccofs 2017-09-12 13:13 - 2017-09-12 13:13 - 000000000 ____D () C:\FRST\Quarantine\C\Windows\Temp 2017-09-09 21:58 - 2017-09-12 10:49 - 002799616 _____ () C:\FRST\Quarantine\C\Windows\Temp\msrzdhusrv.exe.xBAD ====== End of Folder: ====== =========== EmptyTemp: ========== BITS transfer queue => 7888896 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 33135101 B Java, Flash, Steam htmlcache => 492 B Windows/system/drivers => 294021315 B Edge => 19827966 B Chrome => 477497071 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 128 B systemprofile32 => 128 B LocalService => 0 B NetworkService => 152034 B admin => 50036751765 B RecycleBin => 110709107 B EmptyTemp: => 47.5 GB temporary data Removed. ================================ The system needed a reboot. ==== End of Fixlog 16:42:27 ====

Attached. BTW, thanks for your help. You're very patient and I appreciate you helping me. FRST.txt Addition.txt

RogueKiller V12.11.14.0 (x64) [Sep 11 2017] (Free) by Adlice Software mail : http://www.adlice.com/contact/ Feedback : https://forum.adlice.com Website : http://www.adlice.com/download/roguekiller/ Blog : http://www.adlice.com Operating System : Windows 10 (10.0.15063) 64 bits version Started in : Normal mode User : admin [Administrator] Started from : C:\Users\admin\Desktop\RogueKiller64.exe Mode : Delete -- Date : 09/12/2017 15:59:29 (Duration : 00:20:25) ¤¤¤ Processes : 0 ¤¤¤ ¤¤¤ Registry : 4 ¤¤¤ [PUP.Gen1] (X64) HKEY_USERS\S-1-5-21-789244946-2469842990-2269019741-1001\Software\IM -> Deleted [PUP.Gen1] (X86) HKEY_USERS\S-1-5-21-789244946-2469842990-2269019741-1001\Software\IM -> Not selected [PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Replaced (2) [PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Replaced (2) ¤¤¤ Tasks : 0 ¤¤¤ ¤¤¤ Files : 0 ¤¤¤ ¤¤¤ WMI : 0 ¤¤¤ ¤¤¤ Hosts File : 0 ¤¤¤ ¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤ ¤¤¤ Web browsers : 4 ¤¤¤ [PUP.Gen0][Chrome:Addon] Default : Honey [bmnlcjabgnpnenekpadlanbbkooimhnj] -> Deleted [PUP.Gen0][Chrome:Addon] Default : APNG [ehkepjiconegkhpodgoaeamnpckdbblp] -> ERROR [2] [PUP.Gen0][Chrome:Addon] Default : Amazon Assistant for Chrome [pbjikboenpfhbbejgkoklgkhjpfogcam] -> ERROR [2] [PUM.HomePage][Chrome:Config] Default [SecurePrefs] : session.startup_urls [http://mail.google.com/] -> Deleted ¤¤¤ MBR Check : ¤¤¤ +++++ PhysicalDrive0: WDC WD2003FZEX-00SRLA0 +++++ --- User --- [MBR] 703903d4f3903668c4dc30991ba79209 [BSP] 9e3b3c473b1db0daa516427cdae6e1cc : Windows Vista/7/8 MBR Code Partition table: 0 - Microsoft reserved partition | Offset (sectors): 34 | Size: 128 MB 1 - Basic data partition | Offset (sectors): 264192 | Size: 1907600 MB User = LL1 ... OK User = LL2 ... OK +++++ PhysicalDrive1: Samsung SSD 850 EVO 500GB +++++ --- User --- [MBR] 5b2600847e5b247b2af35cd5a6c9294b [BSP] 9e3b3c473b1db0daa516427cdae6e1cc : Windows Vista/7/8 MBR Code Partition table: 0 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 2048 | Size: 450 MB 1 - [MAN-MOUNT] EFI system partition | Offset (sectors): 923648 | Size: 99 MB 2 - [MAN-MOUNT] Microsoft reserved partition | Offset (sectors): 1126400 | Size: 16 MB 3 - Basic data partition | Offset (sectors): 1159168 | Size: 476374 MB User = LL1 ... OK User = LL2 ... OK +++++ PhysicalDrive2: Generic Flash Disk USB Device +++++ --- User --- [MBR] 90c955dd5e4eb3da9909eeae41974756 [BSP] 475df732712c291a84b942e8ed531bd2 : Unknown|VT.Unknown MBR Code Partition table: 0 - [XXXXXX] FAT32 (0xb) [VISIBLE] Offset (sectors): 696 | Size: 3909 MB User = LL1 ... OK Error reading LL2 MBR! ([32] The request is not supported. ) +++++ PhysicalDrive3: Generic- SD/MMC/MS/MSPRO USB Device +++++ Error reading User MBR! ([15] The device is not ready. ) Error reading LL1 MBR! NOT VALID! Error reading LL2 MBR! ([32] The request is not supported. ) # AdwCleaner 7.0.2.1 - Logfile created on Tue Sep 12 22:50:32 2017 # Updated on 2017/29/08 by Malwarebytes # Database: 09-12-2017.1 # Running on Windows 10 Pro (X64) # Mode: scan # Support: https://www.malwarebytes.com/support ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** No malicious folders found. ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** No malicious tasks found. ***** [ Registry ] ***** No malicious registry entries found. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries. ***** [ Chromium (and derivatives) ] ***** PUP.Optional.Legacy, Plugin found: APNG - PUP.Optional.Legacy, SearchProvider found: Ask - websearch.ask.com PUP.Optional.AmazonBrowserBar, Plugin found: Amazon Assistant for Chrome - /!\ Please Reset the Chrome Synchronization before cleaning the Chrome Preferences: https://support.google.com/chrome/answer/3097271 ************************* C:/AdwCleaner/AdwCleaner[C0].txt - [1444 B] - [2017/9/12 7:30:20] C:/AdwCleaner/AdwCleaner[S0].txt - [1541 B] - [2017/9/12 7:28:31] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt ##########

