adurr infection

cushdaddy · July 24, 2013

Hello,

This is the first time I have ever used a forum to resolve a problem so I appreciate any help you can provide. I use Chrome and when directing the browser to facebook I notice a little bar in the bottom left hand corner that says...waiting for install.adurr.com. The screen then freezes up and eventually allows me to log into facebook. I also have a pop up called lnksr, as well as a video advertisement that pops up in the bottom right corner of the screen that has the words arcadecandy advertisement on it. So has you can see, I have several malware/spyware issues to deal with. The only program I run to protect my computer is Avast anti virus which obviously isn't enough. My operating system is Windows Vista.

One other note is just recently, while viewing pictures on FB I have clicked on from friends, a warning shows up to the right of the picture in the area where the names and thread show up and says your computer is infected. Of course I am not going to click on it, but I don't know what malicious software is causing that issue.

So please, any help you can provide is very much appreciated. I did see the thread on the lnksr malware and intend on following the instructions you provided to that forum member.

Thanks again

Bob

CatByte · July 24, 2013

Please run the following:

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

AdvancedSetup · July 27, 2013

Are you still with us?

AdvancedSetup · July 30, 2013

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

AdvancedSetup · August 2, 2013

Topic reopened per user request

cushdaddy · August 2, 2013

Thank you. I have sent a PM to the moderator concerning some steps before I install the farbar recovery tool. Just making sure the file I am about to click on is the right one. After I go to the redirected website http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ and click on download I get the setup.exe file which once I click on that the next file showing is setA9B5.tmp from Ironinstall. Is that the correct file? I am so suspicious any more about downloading so just want to make sure.

Thanks

Bob "Cushdaddy"

AdvancedSetup · August 3, 2013

There is no setup.exe file so whatever you downloaded is not the correct file, please do not run it.

There should be a blue button for the FRST download.

For the 32-bit version it is named: FRST.exe

For the 64-bit version it is named: FRST64.exe

CatByte · August 3, 2013

Hello cushdaddy

I have responded to your PM with the correct information.

please delete the file that you have downloaded and download either FRST.exe or FRST64.exe depending on your system

as Advanced Setup has said, there is no setup.exe file in FRST

cushdaddy · August 3, 2013

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 01-08-2013 01

Ran by Nerissa Fox (administrator) on 03-08-2013 12:27:22

Running from C:\Users\Nerissa Fox\Downloads

Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: English(US)

Internet Explorer Version 9

Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AVG Technologies CZ, s.r.o.) C:\PROGRA~1\AVG\AVG2013\avgrsx.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgcsrvx.exe

(Microsoft Corporation) C:\Windows\system32\SLsvc.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgidsagent.exe

(Google Inc.) C:\Program Files\Google\Update\1.3.21.153\GoogleCrashHandler.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgwdsvc.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

( ) C:\Windows\system32\dlbucoms.exe

(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe

(Microsoft Corporation) c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe

(MyWebSearch.com) C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe

(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe

(Microsoft Corporation) C:\Windows\WindowsMobile\wmdSync.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgnsx.exe

(MyWebSearch.com) C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE

(MyWebSearch.com) C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE

(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe

() C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe

(Ask) C:\Program Files\Ask.com\Updater\Updater.exe

() C:\Program Files\AVG Secure Search\vprot.exe

(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2013\avgui.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(Plaxo, Inc.) C:\Users\Nerissa Fox\AppData\Local\Plaxo\3.34.0.3\PlaxoHelper_en.exe

(Microsoft Corporation) C:\Windows\ehome\ehtray.exe

(Google) C:\Program Files\Google\Drive\googledrivesync.exe

(Microsoft Corporation) c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

(Microsoft Corporation) c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

() C:\Program Files\StartNow Toolbar\ToolbarUpdaterService.exe

(OTi) C:\Windows\system32\UStorSrv.exe

(AVG Secure Search) C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe

(Google Inc.) C:\Users\Nerissa Fox\AppData\Local\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe

() C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\loggingserver.exe

(Conexant Systems, Inc.) C:\Windows\system32\DRIVERS\xaudio.exe

(Yahoo! Inc.) C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

() C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE

() C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe

(Nero AG) C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

(Google Inc.) C:\Users\Nerissa Fox\AppData\Local\Google\Chrome\Application\chrome.exe

(Hewlett-Packard) c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

(Google) C:\Program Files\Google\Drive\googledrivesync.exe

(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe

(Microsoft Corporation) C:\Windows\system32\wuauclt.exe

(Google Inc.) C:\Users\Nerissa Fox\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [synTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [815104 2006-11-14] (Synaptics, Inc.)

HKLM\...\Run: [QlbCtrl] - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [159744 2006-11-06] ( Hewlett-Packard Development Company, L.P.)

HKLM\...\Run: [Windows Mobile-based device management] - C:\Windows\WindowsMobile\wmdSync.exe [215552 2006-11-02] (Microsoft Corporation)

HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31072 2008-10-25] (Microsoft Corporation)

HKLM\...\Run: [HP Health Check Scheduler] - c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [75008 2008-10-09] (Hewlett-Packard)

HKLM\...\Run: [MyWebSearch Plugin] - rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL,UPF [x]

HKLM\...\Run: [My Web Search Bar Search Scope Monitor] - C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe [24688 2009-09-10] (MyWebSearch.com)

HKLM\...\Run: [MyWebSearch Email Plugin] - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe [32838 2009-09-10] (MyWebSearch.com)

HKLM\...\Run: [hpWirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [480560 2007-10-03] (Hewlett-Packard Development Company, L.P.)

HKLM\...\Run: [startNowToolbarHelper] - "C:\Program Files\StartNow Toolbar\ToolbarHelper.exe" [x]

HKLM\...\Run: [HP Software Update] - C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)

HKLM\...\Run: [] - [x]

HKLM\...\Run: [ApnUpdater] - C:\Program Files\Ask.com\Updater\Updater.exe [1564872 2012-06-06] (Ask)

HKLM\...\Run: [vProt] - C:\Program Files\AVG Secure Search\vprot.exe [2285232 2013-07-29] ()

HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM\...\Run: [TkBellExe] - C:\Program Files\Real\RealPlayer\update\realsched.exe [296096 2012-09-27] (RealNetworks, Inc.)

HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2013\avgui.exe [4411440 2013-07-01] (AVG Technologies CZ, s.r.o.)