# AdwCleaner 7.0.2.1 - Logfile created on Tue Sep 12 22:50:32 2017 # Updated on 2017/29/08 by Malwarebytes # Database: 09-12-2017.1 # Running on Windows 10 Pro (X64) # Mode: scan # Support: https://www.malwarebytes.com/support ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** No malicious folders found. ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** No malicious tasks found. ***** [ Registry ] ***** No malicious registry entries found. ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries. ***** [ Chromium (and derivatives) ] ***** PUP.Optional.Legacy, Plugin found: APNG - PUP.Optional.Legacy, SearchProvider found: Ask - websearch.ask.com PUP.Optional.AmazonBrowserBar, Plugin found: Amazon Assistant for Chrome - /!\ Please Reset the Chrome Synchronization before cleaning the Chrome Preferences: https://support.google.com/chrome/answer/3097271 ************************* C:/AdwCleaner/AdwCleaner[C0].txt - [1444 B] - [2017/9/12 7:30:20] C:/AdwCleaner/AdwCleaner[S0].txt - [1541 B] - [2017/9/12 7:28:31] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt ##########

Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 9/12/17 Scan Time: 3:39 PM Log File: 3a1c3cfe-980b-11e7-8c4e-6045cb609b53.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.188 Update Package Version: 1.0.2788 License: Trial -System Information- OS: Windows 10 (Build 15063.540) CPU: x64 File System: NTFS User: DESKTOP-7Q467GF\admin -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 382974 Threats Detected: 1 Threats Quarantined: 1 Time Elapsed: 1 min, 2 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 1 Rootkit.Agent.PUA, C:\Windows\System32\drivers\raswzcfj.sys, Quarantined, [6009], [427182],0.0.0 Physical Sector: 0 (No malicious items detected) (end)

Ok, all done. Attached. Fixlog.txt

Yeah, the USB stick is dead. I tested it on another box. I'll have another one in a few hours.

I feel like it's fighting me. I'm trying to get back over to safe mode but I'm having issues. Now my USB stick is acting up. I'll keep trying.

What happened?

Attached. FRST.txt

Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 9/12/17 Scan Time: 12:34 PM Log File: 712446c0-97f1-11e7-b0a0-6045cb609b53.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.188 Update Package Version: 1.0.2787 License: Trial -System Information- OS: Windows 10 (Build 15063.540) CPU: x64 File System: NTFS User: DESKTOP-7Q467GF\admin -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 382255 Threats Detected: 0 (No malicious items detected) Threats Quarantined: 0 (No malicious items detected) Time Elapsed: 0 min, 40 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 0 (No malicious items detected) File: 0 (No malicious items detected) Physical Sector: 0 (No malicious items detected) (end)

Attached. Fixlog.txt

Fix result of Farbar Recovery Scan Tool (x64) Version: 11-09-2017 02 Ran by admin (12-09-2017 11:09:32) Run:4 Running from C:\Users\admin\Desktop Loaded Profiles: admin (Available Profiles: admin) Boot Mode: Normal ============================================== fixlist content: ***************** CMD: bcdedit.exe /set {default} recoveryenabled yes CMD: dir C:\Windows CMD: dir C:\Windows\system32\drivers ***************** ========= bcdedit.exe /set {default} recoveryenabled yes ========= The operation completed successfully. ========= End of CMD: ========= ========= dir C:\Windows ========= Volume in drive C has no label. Volume Serial Number is C0FC-D9C2 Directory of C:\Windows 09/12/2017 10:13 AM <DIR> . 09/12/2017 10:13 AM <DIR> .. 03/18/2017 02:03 PM <DIR> addins 09/08/2017 10:38 AM <DIR> appcompat 09/07/2017 11:15 AM <DIR> AppPatch 09/12/2017 09:42 AM <DIR> AppReadiness 09/07/2017 11:16 AM <DIR> assembly 03/18/2017 02:03 PM <DIR> bcastdvr 06/03/2017 01:51 AM 64,512 bfsvc.exe 03/18/2017 02:03 PM <DIR> Boot 03/18/2017 02:03 PM <DIR> Branding 09/12/2017 09:34 AM <DIR> CbsTemp 09/07/2017 01:38 PM <DIR> CSC 09/11/2017 12:23 PM <DIR> Cursors 09/07/2017 06:15 AM <DIR> debug 03/18/2017 02:03 PM <DIR> diagnostics 03/18/2017 07:28 PM <DIR> DigitalLocker 09/07/2017 03:56 AM 10,452 DPINST.LOG 09/07/2017 01:35 PM 1,947 DtcInstall.log 03/18/2017 07:28 PM <DIR> en-US 06/19/2017 11:04 PM 4,847,424 explorer.exe 03/18/2017 02:03 PM <DIR> GameBarPresenceWriter 03/18/2017 02:03 PM <DIR> Globalization 09/07/2017 05:21 PM <DIR> Help 06/03/2017 01:59 AM 975,360 HelpPane.exe 03/18/2017 01:57 PM 18,432 hh.exe 09/07/2017 01:34 PM <DIR> HoloShell 03/18/2017 07:28 PM <DIR> IME 09/07/2017 11:15 AM <DIR> ImmersiveControlPanel 09/11/2017 10:52 PM <DIR> INF 03/18/2017 02:03 PM <DIR> InfusedApps 03/18/2017 02:03 PM <DIR> InputMethod 03/18/2017 02:03 PM <DIR> L2Schemas 09/07/2017 01:04 PM <DIR> LastGood.Tmp 09/07/2017 05:23 PM <DIR> LiveKernelReports 09/07/2017 01:46 PM <DIR> Logs 09/07/2017 01:34 PM 1,342 lsasetup.log 09/11/2017 09:14 PM 1,987,515,983 MEMORY.DMP 03/18/2017 01:57 PM 43,131 mib.bin 09/11/2017 09:51 PM <DIR> Microsoft.NET 03/18/2017 02:03 PM <DIR> Migration 09/11/2017 09:15 PM <DIR> Minidump 09/07/2017 01:34 PM <DIR> MiracastView 03/18/2017 02:03 PM <DIR> ModemLogs 09/02/2016 02:38 AM 0 MSUTIL.INI 03/18/2017 01:58 PM 246,784 notepad.exe 08/21/2017 06:01 PM 1,951 NvContainerRecovery.bat 08/21/2017 06:01 PM 1,951 NvTelemetryContainerRecovery.bat 03/18/2017 07:30 PM <DIR> OCR 03/18/2017 02:03 PM <DIR> Offline Web Pages 09/07/2017 01:35 PM <DIR> Panther 03/18/2017 02:03 PM <DIR> Performance 09/11/2017 10:52 PM 19,436 PFRO.log 03/18/2017 02:03 PM <DIR> PLA 09/07/2017 11:15 AM <DIR> PolicyDefinitions 09/12/2017 10:59 AM <DIR> Prefetch 09/07/2017 01:34 PM <DIR> PrintDialog 03/18/2017 01:59 PM 34,774 Professional.xml 09/07/2017 11:15 AM <DIR> Provisioning 09/11/2017 11:54 PM <DIR> pss 03/18/2017 01:57 PM 321,024 regedit.exe 03/18/2017 02:03 PM <DIR> Registration 03/18/2017 07:31 PM <DIR> RemotePackages 09/10/2017 04:12 PM <DIR> rescache 03/18/2017 02:03 PM <DIR> Resources 03/18/2017 02:03 PM <DIR> SchCache 03/18/2017 07:31 PM <DIR> schemas 03/18/2017 07:31 PM <DIR> security 09/07/2017 01:34 PM <DIR> ServiceProfiles 03/18/2017 07:28 PM <DIR> servicing 03/18/2017 02:06 PM <DIR> Setup 09/11/2017 09:15 PM 30,244 setupact.log 09/07/2017 05:31 PM 103 setuperr.log 09/07/2017 11:15 AM <DIR> ShellExperiences 03/18/2017 07:29 PM <DIR> SKB 09/07/2017 05:12 PM <DIR> SoftwareDistribution 03/18/2017 02:03 PM <DIR> Speech 03/18/2017 02:03 PM <DIR> Speech_OneCore 