HKLM\...\Run: [sunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKCU\...\Run: [PlaxoUpdate] - C:\Users\Nerissa Fox\AppData\Local\Plaxo\3.34.0.3\PlaxoHelper_en.exe [2074512 2012-03-21] (Plaxo, Inc.)

HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-19] (Microsoft Corporation)

HKCU\...\Run: [Google Update] - C:\Users\Nerissa Fox\AppData\Local\Google\Update\GoogleUpdate.exe [133104 2009-01-06] (Google Inc.)

HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856 2008-07-14] (Google Inc.)

HKCU\...\Run: [PlaxoSysTray] - C:\Users\Nerissa Fox\AppData\Local\Plaxo\3.34.0.3\PlaxoSysTray.exe [16272 2012-03-21] (Plaxo, Inc.)

HKCU\...\Run: [YouSendIt.exe] - C:\Program Files\YouSendIt\Express\YouSendIt.exe -ui none [x]

HKCU\...\Run: [GoogleDriveSync] - C:\Program Files\Google\Drive\googledrivesync.exe [19676256 2013-06-06] (Google)

HKCU\...\Run: [indxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [1840424 2008-06-24] (Nero AG)

HKCU\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2387968 2009-02-25] (Hewlett-Packard Company)

HKCU\...\Run: [DW6] - "C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe" [x]

HKCU\...\Run: [DW7] - "C:\Program Files\The Weather Channel\The Weather Channel App\TWCApp.exe" [x]

HKCU\...\Run: [startNow Search Protect] - C:\Program Files\StartNow Toolbar\search_protect.exe [1352048 2012-09-06] ()

HKCU\...\Run: [GoogleChromeAutoLaunch_EA34B6748793C437CD41AF98000B70F2] - C:\Users\Nerissa Fox\AppData\Local\Google\Chrome\Application\chrome.exe [846288 2013-07-24] (Google Inc.)

MountPoints2: {bcea9d67-59cf-11de-a006-001636e02bca} - uxkl0apt.bat

HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-10] (Microsoft Corporation)

HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-10] (Microsoft Corporation)

Startup: C:\Users\Nerissa Fox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote Table Of Contents.onetoc2 ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?l=dis&o=APN10703&gct=hp&apn_ptnrs=^ASF&apn_dtid=^YYYYYY^YY^US&p2=^ASF^YYYYYY^YY^US&tpid=ASI-SAT&apn_dbr=cr_24.0.1312.56

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/?fr=fp-yie9

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.yahoo.com/?fr=fp-yie9

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.sweetpacks.com/?src=10&st=12&crg=3.5000006.10045&barid={7E1A47AE-EFFA-11E2-933B-001636E02BCA}

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*http://www.yahoo.com

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*http://www.yahoo.com

HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html

HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60468

HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60468

URLSearchHook: (No Name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL (MyWebSearch.com)

SearchScopes: HKLM - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://start.sweetpacks.com/?src=6&q={searchTerms}&st=12&crg=3.5000006.10045&barid={7E1A47AE-EFFA-11E2-933B-001636E02BCA}

SearchScopes: HKLM - {56256A51-B582-467e-B8D4-7786EDA79AE0} URL = http://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=RGxdm023VRUS&fl=0&ptb=0lI8WglNW0frrIGjSoNqnA&url=http://search.mywebsearch.com/mywebsearch/dft_redir.jhtml&st=sb&searchfor={searchTerms}&si=42763

SearchScopes: HKLM - {6A263946-6A77-41FF-BB84-60B5D1E14914} URL = http://www.ask.com/web?q={searchTerms}&l=dis&o=ushpl

SearchScopes: HKLM - {93C55396-0D8E-4C41-A983-22835AF7BE18} URL = http://search.live.com/results.aspx?q={searchTerms}&entrypoint={referrer:source?}&FORM=HVNUS7

SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://start.sweetpacks.com/?src=6&q={searchTerms}&st=12&crg=3.5000006.10045&barid={7E1A47AE-EFFA-11E2-933B-001636E02BCA}

SearchScopes: HKCU - DefaultScope {56256A51-B582-467e-B8D4-7786EDA79AE0} URL = http://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=RGxdm023VRUS&fl=0&ptb=0lI8WglNW0frrIGjSoNqnA&url=http://search.mywebsearch.com/mywebsearch/dft_redir.jhtml&st=sb&searchfor={searchTerms}&si=42763

SearchScopes: HKCU - {0F68589B-6781-4A35-975D-BEC950387439} URL = http://websearch.ask.com/redirect?client=ie&tb=PSI&o=15116&src=kw&q={searchTerms}&locale=&apn_ptnrs=L6&apn_dtid=YYYYYYUXUS&apn_uid=7d904b3a-eabd-45f2-80b8-f02c9f38c74c&apn_sauid=3BFA2D7C-03AD-4272-8527-6181362D8F48

SearchScopes: HKCU - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} URL = http://www.crawler.com/search/dispatcher.aspx?tp=bs&qkw={searchTerms}&tbid=60468

SearchScopes: HKCU - {56256A51-B582-467e-B8D4-7786EDA79AE0} URL = http://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=RGxdm023VRUS&fl=0&ptb=0lI8WglNW0frrIGjSoNqnA&url=http://search.mywebsearch.com/mywebsearch/dft_redir.jhtml&st=sb&searchfor={searchTerms}&si=42763

SearchScopes: HKCU - {6294E6E6-04B2-4E27-8CD6-65433324A509} URL = http://ws.infospace.com/playsushi_tbar/ws/redir?_iceUrl=true& user_id=%userid&tool_id=60231&qkw={searchTerms}

SearchScopes: HKCU - {6A263946-6A77-41FF-BB84-60B5D1E14914} URL = http://www.ask.com/web?q={searchTerms}&l=dis&o=ushpl

SearchScopes: HKCU - {8BBA2394-9677-42F8-9DCC-F6B2A3504311} URL = http://www.flickr.com/search/?q={searchTerms}

SearchScopes: HKCU - {93C55396-0D8E-4C41-A983-22835AF7BE18} URL = http://search.live.com/results.aspx?q={searchTerms}&entrypoint={referrer:source?}&FORM=HVNUS7

SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={37BA374C-A140-44EB-BC6E-8751C2FB9FB3}&mid=626021200fcc47d6b4f4d15f7004c239-468d96e1cdef74691a11d8cb5d424d5dc7591a60〈=en&ds=AVG&pr=fr&d=2012-10-15 13:17:03&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}

SearchScopes: HKCU - {ABD93EAF-D775-BC54-E63B-2804F22FD156} URL = http://search.startnow.com/s/?q={searchTerms}&src=defsearch&provider=&provider_name=startnow&provider_code=&partner_id=999&product_id=10&affiliate_id=&channel=&toolbar_id=&toolbar_version=&install_country=&install_date=20130308&user_guid=4B0B74820C33424C96460834FE46F6D5&machine_id=1093c67c477559e694c6daea3ebd8726&browser=IE&os=win&os_version=6.0-x86-SP2&iesrc={referrer:source}

SearchScopes: HKCU - {B0D577F3-B056-4564-8EE6-2CDD68575B96} URL = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=chr-yie9

SearchScopes: HKCU - {C0CF4946-3B2C-4710-B67E-E992C2E9967A} URL = http://www.godaddy.com/gdshop/registrar/search.asp?isc=iesearch7&checkavail=1&domaintocheck={searchTerms}

SearchScopes: HKCU - {CE2E36EF-A2C6-4E33-8C7C-4F902720C750} URL = http://www.bing.com/search?FORM=BSRTDF&PC=BBSR&q={searchTerms}&src=IE-SearchBox

SearchScopes: HKCU - {D92FE817-98C6-42F1-819E-200E0AD89E39} URL = http://delicious.com/search?p={searchTerms}

SearchScopes: HKCU - {E163AE6E-254C-5FF4-BE33-4CBD31D63F5C} URL = http://www.bing.com/search?q={searchTerms}&pc=Z125&form=ZGAIDF&install_date=20110913&iesrc={referrer:source}

SearchScopes: HKCU - {E98B545E-2F51-450C-8796-84EF316F9CA5} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=hp-pvnb

SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://start.sweetpacks.com?src=6&q={searchTerms}&barid={7E1A47AE-EFFA-11E2-933B-001636E02BCA}&crg=3.5000006.10045&st=23

BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL (MyWebSearch.com)

BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn7\yt.dll (Yahoo! Inc.)

BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (MyWebSearch.com)

BHO: No Name - {2BE2A0D3-38C9-4D5A-81A4-6EC75AEEDC30} - No File

BHO: No Name - {2DAF6EF2-10C0-4F08-B074-BD67B1A0F724} - No File

BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)

BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll No File

BHO: SelectionLinks - {6B5B6E59-9610-49BF-B848-737E318DF26E} - C:\Program Files\OApps\SelectionLinks.dll (SelectionLinks)

BHO: StartNow Toolbar Helper - {6E13D095-45C3-4271-9475-F3B48227DD9F} - C:\Program Files\StartNow Toolbar\Toolbar32.dll ()

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: No Name - {8B57CAC2-640F-4FBC-B8E4-589DEBD45F18} - No File

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\15.4.0.5\AVG Secure Search_toolbar.dll (AVG Secure Search)

BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

BHO: ArcadeCandy Games - {AB6BD08C-DB6B-4F02-8A22-4BD343E990FF} - C:\Users\Nerissa Fox\AppData\Local\ArcadeCandy\candyEX.dll (ArcadeCandy LLC)

BHO: Arcadesafari BHO - {adff4c9a-4f49-4a1f-8885-360e107b7938} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)

BHO: Dogpile Bundle Toolbar BHO - {BFE4B5CB-63F7-4A51-9266-6167655D5B4F} - C:\Program Files\Dogpile Bundle Toolbar\Toolbar.dll ()

BHO: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)

BHO: Act.UI.InternetExplorer.Plugins.AttachFile.CAttachFile - {D5233FCD-D258-4903-89B8-FB1568E7413D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)

BHO: No Name - {DB058A19-2CB5-4212-BAFF-28C4EB1CDB22} - No File

BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO: No Name - {E180F496-8A4B-44E2-9FE0-0364E345DB7F} - No File

BHO: No Name - {E73A2FFC-52CD-4298-B3D0-98B4A1D65C94} - No File

BHO: No Name - {ECF39770-ABCF-4A51-BF9A-8E995DCD54F3} - No File

BHO: No Name - {F853754E-EB1B-440E-8EF5-44E5C3E68797} - No File

BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn4\YTSingleInstance.dll (Yahoo! Inc)

Toolbar: HKLM - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn7\yt.dll (Yahoo! Inc.)

Toolbar: HKLM - My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (MyWebSearch.com)

Toolbar: HKLM - No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File

Toolbar: HKLM - StartNow Toolbar - {5911488E-9D1E-40ec-8CBB-06B231CC153F} - C:\Program Files\StartNow Toolbar\Toolbar32.dll ()

Toolbar: HKLM - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)

Toolbar: HKLM - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\15.4.0.5\AVG Secure Search_toolbar.dll (AVG Secure Search)

Toolbar: HKLM - Dogpile Bundle Toolbar - {C80BDEB2-8735-44C6-BD55-A1CCD555667A} - C:\Program Files\Dogpile Bundle Toolbar\Toolbar.dll ()

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKCU -&Links - {F2CF5485-4E02-4F68-819C-B92DE9277049} - C:\Windows\system32\ieframe.dll (Microsoft Corporation)

Toolbar: HKCU -Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKCU -No Name - {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - No File

Toolbar: HKCU -No Name - {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File

Toolbar: HKCU -My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (MyWebSearch.com)

Toolbar: HKCU -No Name - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No File

Toolbar: HKCU -No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File

Toolbar: HKCU -Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)

Toolbar: HKCU -Dogpile Bundle Toolbar - {C80BDEB2-8735-44C6-BD55-A1CCD555667A} - C:\Program Files\Dogpile Bundle Toolbar\Toolbar.dll ()

Toolbar: HKCU -No Name - {4153492D-5341-5400-76A7-7A786E7484D7} - No File

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab

DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab

DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)

Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll No File

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\15.4.0\ViProtocol.dll (AVG Secure Search)

ShellExecuteHooks: - {E180F496-8A4B-44E2-9FE0-0364E345DB7F} - No File [ ]

Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [152864] (Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome:

=======

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Shockwave Flash) - C:\Users\Nerissa Fox\AppData\Local\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Users\Nerissa Fox\AppData\Local\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Users\Nerissa Fox\AppData\Local\Google\Chrome\Application\28.0.1500.95\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)

CHR Plugin: (PalmSource Package Installer) - C:\PROGRA~1\Palm\PACKAG~1\NPInstal.dll No File

CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\13.2.0\\npsitesafety.dll (AVG Technologies)

CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Updater) - C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)

CHR Plugin: (Picasa) - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File

CHR Plugin: (Java Platform SE 7 U9) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (RealNetworks Rhapsody Player Engine) - C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll (RealNetworks, Inc.)

CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (RealNetworks Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)

CHR Plugin: (RealPlayer HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)

CHR Plugin: (BrowserPlus (from Yahoo!) v2.9.8) - C:\Users\Nerissa Fox\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll (Yahoo! Inc.)

CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()

CHR Plugin: (Java Deployment Toolkit 7.0.90.5) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)

CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

CHR Plugin: (RealPlayer G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

CHR Plugin: (RealJukebox NS Plugin) - c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)

CHR Plugin: (RealPlayer Download Plugin) - c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)

CHR Extension: (Google Drive) - C:\Users\NERISS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: () - C:\Users\NERISS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmeemomfelpigklppifflheakfpkfjjg\background.html

CHR Extension: (StartNow) - C:\Users\NERISS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\incfcgceegpikennjoplhfghaaikdgei\2.5.0_0

CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\NERISS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0

CHR Extension: (Select Links App) - C:\Users\NERISS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccomdojgkmckbmecenojfkiedfkfdob\4.3_0

CHR Extension: (AVG Secure Search) - C:\Users\NERISS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\15.4.0.5_0

CHR Extension: (Ziftr Alerts - formerly FreePriceAlerts.com) - C:\Users\NERISS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngoiabglmnijabkfknliolcbjfcmbmdl\3.1_0

CHR Extension: (ArcadeCandy Games) - C:\Users\NERISS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnfegheljpcijmdgonkecjpcaopjlpac\1.30.455_0

CHR Extension: (Gmail) - C:\Users\NERISS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

CHR HKLM\...\Chrome\Extension: [aaaaonkdgfnbiijefodhhpdilffkbbmg] - C:\Users\Nerissa Fox\AppData\Local\APN\GoogleCRXs\aaaaonkdgfnbiijefodhhpdilffkbbmg_7.15.4.0.crx

CHR HKLM\...\Chrome\Extension: [eajkbpchnjjpgpgpmmpadhknfkfcodnh] - C:\Program Files\GamingWonderland Chrome Extension\bar\GamingWonderland@mindspark.com

CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx

CHR HKLM\...\Chrome\Extension: [lccomdojgkmckbmecenojfkiedfkfdob] - C:\Program Files\OApps\chrome-sl.crx

CHR HKLM\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG Secure Search\ChromeExt\15.4.0.5\avg.crx

CHR HKLM\...\Chrome\Extension: [ngoiabglmnijabkfknliolcbjfcmbmdl] - C:\ProgramData\FreePriceAlerts\Chrome\FreePriceAlerts.crx

CHR StartMenuInternet: Google Chrome - C:\Users\Nerissa Fox\AppData\Local\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

S3 AddFiltr; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe [126976 2006-06-26] (Hewlett-Packard Development Company, L.P.)

R2 AVGIDSAgent; C:\Program Files\AVG\AVG2013\avgidsagent.exe [4939312 2013-07-04] (AVG Technologies CZ, s.r.o.)

R2 avgwd; C:\Program Files\AVG\AVG2013\avgwdsvc.exe [283136 2013-07-23] (AVG Technologies CZ, s.r.o.)

R2 dlbu_device; C:\Windows\system32\dlbucoms.exe [538096 2007-02-28] ( )

R2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208 2008-10-09] (Hewlett-Packard)

R2 MSSQL$ACT7; c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)

S4 MSSQLServerADHelper; c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)

R2 MyWebSearchService; C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe [28762 2009-09-10] (MyWebSearch.com)

R2 QPCapSvc; C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe [271760 2007-12-19] ()

R2 QPSched; C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe [112016 2007-12-19] ()

R2 Updater Service for StartNow Toolbar; C:\Program Files\StartNow Toolbar\ToolbarUpdaterService.exe [265952 2012-06-22] ()

R2 UStorage Server Service; C:\Windows\system32\UStorSrv.exe [139264 2004-12-01] (OTi)

R2 vToolbarUpdater15.4.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe [1616048 2013-07-29] (AVG Secure Search)

S2 CLTNetCnService; "c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon [x]

==================== Drivers (Whitelisted) ====================

R0 AFS; C:\Windows\System32\Drivers\AFS.sys [79052 2007-05-31] (Oak Technology Inc.)

R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [208184 2013-07-20] (AVG Technologies CZ, s.r.o.)

R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [60216 2013-07-20] (AVG Technologies CZ, s.r.o.)

R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22328 2013-03-01] (AVG Technologies CZ, s.r.o.)

R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [171320 2013-07-20] (AVG Technologies CZ, s.r.o.)

R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [246072 2013-07-20] (AVG Technologies CZ, s.r.o.)

R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [96568 2013-07-01] (AVG Technologies CZ, s.r.o.)

R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [39224 2013-07-10] (AVG Technologies CZ, s.r.o.)

R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [182072 2013-03-21] (AVG Technologies CZ, s.r.o.)

R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [37664 2013-07-29] (AVG Technologies)

S3 Dot4Scan; C:\Windows\System32\DRIVERS\Dot4Scan.sys [10752 2008-01-18] (Microsoft Corporation)

R1 eabfiltr; C:\Windows\System32\DRIVERS\eabfiltr.sys [8192 2006-06-28] (Hewlett-Packard Development Company, L.P.)

S3 HdAudAddService; C:\Windows\System32\drivers\CHDART.sys [148992 2006-12-12] (Conexant Systems Inc.)