03/18/2017 01:58 PM 130,560 splwow64.exe 03/18/2017 02:03 PM <DIR> System 03/18/2017 02:01 PM 219 system.ini 09/12/2017 10:55 AM <DIR> System32 03/18/2017 07:31 PM <DIR> SystemApps 03/18/2017 07:31 PM <DIR> SystemResources 09/09/2017 09:58 PM <DIR> SysWOW64 03/18/2017 02:03 PM <DIR> TAPI 09/12/2017 10:43 AM <DIR> Tasks 09/12/2017 10:58 AM <DIR> Temp 03/18/2017 02:03 PM <DIR> tracing 03/18/2017 02:03 PM <DIR> twain_32 03/18/2017 01:58 PM 65,536 twain_32.dll 01/30/2008 06:36 PM 90,112 unvise32.exe 03/18/2017 02:03 PM <DIR> Vss 03/18/2017 02:03 PM <DIR> Web 03/18/2017 02:01 PM 92 win.ini 09/12/2017 10:52 AM 275 WindowsUpdate.log 03/18/2017 01:58 PM 10,240 winhlp32.exe 09/12/2017 02:42 AM <DIR> WinSxS 03/18/2017 01:56 PM 316,640 WMSysPr9.prx 03/18/2017 01:58 PM 11,264 write.exe 27 File(s) 1,994,759,788 bytes 73 Dir(s) 241,079,439,360 bytes free ========= End of CMD: ========= ========= dir C:\Windows\system32\drivers ========= Volume in drive C has no label. Volume Serial Number is C0FC-D9C2 Directory of C:\Windows\system32\drivers 09/12/2017 10:49 AM <DIR> . 09/12/2017 10:49 AM <DIR> .. 09/12/2017 09:45 AM 253,888 050F0493.sys 09/12/2017 09:51 AM 253,888 120C0921.sys 09/12/2017 12:12 AM 253,888 13874E25.sys 03/18/2017 01:56 PM 238,080 1394ohci.sys 09/12/2017 12:16 AM 253,888 2045511B.sys 09/12/2017 12:16 AM 253,888 245B5107.sys 09/12/2017 09:45 AM 253,888 33210483.sys 03/18/2017 01:56 PM 107,424 3ware.sys 09/12/2017 10:46 AM 253,888 602532D8.sys 09/11/2017 10:52 PM 253,888 632910B0.sys 09/12/2017 12:31 AM 253,888 75F65C4B.sys 07/27/2017 10:23 PM 723,360 acpi.sys 03/18/2017 01:56 PM 20,480 AcpiDev.sys 03/18/2017 01:56 PM 127,392 acpiex.sys 03/18/2017 01:56 PM 12,800 acpipagr.sys 03/18/2017 01:56 PM 14,848 acpipmi.sys 03/18/2017 01:56 PM 14,336 acpitime.sys 03/18/2017 01:56 PM 1,135,512 adp80xx.sys 03/18/2017 01:57 PM 610,712 afd.sys 09/11/2017 12:23 PM 79,064 aflssev.sys 03/18/2017 01:58 PM 108,544 agilevpn.sys 03/18/2017 01:57 PM 239,616 ahcache.sys 03/18/2017 01:56 PM 176,640 amdk8.sys 03/18/2017 01:56 PM 172,544 amdppm.sys 03/18/2017 01:56 PM 83,352 amdsata.sys 03/18/2017 01:56 PM 259,488 amdsbs.sys 03/18/2017 01:56 PM 27,040 amdxata.sys 03/18/2017 01:58 PM 184,736 appid.sys 03/18/2017 01:58 PM 17,920 applockerfltr.sys 03/18/2017 07:30 PM 127,904 AppVStrm.sys 03/18/2017 07:30 PM 161,696 AppvVemgr.sys 03/18/2017 07:30 PM 143,776 AppvVfs.sys 03/18/2017 01:56 PM 132,000 arcsas.sys 03/18/2017 01:57 PM 28,672 asyncmac.sys 03/18/2017 01:56 PM 29,088 atapi.sys 03/18/2017 01:56 PM 194,464 ataport.sys 03/18/2017 01:56 PM 57,344 BasicDisplay.sys 06/03/2017 02:11 AM 35,840 BasicRender.sys 03/18/2017 01:56 PM 36,256 battc.sys 07/28/2015 01:49 PM 199,472 bcbtums.sys 07/28/2015 01:38 PM 70,006 BCM20702A1_001.002.014.1443.1714.hex 03/18/2017 01:56 PM 9,728 bcmfn2.sys 03/18/2017 01:57 PM 10,240 beep.sys 09/11/2017 09:51 PM 79,064 bkddf.sys 03/18/2017 01:56 PM 101,888 bowser.sys 07/27/2017 09:25 PM 115,712 bridge.sys 03/18/2017 01:56 PM 23,552 BtaMPM.sys 03/18/2017 01:56 PM 43,520 BthAvrcpTg.sys 07/27/2017 09:25 PM 105,472 bthenum.sys 07/27/2017 09:08 PM 97,792 bthhfenum.sys 03/18/2017 01:56 PM 32,256 BthhfHid.sys 03/18/2017 01:56 PM 66,560 bthmodem.sys 07/06/2017 11:22 PM 130,048 bthpan.sys 07/27/2017 09:20 PM 982,016 bthport.sys 03/18/2017 01:56 PM 85,504 BTHUSB.SYS 07/28/2015 01:49 PM 214,328 btwampfl.sys 03/18/2017 01:56 PM 39,424 buttonconverter.sys 03/18/2017 01:56 PM 533,920 bxvbda.sys 03/18/2017 01:56 PM 53,664 CAD.sys 03/18/2017 01:56 PM 122,880 capimg.sys 03/18/2017 01:57 PM 93,184 cdfs.sys 03/18/2017 01:56 PM 160,256 cdrom.sys 03/18/2017 