S3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [14736 2009-05-09] (Microsoft Corporation)

S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [x]

S3 catchme; \??\C:\Users\NERISS~1\AppData\Local\Temp\catchme.sys [x]

S3 IpInIp; system32\DRIVERS\ipinip.sys [x]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

S3 PalmUSBD; system32\drivers\PalmUSBD.sys [x]

S1 SABKUTIL; \??\C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\SABKUTIL.sys [x]

S3 SABProcEnum; \??\C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\SABProcEnum.sys [x]

S3 UIUSys; No ImagePath

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-08-03 12:27 - 2013-08-03 12:27 - 00000000 ___DC C:\FRST

2013-08-03 12:23 - 2013-08-03 12:23 - 01222124 _____ (Farbar) C:\Users\Nerissa Fox\Downloads\FRST.exe

2013-08-02 15:16 - 2013-08-02 15:16 - 00000906 _____ C:\Users\Nerissa Fox\Desktop\Continue Download Helper Installation.lnk

2013-07-24 21:16 - 2013-07-26 13:12 - 00000346 _____ C:\Windows\Tasks\HPCeeScheduleForNerissa Fox.job

2013-07-20 01:51 - 2013-07-20 01:51 - 00246072 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avglogx.sys

2013-07-20 01:50 - 2013-07-20 01:50 - 00208184 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdriverx.sys

2013-07-20 01:50 - 2013-07-20 01:50 - 00171320 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgldx86.sys

2013-07-20 01:50 - 2013-07-20 01:50 - 00060216 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidshx.sys

2013-07-19 13:36 - 2013-07-19 13:35 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2013-07-19 13:36 - 2013-07-19 13:35 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2013-07-19 13:36 - 2013-07-19 13:35 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2013-07-18 16:08 - 2013-07-18 16:08 - 00000094 _____ C:\Windows\family.ini

2013-07-18 16:08 - 2013-07-18 16:08 - 00000000 ____D C:\Users\Nerissa Fox\AppData\Roaming\HotSync

2013-07-18 15:41 - 2013-07-18 15:41 - 00000000 ____D C:\Users\Nerissa Fox\AppData\Roaming\SuperAdBlocker.com

2013-07-18 15:37 - 2011-05-13 16:17 - 00632656 _____ (Microsoft Corporation) C:\Windows\system32\msvcr80.dll

2013-07-18 15:37 - 2011-05-13 16:17 - 00554832 _____ (Microsoft Corporation) C:\Windows\system32\msvcp80.dll

2013-07-18 15:37 - 2011-05-13 16:17 - 00479232 _____ (Microsoft Corporation) C:\Windows\system32\msvcm80.dll

2013-07-18 15:37 - 2011-05-13 07:59 - 00001870 _____ C:\Windows\system32\Microsoft.VC80.CRT.manifest

2013-07-16 18:56 - 2013-07-16 18:56 - 00000871 _____ C:\Users\Nerissa Fox\Desktop\Picture Resize.lnk

2013-07-16 18:56 - 2013-07-16 18:56 - 00000000 ____D C:\Users\Nerissa Fox\AppData\Roaming\Bidgood Svcs

2013-07-16 18:56 - 2013-07-16 18:56 - 00000000 ____D C:\Program Files\Picture Resize

2013-07-16 18:56 - 2004-03-09 00:00 - 00212240 _____ (Microsoft Corporation) C:\Windows\system32\richtx32.ocx

2013-07-16 18:56 - 1998-06-24 03:00 - 00137000 _____ (Microsoft Corporation) C:\Windows\system32\msmapi32.ocx

2013-07-10 01:32 - 2013-07-10 01:32 - 00039224 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgrkx86.sys

==================== One Month Modified Files and Folders =======

2013-08-03 12:27 - 2013-08-03 12:27 - 00000000 ___DC C:\FRST

2013-08-03 12:23 - 2013-08-03 12:23 - 01222124 _____ (Farbar) C:\Users\Nerissa Fox\Downloads\FRST.exe

2013-08-03 12:17 - 2012-03-29 10:51 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-08-03 12:14 - 2007-03-17 13:25 - 01573760 _____ C:\Windows\WindowsUpdate.log

2013-08-03 12:10 - 2011-01-06 09:26 - 00000000 ____D C:\ProgramData\MFAData

2013-08-03 12:08 - 2012-04-26 08:00 - 00000000 ___SD C:\Users\Nerissa Fox\Google Drive

2013-08-03 12:05 - 2007-04-05 17:13 - 00000000 ____D C:\Users\NERISS~1\AppData\Local\Plaxo

2013-08-03 12:03 - 2013-06-07 13:57 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job

2013-08-03 12:03 - 2013-06-02 18:43 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job

2013-08-03 12:03 - 2010-01-29 12:08 - 00000882 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-08-03 12:03 - 2006-11-02 06:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-08-03 12:03 - 2006-11-02 05:47 - 00003296 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2013-08-03 12:03 - 2006-11-02 05:47 - 00003296 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2013-08-02 22:54 - 2006-12-17 21:05 - 00000012 _____ C:\Windows\bthservsdp.dat

2013-08-02 22:54 - 2006-11-02 06:01 - 00032570 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-08-02 22:25 - 2012-12-08 22:28 - 00000294 _____ C:\Windows\Tasks\CandyUpdater.job

2013-08-02 21:57 - 2010-01-29 12:08 - 00000886 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-08-02 21:57 - 2009-07-01 01:02 - 00000932 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3644431488-1808320650-4190770662-1000UA.job

2013-08-02 20:49 - 2013-01-30 21:08 - 00000500 _____ C:\Windows\Tasks\Arcadesafari.job

2013-08-02 15:16 - 2013-08-02 15:16 - 00000906 _____ C:\Users\Nerissa Fox\Desktop\Continue Download Helper Installation.lnk

2013-08-02 14:59 - 2011-01-04 10:35 - 00000820 _____ C:\Windows\Tasks\Google Software Updater.job

2013-08-02 13:45 - 2007-03-22 16:22 - 00003766 ___SH C:\Windows\system32\KGyGaAvL.sys

2013-08-02 12:57 - 2009-07-01 01:02 - 00000880 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3644431488-1808320650-4190770662-1000Core.job

2013-08-01 21:40 - 2009-01-06 11:53 - 00002072 _____ C:\Users\Nerissa Fox\Desktop\Google Chrome.lnk

2013-08-01 14:04 - 2007-03-21 17:17 - 00002627 _____ C:\Users\Nerissa Fox\Desktop\Microsoft Office Word 2007.lnk

2013-07-31 19:52 - 2009-01-13 13:03 - 00000052 _____ C:\Windows\system32\DOErrors.log

2013-07-31 15:05 - 2011-11-17 21:19 - 00002555 _____ C:\Users\Nerissa Fox\Desktop\Microsoft Office Publisher.lnk

2013-07-30 12:48 - 2012-10-15 13:17 - 00000798 _____ C:\Users\Public\Desktop\AVG 2013.lnk

2013-07-29 12:35 - 2011-11-09 11:25 - 00000000 ____D C:\Windows\system32\cache

2013-07-29 12:34 - 2012-10-15 13:16 - 00000000 ____D C:\Program Files\AVG Secure Search

2013-07-29 12:34 - 2012-07-21 10:19 - 00037664 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx86.sys

2013-07-26 13:12 - 2013-07-24 21:16 - 00000346 _____ C:\Windows\Tasks\HPCeeScheduleForNerissa Fox.job

2013-07-24 21:46 - 2007-03-17 21:39 - 00000000 ____D C:\Users\Nerissa Fox

2013-07-20 01:51 - 2013-07-20 01:51 - 00246072 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avglogx.sys

2013-07-20 01:50 - 2013-07-20 01:50 - 00208184 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdriverx.sys

2013-07-20 01:50 - 2013-07-20 01:50 - 00171320 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgldx86.sys

2013-07-20 01:50 - 2013-07-20 01:50 - 00060216 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidshx.sys

2013-07-19 14:19 - 2007-04-02 05:53 - 00000000 ____D C:\Users\NERISS~1\AppData\Local\Google

2013-07-19 13:35 - 2013-07-19 13:36 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2013-07-19 13:35 - 2013-07-19 13:36 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2013-07-19 13:35 - 2013-07-19 13:36 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2013-07-19 13:35 - 2012-06-27 11:36 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npdeployJava1.dll

2013-07-19 13:35 - 2010-04-16 11:48 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll

2013-07-19 13:35 - 2006-12-17 22:26 - 00000000 ____D C:\Program Files\Java

2013-07-18 16:10 - 2008-11-21 15:42 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard

2013-07-18 16:08 - 2013-07-18 16:08 - 00000094 _____ C:\Windows\family.ini

2013-07-18 16:08 - 2013-07-18 16:08 - 00000000 ____D C:\Users\Nerissa Fox\AppData\Roaming\HotSync

2013-07-18 15:41 - 2013-07-18 15:41 - 00000000 ____D C:\Users\Nerissa Fox\AppData\Roaming\SuperAdBlocker.com

2013-07-18 15:33 - 2006-11-02 04:18 - 00000000 ____D C:\Windows\Resources

2013-07-16 18:56 - 2013-07-16 18:56 - 00000871 _____ C:\Users\Nerissa Fox\Desktop\Picture Resize.lnk

2013-07-16 18:56 - 2013-07-16 18:56 - 00000000 ____D C:\Users\Nerissa Fox\AppData\Roaming\Bidgood Svcs

2013-07-16 18:56 - 2013-07-16 18:56 - 00000000 ____D C:\Program Files\Picture Resize

2013-07-11 16:32 - 2007-03-21 17:17 - 00002585 _____ C:\Users\Nerissa Fox\Desktop\Microsoft Office Excel 2007.lnk

2013-07-10 01:32 - 2013-07-10 01:32 - 00039224 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgrkx86.sys

2013-07-09 13:42 - 2012-07-19 20:19 - 00000000 ____D C:\Users\NERISS~1\AppData\Local\ArcadeCandy

2013-07-04 10:00 - 2007-09-19 20:22 - 00000000 ____D C:\Users\Nerissa Fox\Documents\Personal

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2013-08-03 12:16

==================== End Of Log ============================

cushdaddy · August 3, 2013

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 01-08-2013 01

Ran by Nerissa Fox at 2013-08-03 12:33:51

Running from C:\Users\Nerissa Fox\Downloads

Boot Mode: Normal

==========================================================

==================== Installed Programs =======================

Update for Microsoft Office 2007 (KB2508958)

32 Bit HP CIO Components Installer (Version: 7.1.8)

ACT! (Version: 9.1.0.0000)

ACT! by Sage (Version: 9.1.0.0000)

Activation Assistant for the 2007 Microsoft Office suites

Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0)

ActiveCheck component for HP Active Support Library (Version: 3.0.0.2)

Adobe AIR (Version: 2.0.3.13070)

Adobe Flash Player 10 Plugin (Version: 10.0.32.18)

Adobe Flash Player 11 ActiveX (Version: 11.7.700.224)

Adobe Reader X (10.1.7) (Version: 10.1.7)

Apple Application Support (Version: 1.5.1)

Apple Mobile Device Support (Version: 3.4.0.25)

Apple Software Update (Version: 2.1.3.127)

ArcadeCandy (HKCU Version: ac 1.24.366)

Arcadesafari

Ask Toolbar (Version: 1.15.4.0)

Ask Toolbar Updater (HKCU Version: 1.2.2.23821)

ASL_HS_Installer32 (Version: 1.0.9)

Avery Template (Version: 2.0.0.0)

Avery Wizard 4.0 (Version: 4.0.103)

AVG 2013 (Version: 13.0.3209)

AVG 2013 (Version: 13.0.3392)

AVG 2013 (Version: 2013.0.3392)

AVG Security Toolbar (Version: 15.4.0.5)

Azureus Vuze

Bejeweled 2 Deluxe (remove only)

Bejeweled 2 Deluxe 1.1

Bejeweled 3

Bonjour (Version: 2.0.5.0)

Bookworm Adventures Deluxe 1.0

Bricks Of Egypt (remove only)

Broadcom 802.11 Wireless LAN Adapter (Version: 4.102.15.61)

Byki (Version: 4.0)

Byki Express

Conexant HD Audio

Coupon Printer for Windows (Version: 4.0)

Dogpile Bundle Toolbar (Version: 1.514)

Dropbox (HKCU Version: 1.2.49)

ebgcInfra (Version: 1.1.0)

ebgcRes (Version: 1.0.0)

ebgcSDK (Version: 1.0.0)

Free Picture Resize Starter 4.5 (Version: 5.5.18)

FreePriceAlerts 2.3.5 (Version: 2.3.5)

GamingWonderland Toolbar Chrome Extension

GIMP 2.6.7

Google Chrome (HKCU Version: 28.0.1500.95)

Google Drive (Version: 1.10.4769.632)

Google Earth (Version: 4.3.7284.3916)

Google Earth Plug-in (Version: 5.2.0.5932)

Google Earth Plug-in (Version: 7.0.3.8542)

Google Toolbar for Internet Explorer (Version: 1.0.0)

Google Toolbar for Internet Explorer (Version: 7.5.4209.2358)

Google Update Helper (Version: 1.3.21.153)

Google Updater (Version: 2.4.2432.1652)

GoToMeeting 5.1.0.880 (HKCU Version: 5.1.0.880)

GoView (Version: 1.0.71)

HDAUDIO Soft Data Fax Modem with SmartCP

HP Active Support Library (Version: 3.1.9.1)

HP Active Support Library 32 bit components (Version: 2.1.0)

HP Connections (remove only)