01:57 PM 77,216 CEA.sys 03/18/2017 01:56 PM 102,816 cht4dx64.sys 03/18/2017 01:56 PM 347,032 cht4sx64.sys 03/18/2017 01:56 PM 2,104,224 cht4vx64.sys 03/18/2017 01:56 PM 49,152 circlass.sys 03/18/2017 01:57 PM 391,584 Classpnp.sys 03/18/2017 01:58 PM 12,288 cldflt.sys 07/31/2017 07:38 PM 382,368 clfs.sys 03/18/2017 01:58 PM 877,472 ClipSp.sys 03/18/2017 01:56 PM 30,208 CmBatt.sys 03/18/2017 01:56 PM 28,064 cmimcext.sys 03/18/2017 01:58 PM 642,688 cng.sys 03/18/2017 01:57 PM 39,840 cnghwassist.sys 03/18/2017 01:57 PM 56,224 condrv.sys 03/18/2017 01:57 PM 86,432 crashdmp.sys 03/18/2017 07:30 PM 559,104 csc.sys 05/19/2017 11:59 PM 112,544 dam.sys 03/18/2017 01:56 PM 45,568 devauthe.sys 03/18/2017 01:57 PM 150,528 dfsc.sys 03/18/2017 01:56 PM 102,816 disk.sys 03/18/2017 01:58 PM 38,816 Diskdump.sys 03/18/2017 01:57 PM 15,360 Dmpusbstor.sys 03/18/2017 01:56 PM 47,104 dmvsc.sys 03/18/2017 01:56 PM 97,280 drmk.sys 03/18/2017 01:56 PM 16,232 drmkaud.sys 03/18/2017 01:57 PM 35,744 Dumpata.sys 03/18/2017 01:59 PM 91,152 dumpfve.sys 05/19/2017 11:58 PM 188,824 dumpsd.sys 03/18/2017 01:58 PM 32,256 dumpsdport.sys 03/18/2017 01:57 PM 25,600 Dumpstorport.sys 07/31/2017 07:32 PM 2,444,704 dxgkrnl.sys 03/31/2017 05:52 PM 409,504 dxgmms1.sys 07/31/2017 07:32 PM 712,600 dxgmms2.sys 03/18/2017 01:56 PM 524,800 e1i63x64.sys 03/18/2017 01:57 PM 88,992 EhStorClass.sys 03/18/2017 01:56 PM 119,200 EhStorTcgDrv.sys 03/18/2017 07:31 PM <DIR> en-US 03/18/2017 01:56 PM 13,824 errdev.sys 03/18/2017 02:03 PM <DIR> etc 03/18/2017 01:56 PM 3,419,040 evbda.sys 03/18/2017 01:57 PM 347,136 exfat.sys 09/12/2017 10:49 AM 101,824 farflt.sys 05/19/2017 11:53 PM 363,424 fastfat.sys 03/18/2017 01:56 PM 32,768 fdc.sys 03/18/2017 01:56 PM 54,272 filecrypt.sys 03/18/2017 01:57 PM 86,432 fileinfo.sys 03/18/2017 01:57 PM 36,864 filetrace.sys 03/18/2017 01:56 PM 26,624 flpydisk.sys 03/18/2017 01:57 PM 386,464 fltMgr.sys 03/18/2017 01:56 PM 63,904 fsdepends.sys 03/18/2017 01:57 PM 33,688 fs_rec.sys 07/27/2017 10:15 PM 715,168 fvevol.sys 03/18/2017 01:57 PM 419,744 FWPKCLNT.SYS 03/18/2017 01:56 PM 21,504 genericusbfn.sys 03/18/2017 01:57 PM 3,440,660 gm.dls 03/18/2017 01:57 PM 646 gmreadme.txt 03/18/2017 01:58 PM 8,192 gpuenergydrv.sys 06/19/2017 10:12 PM 86,528 hdaudbus.sys 03/18/2017 01:56 PM 416,256 HdAudio.sys 03/18/2017 01:56 PM 38,296 hidbatt.sys 03/18/2017 01:56 PM 106,496 hidbth.sys 03/18/2017 01:56 PM 180,736 hidclass.sys 03/18/2017 01:56 PM 52,224 hidi2c.sys 03/18/2017 01:56 PM 51,104 hidinterrupt.sys 03/18/2017 01:56 PM 46,592 hidir.sys 03/18/2017 01:56 PM 40,960 hidparse.sys 03/18/2017 01:56 PM 40,960 hidusb.sys 03/18/2017 01:56 PM 64,416 HpSAMD.sys 07/07/2017 12:07 AM 1,106,848 http.sys 03/18/2017 01:57 PM 74,648 hvservice.sys 03/18/2017 01:56 PM 118,688 hvsocket.sys 03/18/2017 01:57 PM 29,600 hwpolicy.sys 03/18/2017 01:56 PM 16,896 hyperkbd.sys 03/18/2017 01:56 PM 115,200 i8042prt.sys 03/18/2017 01:56 PM 33,280 iagpio.sys 03/18/2017 01:56 PM 81,408 iai2c.sys 03/18/2017 01:56 PM 70,656 iaLPSS2i_GPIO2.sys 03/18/2017 01:56 PM 85,504 iaLPSS2i_GPIO2_BXT_P.sys 03/18/2017 01:56 PM 165,376 iaLPSS2i_I2C.sys 03/18/2017 01:56 PM 168,448 iaLPSS2i_I2C_BXT_P.sys 03/18/2017 01:56 PM 38,128 iaLPSSi_GPIO.sys 03/18/2017 01:56 PM 113,152 iaLPSSi_I2C.sys 03/18/2017 01:56 PM 673,184 iaStorAV.sys 03/18/2017 01:56 PM 412,064 iaStorV.sys 03/18/2017 01:56 PM 526,240 ibbus.sys 03/18/2017 01:58 PM 36,864 IndirectKmd.sys 03/18/2017 01:56 PM 19,360 intelide.sys 06/16/2017 12:52 PM 134,008 IntelNit.sys 03/18/2017 01:56 PM 74,840 intelpep.sys 03/18/2017 01:56 PM 193,536 intelppm.sys 03/18/2017 01:57 PM 