HP Customer Experience Enhancements (Version: 1.00.0000)

HP Easy Setup - Core (Version: 1.00.0000)

HP Easy Setup - Frontend (Version: 5.00.0000)

HP Help and Support (Version: 1.0.0)

HP Quick Launch Buttons 6.10 B9 (Version: 6.10 B9)

HP QuickPlay 3.6

HP Total Care Advisor (Version: 1.0.94)

HP Update (Version: 5.003.001.001)

HP User Guide 0048 (Version: 1.02.0001)

HP Wireless Assistant (Version: 3.00 H3)

HPAsset component for HP Active Support Library (Version: 3.0.2.2)

HPNetworkAssistant (Version: 1.1.70)

Image Resizer for Windows (Version: 3.0.4442.6002)

Imation Disk Manager II Service

Intel® Graphics Media Accelerator Driver

iTunes (Version: 10.2.2.14)

Java 7 Update 25 (Version: 7.0.250)

Java Auto Updater (Version: 2.1.9.5)

Java 6 Update 3 (Version: 1.6.0.30)

Java 6 Update 33 (Version: 6.0.330)

Java 6 Update 5 (Version: 1.6.0.50)

Java 6 Update 7 (Version: 1.6.0.70)

Java SE Runtime Environment 6 (Version: 1.6.0.0)

Jewel Quest Mysteries - Curse of the Emerald Tear (remove only)

LightScribe System Software (Version: 1.18.2.1)

Microsoft .NET Framework 1.1 (Version: 1.1.4322)

Microsoft .NET Framework 1.1 Security Update (KB953297)

Microsoft .NET Framework 3.5 SP1

Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Extended (Version: 4.0.30319)

Microsoft Office 2007 Service Pack 2 (SP2)

Microsoft Office Access MUI (English) 2007 (Version: 12.0.6425.1000)

Microsoft Office Access Setup Metadata MUI (English) 2007 (Version: 12.0.6425.1000)

Microsoft Office Enterprise 2007 (Version: 12.0.6425.1000)

Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6425.1000)

Microsoft Office Groove MUI (English) 2007 (Version: 12.0.6425.1000)

Microsoft Office Groove Setup Metadata MUI (English) 2007 (Version: 12.0.6425.1000)

Microsoft Office InfoPath MUI (English) 2007 (Version: 12.0.6425.1000)

Microsoft Office Live Meeting 2007 (Version: 8.0.6362.128)

Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6425.1000)

Microsoft Office Outlook MUI (English) 2007 (Version: 12.0.6425.1000)

Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6425.1000)

Microsoft Office Proof (English) 2007 (Version: 12.0.6425.1000)

Microsoft Office Proof (French) 2007 (Version: 12.0.6425.1000)

Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6425.1000)

Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)

Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

Microsoft Office Publisher MUI (English) 2007 (Version: 12.0.6425.1000)

Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6425.1000)

Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6425.1000)

Microsoft Office Word MUI (English) 2007 (Version: 12.0.6425.1000)

Microsoft Silverlight (Version: 5.1.10411.0)

Microsoft SQL Server 2005

Microsoft SQL Server 2005 Express Edition (ACT7) (Version: 9.4.5000.00)

Microsoft SQL Server Native Client (Version: 9.00.5000.00)

Microsoft SQL Server Setup Support Files (English) (Version: 9.00.5000.00)

Microsoft SQL Server VSS Writer (Version: 9.00.5000.00)

Microsoft UI Engine (Version: 4.0.0318.1)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Web Publishing Wizard 1.52

Move Networks Media Player for Internet Explorer

MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)

MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0)

MSXML 4.0 SP2 (KB941833) (Version: 4.20.9849.0)

MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)

muvee autoProducer 5.0 (Version: 5.00.050)

My HP Games (Version: HPLAP0304)

My Web Search (Retrogamer)

Nero 8 Essentials (Version: 8.3.569)

neroxml (Version: 1.0.0)

Next Generation Visualisations (Version: 1.0.0)

OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0)

Palm Outlook Conduits Updater (Version: 1.00.0000)

Picasa 3 (Version: 3.9)

Plaxo Toolbar for Windows

QuickPlay SlingPlayer 0.4.6 (Version: 0.4.6)

QuickTime (Version: 7.69.80.9)

RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0)

RealPlayer (Version: 15.0.6)

RealUpgrade 1.1 (Version: 1.1.0)

Rhapsody Player Engine (Version: 1.1.0)

Roxio Creator Audio (Version: 3.3.0)

Roxio Creator Basic v9 (Version: 3.3.0)

Roxio Creator Copy (Version: 3.3.0)

Roxio Creator Data (Version: 3.3.0)

Roxio Creator EasyArchive (Version: 3.3.0)

Roxio Creator Tools (Version: 3.3.0)

Roxio Express Labeler 3 (Version: 2.1.0)

Roxio MyDVD Basic v9 (Version: 9.0.114)

Scrabble (remove only)

SelectionLinks (Version: 1.0)

SkillRide Game Client (Version: 1.2.26)

Skype™ 3.5 (Version: 3.5.214)

Sonic Activation Module (Version: 1.0)

Sprint Digital Lounge

StartNow Toolbar (Version: 2.5.0)

Synaptics Pointing Device Driver (Version: 9.0.1.5)

The Weather Channel App

Times Reader (Version: 2.054)

Update for 2007 Microsoft Office System (KB967642)

Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)

Update for Microsoft Office 2007 Help for Common Features (KB963673)

Update for Microsoft Office 2007 System (KB2539530)

Update for Microsoft Office Access 2007 Help (KB963663)

Update for Microsoft Office Excel 2007 Help (KB963678)

Update for Microsoft Office Infopath 2007 Help (KB963662)

Update for Microsoft Office OneNote 2007 (KB980729)

Update for Microsoft Office OneNote 2007 Help (KB963670)

Update for Microsoft Office Outlook 2007 (KB2583910)

Update for Microsoft Office Outlook 2007 Help (KB963677)

Update for Microsoft Office Powerpoint 2007 Help (KB963669)

Update for Microsoft Office Publisher 2007 Help (KB963667)

Update for Microsoft Office Script Editor Help (KB963671)

Update for Microsoft Office Word 2007 Help (KB963665)

Update for Outlook 2007 Junk Email Filter (KB2596560)

WebEx

Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)

Windows Media Player Firefox Plugin (Version: 1.0.0.8)

WinRAR archiver

WriteExpress 4,001 Business, Sales & Personal Letters (Version: 6.3)

Xvid 1.2.2 final uninstall (Version: 1.2)

Yahoo! BrowserPlus 2.9.8

Yahoo! Install Manager

Yahoo! Search Protection

Yahoo! Software Update

Yahoo! Toolbar

Zuma Deluxe 1.0

Zuma's Revenge!