49,568 iorate.sys 03/18/2017 01:57 PM 87,040 ipfltdrv.sys 03/18/2017 01:56 PM 92,064 IPMIDrv.sys 03/18/2017 01:58 PM 214,528 ipnat.sys 03/18/2017 01:57 PM 120,320 irda.sys 03/18/2017 01:57 PM 19,968 irenum.sys 03/18/2017 01:56 PM 22,944 isapnp.sys 03/18/2017 01:56 PM 64,416 kbdclass.sys 03/18/2017 01:56 PM 40,448 kbdhid.sys 03/18/2017 01:56 PM 23,040 kdnic.sys 03/18/2017 01:58 PM 390,144 ks.sys 03/18/2017 01:57 PM 136,088 ksecdd.sys 03/18/2017 01:58 PM 170,912 ksecpkg.sys 05/19/2017 11:10 PM 27,136 ksthunk.sys 03/18/2017 01:58 PM 66,560 lltdio.sys 03/18/2017 01:56 PM 108,960 lsi_sas.sys 03/18/2017 01:56 PM 123,808 lsi_sas2i.sys 03/18/2017 01:56 PM 103,328 lsi_sas3i.sys 03/18/2017 01:56 PM 82,848 lsi_sss.sys 03/18/2017 01:57 PM 124,928 luafv.sys 03/18/2017 01:56 PM 405,408 mausbhost.sys 03/18/2017 01:56 PM 51,104 mausbip.sys 08/24/2017 11:27 AM 77,440 mbae64.sys 09/12/2017 10:49 AM 45,472 mbam.sys 09/12/2017 10:36 AM 192,960 MBAMChameleon.sys 09/12/2017 10:49 AM 253,888 MBAMSwissArmy.sys 03/18/2017 01:57 PM 23,552 mcd.sys 03/18/2017 01:56 PM 59,808 megasas.sys 03/18/2017 01:56 PM 64,416 MegaSas2i.sys 03/18/2017 01:56 PM 575,904 megasr.sys 07/27/2017 09:25 PM 97,280 Microsoft.Bluetooth.Legacy.LEEnumerator.sys 03/18/2017 01:56 PM 842,656 mlx4_bus.sys 03/18/2017 01:57 PM 50,688 mmcss.sys 03/18/2017 01:57 PM 42,496 modem.sys 03/18/2017 01:56 PM 39,424 monitor.sys 03/18/2017 01:56 PM 60,320 mouclass.sys 03/18/2017 01:56 PM 33,280 mouhid.sys 03/18/2017 01:57 PM 105,880 mountmgr.sys 03/18/2017 01:58 PM 76,800 mpsdrv.sys 03/18/2017 01:57 PM 144,384 mrxdav.sys 03/18/2017 01:57 PM 467,352 mrxsmb.sys 07/06/2017 11:08 PM 285,696 mrxsmb10.sys 07/07/2017 12:12 AM 228,256 mrxsmb20.sys 03/18/2017 01:57 PM 31,744 msfs.sys 03/18/2017 01:57 PM 169,888 msgpioclx.sys 03/18/2017 01:56 PM 49,056 msgpiowin32.sys 03/18/2017 01:57 PM 8,704 mshidkmdf.sys 03/18/2017 01:57 PM 12,288 mshidumdf.sys 09/12/2017 10:49 AM 81,696 msidntfs.sys 03/18/2017 01:56 PM 19,352 msisadrv.sys 07/27/2017 10:20 PM 279,968 msiscsi.sys 06/19/2017 10:14 PM 32,768 mskssrv.sys 03/18/2017 01:57 PM 83,456 mslldp.sys 03/18/2017 01:58 PM 10,752 mspclock.sys 03/18/2017 01:58 PM 10,752 mspqm.sys 03/18/2017 01:57 PM 367,000 msrpc.sys 03/18/2017 07:31 PM 230,816 mssecflt.sys 03/18/2017 01:56 PM 44,960 mssmbios.sys 03/18/2017 01:58 PM 12,800 mstee.sys 03/18/2017 01:56 PM 16,896 MTConfig.sys 03/18/2017 01:57 PM 123,808 mup.sys 03/18/2017 01:56 PM 63,904 mvumis.sys 09/12/2017 12:21 AM 94,144 mwac.sys 03/18/2017 01:56 PM 108,960 ndfltr.sys 06/19/2017 11:08 PM 1,242,528 ndis.sys 03/18/2017 01:57 PM 50,688 ndiscap.sys 03/18/2017 01:57 PM 128,512 NdisImPlatform.sys 03/18/2017 01:58 PM 27,136 ndistapi.sys 03/18/2017 01:58 PM 65,536 ndisuio.sys 03/18/2017 01:57 PM 20,992 NdisVirtualBus.sys 03/18/2017 01:58 PM 192,000 ndiswan.sys 03/18/2017 01:58 PM 62,464 ndproxy.sys 03/18/2017 01:58 PM 127,488 Ndu.sys 03/18/2017 01:57 PM 122,368 NetAdapterCx.sys 03/18/2017 01:57 PM 57,760 netbios.sys 03/18/2017 01:57 PM 305,152 netbt.sys 07/07/2017 12:20 AM 519,584 netio.sys 04/18/2017 11:18 PM 118,784 netvsc.sys 03/18/2017 01:57 PM 69,120 npfs.sys 03/18/2017 01:56 PM 27,136 npsvctrig.sys 03/18/2017 01:57 PM 41,984 nsiproxy.sys 07/27/2017 10:24 PM 2,327,456 ntfs.sys 03/18/2017 01:57 PM 20,376 ntosext.sys 03/18/2017 01:57 PM 7,680 null.sys 03/18/2017 01:56 PM 80,896 nvdimmn.sys 08/21/2017 06:01 PM 218,712 nvhda64v.sys 03/18/2017 01:56 PM 150,432 nvraid.sys 03/18/2017 01:56 PM 166,304 nvstor.sys 08/21/2017 06:01 PM 48,248 nvvad64v.sys 08/21/2017 06:01 PM 57,976 nvvhci.sys 03/18/2017 01:58 PM 549,888 nwifi.sys 03/18/2017 01:57 PM 152,992 pacer.sys 03/18/2017 01:56 PM 97,792 parport.sys 03/18/2017 01:57 PM 159,648 partmgr.sys 03/18/2017 01:56 PM 353,696 pci.sys 03/18/2017 01:56 PM 16,800 pciide.sys 03/18/2017 01:56 PM 53,656 pciidex.sys 03/18/2017 01:56 PM 120,224 pcmcia.sys 03/18/2017 01:57 PM 52,640 pcw.sys 07/07/2017 12:24 AM 117,664 pdc.sys 03/18/2017 01:58 PM 741,376 PEAuth.sys 03/18/2017 01:56 PM 58,784 percsas2i.sys 03/18/2017 01:56 PM 61,848 percsas3i.sys 03/18/2017 01:56 PM 101,376 pmem.sys 03/18/2017 01:56 PM 373,248 portcls.sys 03/18/2017 01:56 PM 172,032 processr.sys 03/18/2017 01:57 PM 49,664 qwavedrv.sys 03/18/2017 01:57 PM 17,920 rasacd.sys 09/12/2017 10:48 AM 116,048 rasfjmps.sys 03/18/2017 01:58 PM 107,008 rasl2tp.sys 03/18/2017 01:57 PM 81,920 raspppoe.sys 03/18/2017 01:58 PM 97,792 raspptp.sys 03/18/2017 01:58 PM 79,872 rassstp.sys 03/18/2017 01:57 PM 434,080 rdbss.sys 03/18/2017 07:31 PM 27,136 rdpbus.sys 03/18/2017 07:30 PM 183,296 rdpdr.sys 03/18/2017 07:30 PM 30,624 rdpvideominiport.sys 03/18/2017 01:57 PM 282,528 rdyboost.sys 03/18/2017 01:57 PM 1,735,584 refs.sys 03/18/2017 01:57 PM 936,864 refsv1.sys 03/18/2017 01:57 PM 14,336 registry.sys 07/31/2017 06:41 PM 180,736 rfcomm.sys 03/18/2017 01:56 PM 40,960 RfxVmt.sys 03/18/2017 01:57 PM 150,016 rmcast.sys 03/18/2017 01:57 PM 34,816 RNDISMP.sys 05/19/2017 11:08 PM 13,312 rootmdm.sys 03/18/2017 01:58 PM 82,432 rspndr.sys 03/18/2017 01:56 PM 110,496 sbp2port.sys 03/18/2017 01:57 PM 43,520 scfilter.sys 03/18/2017 01:56 PM 91,040 scmbus.sys 03/18/2017 01:57 PM 175,520 scsiport.sys 05/20/2017 12:07 AM 287,648 sdbus.sys 03/18/2017 01:56 PM 31,128 SDFRd.sys 03/18/2017 01:56 PM 98,208 sdport.sys 03/18/2017 01:56 PM 94,624 sdstor.sys 03/18/2017 01:57 PM 75,680 SerCx.sys 03/18/2017 01:57 PM 154,016 SerCx2.sys 03/18/2017 01:56 PM 26,112 serenum.sys 03/18/2017 01:56 PM 84,480 serial.sys 03/18/2017 01:56 PM 28,672 sermouse.sys 03/18/2017 01:56 PM 18,432 sfloppy.sys 03/18/2017 01:56 PM 44,960 sisraid2.sys 03/18/2017 01:56 PM 81,824 sisraid4.sys 03/18/2017 01:58 PM 32,672 SleepStudyHelper.sys 03/18/2017 01:57 PM 21,504 smclib.sys 03/18/2017 01:56 PM 167,328 spacedump.sys 03/18/2017 01:56 PM 587,168 spaceport.sys 03/18/2017 07:31 PM 40,352 SpatialGraphFilter.sys 03/18/2017 01:57 PM 80,288 SpbCx.sys 04/27/2017 04:54 PM 414,208 srv.sys 04/27/2017 04:54 PM 722,944 srv2.sys 03/18/2017 01:57 PM 255,488 srvnet.sys 03/18/2017 01:56 PM 31,136 stexstor.sys 05/19/2017 11:54 PM 144,288 storahci.sys 03/18/2017 01:56 PM 95,648 stornvme.sys 05/19/2017 11:54 PM 546,208 storport.sys 03/18/2017 01:58 PM 79,872 storqosflt.sys 03/18/2017 01:56 PM 36,760 storufs.sys 03/18/2017 01:56 PM 36,768 storvsc.sys 03/18/2017 01:57 PM 75,776 stream.sys 03/18/2017 01:56 PM 18,336 swenum.sys 03/18/2017 01:56 PM 64,512 Synth3dVsc.sys 03/18/2017 01:57 PM 31,232 tape.sys 03/18/2017 01:57 PM 28,064 tbs.sys 07/27/2017 10:10 PM 2,679,200 tcpip.sys 03/18/2017 01:57 PM 51,712 tcpipreg.sys 03/18/2017 01:57 PM 40,352 tdi.sys 07/31/2017 07:36 PM 119,712 tdx.sys 01/19/2016 10:50 PM 202,032 TeeDriverW8x64.sys 03/18/2017 07:31 PM 37,280 terminpt.sys 06/03/2017 03:10 AM 130,464 tm.sys 06/03/2017 03:00 AM 219,040 tpm.sys 03/18/2017 01:56 PM 61,440 TsUsbFlt.sys 03/18/2017 01:56 PM 35,328 TsUsbGD.sys 03/18/2017 07:30 PM 125,952 tsusbhub.sys 03/18/2017 01:58 PM 162,304 tunnel.sys 03/18/2017 01:56 PM 78,752 uaspstor.sys 03/18/2017 01:58 PM 104,448 UcmCx.sys 03/18/2017 01:58 PM 179,200 UcmTcpciCx.sys 07/27/2017 09:27 PM 51,712 UcmUcsi.sys 03/18/2017 01:56 PM 213,920 Ucx01000.sys 03/18/2017 01:56 PM 45,568 Udecx.sys 03/18/2017 01:57 PM 324,096 udfs.sys 03/18/2017 01:56 PM 29,600 uefi.sys 03/18/2017 07:31 PM 40,344 UevAgentDriver.sys 03/18/2017 01:58 PM 263,584 ufx01000.sys 03/18/2017 01:56 PM 98,712 UfxChipidea.sys 03/18/2017 01:56 PM 138,656 ufxsynopsys.sys 03/18/2017 01:56 PM 57,856 umbus.sys 09/07/2017 11:15 AM <DIR> UMDF 03/18/2017 01:56 PM 14,336 umpass.sys 03/18/2017 01:56 PM 29,600 urschipidea.sys 03/18/2017 01:58 PM 59,288 urscx01000.sys 03/18/2017 01:56 PM 28,064 urssynopsys.sys 03/18/2017 01:57 PM 23,040 usb8023.sys 03/18/2017 01:57 PM 37,888 USBCAMD2.sys 03/18/2017 01:56 PM 173,984 usbccgp.sys 03/18/2017 01:56 PM 103,424 usbcir.sys 03/18/2017 01:56 PM 32,160 usbd.sys 03/18/2017 01:56 PM 98,200 usbehci.sys 03/18/2017 01:56 PM 511,904 usbhub.sys 07/27/2017 10:15 PM 554,400 USBHUB3.SYS 03/18/2017 01:56 PM 30,720 usbohci.sys 03/18/2017 01:56 PM 466,336 usbport.sys 03/18/2017 01:56 PM 27,136 usbprint.sys 03/18/2017 01:56 PM 32,768 usbrpm.sys 03/18/2017 01:56 PM 71,680 usbser.sys 03/18/2017 01:56 PM 131,488 USBSTOR.SYS 03/18/2017 01:56 PM 35,328 usbuhci.sys 04/27/2017 05:59 PM 388,000 USBXHCI.SYS 03/18/2017 01:56 PM 54,176 vdrvroot.sys 03/18/2017 01:57 PM 215,456 VerifierExt.sys 05/19/2017 11:54 PM 730,016 vhdmp.sys 03/18/2017 01:56 PM 35,328 vhf.sys 03/18/2017 01:57 PM 49,664 videoprt.sys 07/31/2017 07:30 PM 82,336 vmbkmcl.sys 07/31/2017 06:44 PM 83,968 vmbkmclr.sys 03/18/2017 01:56 PM 107,424 vmbus.sys 03/18/2017 01:56 PM 25,088 VMBusHID.sys 03/18/2017 01:56 PM 13,824 vmgencounter.sys 03/18/2017 01:56 PM 10,240 vmgid.sys 03/18/2017 01:56 PM 9,216 vms3cap.sys 03/18/2017 01:56 PM 47,520 vmstorfl.sys 03/18/2017 01:56 PM 83,360 volmgr.sys 03/18/2017 01:57 PM 373,664 volmgrx.sys 03/18/2017 01:57 PM 397,216 volsnap.sys 03/18/2017 01:56 PM 16,288 volume.sys 03/18/2017 01:56 PM 74,656 vpci.sys 03/18/2017 01:56 PM 166,816 vsmraid.sys 03/18/2017 01:56 PM 305,568 VSTXRAID.SYS 03/18/2017 01:58 PM 27,136 vwifibus.sys 03/18/2017 01:58 PM 77,312 vwififlt.sys 03/18/2017 01:58 PM 41,472 vwifimp.sys 03/18/2017 01:56 PM 30,720 wacompen.sys 03/18/2017 01:58 PM 81,408 wanarp.sys 03/18/2017 01:57 PM 55,808 watchdog.sys 06/19/2017 11:00 PM 142,752 wcifs.sys 03/18/2017 01:57 PM 72,192 wcnfs.sys 03/18/2017 01:56 PM 44,632 WdBoot.sys 03/18/2017 01:57 PM 902,376 Wdf01000.sys 03/18/2017 01:56 PM 294,816 WdFilter.sys 03/18/2017 01:57 PM 61,672 WdfLdr.sys 06/19/2017 10:07 PM 757,248 WdiWiFi.sys 03/18/2017 01:56 PM 121,248 WdNisDrv.sys 03/18/2017 01:57 PM 46,488 werkernel.sys 03/18/2017 01:57 PM 164,768 wfplwfs.sys 03/18/2017 01:57 PM 35,744 wimmount.sys 03/18/2017 01:58 PM 70,232 WindowsTrustedRT.sys 03/18/2017 01:56 PM 18,520 WindowsTrustedRTProxy.sys 03/18/2017 01:56 PM 31,648 winhv.sys 03/18/2017 01:57 PM 55,296 winhvr.sys 03/18/2017 01:56 PM 32,160 winmad.sys 03/18/2017 01:58 PM 217,088 winnat.sys 03/18/2017 01:56 PM 90,112 winusb.sys 03/18/2017 01:56 PM 64,920 winverbs.sys 03/18/2017 01:56 PM 18,432 wmiacpi.sys 03/18/2017 01:57 PM 20,384 wmilib.sys 03/18/2017 01:57 PM 208,288 wof.sys 03/18/2017 01:59 PM 30,624 WpdUpFltr.sys 03/18/2017 01:57 PM 33,184 WppRecorder.sys 03/18/2017 01:57 PM 23,552 ws2ifsl.sys 03/18/2017 01:57 PM 100,864 WUDFPf.sys 03/18/2017 01:57 PM 220,672 WUDFRd.sys 05/19/2017 11:07 PM 277,504 xboxgip.sys 03/18/2017 01:56 PM 46,592 xinputhid.sys 414 File(s) 80,010,168 bytes 5 Dir(s) 241,079,357,440 bytes free ========= End of CMD: ========= ==== End of Fixlog 11:09:33 ====

I do. It's 8GB

Great. I'm at your disposal. Attached. Addition.txt FRST.txt

Hey there. MSIDNTFS is causing issues. Seems like a pretty nasty one to dig out. Windows store won't connect. Microsoft Edge won't connect. Help please.