==================== Restore Points =========================

01-08-2013 00:26:19 Scheduled Checkpoint

01-08-2013 21:43:14 Scheduled Checkpoint

==================== Hosts content: ==========================

2006-11-02 03:23 - 2006-09-18 14:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

::1 localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {107FEA1A-8285-4BDE-8981-73AC78644511} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI

Task: {130D7BF8-D33F-4A95-AB6A-54ADF2F2F979} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3644431488-1808320650-4190770662-1000Core => C:\Users\Nerissa Fox\AppData\Local\Google\Update\GoogleUpdate.exe [2009-01-06] (Google Inc.)

Task: {196DF905-5D03-4153-A369-81BC4AD0CA08} - System32\Tasks\User_Feed_Synchronization-{F6C9AEA3-719C-491D-980D-841B4110F875} => C:\Windows\system32\msfeedssync.exe [2011-04-03] (Microsoft Corporation)

Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM

Task: {309654BD-93F1-4AC0-BE6F-E0C08AEDB06E} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2006-11-02] (Microsoft Corporation)

Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages

Task: {3C1D028D-106F-464B-9DFC-702EA2DED2C7} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3644431488-1808320650-4190770662-1000UA => C:\Users\Nerissa Fox\AppData\Local\Google\Update\GoogleUpdate.exe [2009-01-06] (Google Inc.)

Task: {3E77BD0B-096F-4821-8D85-11931C520FDD} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3644431488-1808320650-4190770662-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-07-27] (RealNetworks, Inc.)

Task: {413A0041-1C70-4B4B-885F-03F05E68D9A5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-29] (Google Inc.)

Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-19] (Microsoft Corporation)

Task: {4EBD0E8F-BC11-48D9-95DC-F71899430C86} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-19] (Microsoft Corporation)

Task: {54448215-5EF4-4AEE-9941-069BEBC6CA9C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {658A1CE7-DF7E-4E1C-B7A8-7651AC39C71F} - System32\Tasks\HPCeeScheduleForNerissa Fox => C:\Program Files\hewlett-packard\sdp\ceement\HPCEE.exe [2006-10-30] (Hewlett-Packard)

Task: {67B28DAF-A881-4E79-94F0-E59CDA48E40A} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv => C:\Windows\TEMP\{31577E00-60B6-4877-98B4-C346BF6DEE0E}.exe No File

Task: {7BDE5A26-C42C-437F-A836-6F378AA72E73} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-11] (Adobe Systems Incorporated)

Task: {8C0A61D9-4C32-42EB-928A-F9FA8E8839A9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-29] (Google Inc.)

Task: {8E8C8FBC-4D45-4F94-85E0-9B7A6F234E90} - System32\Tasks\Microsoft\Windows\Defrag\ManualDefrag => C:\Windows\system32\defrag.exe [2008-01-19] (Microsoft Corp.)

Task: {98374749-F3F0-4BDE-AA0F-E287AA72E807} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{F67E94B6-283A-4239-B0AD-9DCD3F557C46}.exe No File

Task: {A61555D3-7840-45C1-A5A9-0D49851DE37A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-19] (Microsoft Corporation)

Task: {B1425201-75A1-4B06-AA41-75790834E9BD} - System32\Tasks\CandyUpdater => C:\Users\Nerissa Fox\AppData\Local\ArcadeCandy\candyUpdater.exe [2013-07-09] ()

Task: {C3D86492-D2AE-4D22-940D-D69F47BD9BB0} - System32\Tasks\HP Health Check => c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-10-09] (Hewlett-Packard)

Task: {CAFA2A27-E2D8-463D-88B0-2F39FBA03902} - System32\Tasks\Arcadesafari => C:\Users\Nerissa Fox\AppData\Local\Arcadesafari\ArcadesafariUpdater.exe No File

Task: {D3751BDF-1D1E-4BBB-827B-7D88980DF822} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3644431488-1808320650-4190770662-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-07-27] (RealNetworks, Inc.)

Task: {DE679406-D8F2-4756-B2E2-A78B700D38F9} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\System32\sdclt.exe [2010-12-14] (Microsoft Corporation)

Task: {E1B35E0C-5826-4F4A-9234-91939C7038D2} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe [2012-06-06] ()

Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-05] ()

Task: {F421395F-7FF9-4339-8EA1-63DA2603B435} - System32\Tasks\Google Software Updater => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-10] (Google)

Task: {F95FBD79-7993-46C1-BCFD-5F37E7B19BA8} - System32\Tasks\Microsoft\Windows\WindowsBackup\CheckFull => C:\Windows\System32\sdclt.exe [2010-12-14] (Microsoft Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\Arcadesafari.job => C:\Users\Nerissa Fox\AppData\Local\Arcadesafari\ArcadesafariUpdater.exe

Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job => C:\Windows\TEMP\{31577E00-60B6-4877-98B4-C346BF6DEE0E}.exe

Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{F67E94B6-283A-4239-B0AD-9DCD3F557C46}.exe

Task: C:\Windows\Tasks\CandyUpdater.job => C:\Users\Nerissa Fox\AppData\Local\ArcadeCandy\candyUpdater.exe

Task: C:\Windows\Tasks\Google Software Updater.job => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3644431488-1808320650-4190770662-1000Core.job => C:\Users\Nerissa Fox\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3644431488-1808320650-4190770662-1000UA.job => C:\Users\Nerissa Fox\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\HPCeeScheduleForNerissa Fox.job => C:\Program Files\hewlett-packard\sdp\ceement\HPCEE.exe

==================== Faulty Device Manager Devices =============

Name: Optiarc DVD RW AD-7530A ATA Device

Description: CD-ROM Drive

Class Guid: {4d36e965-e325-11ce-bfc1-08002be10318}

Manufacturer: (Standard CD-ROM drives)

Service: cdrom

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

==================== Event log errors: =========================

Application errors:

==================

Error: (08/03/2013 00:06:08 PM) (Source: Application Error) (User: )

Description: Faulting application NMIndexStoreSvr.exe, version 3.3.8.0, time stamp 0x4860cce5, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000096, fault offset 0x02020202,

process id 0xdd4, application start time 0xNMIndexStoreSvr.exe0.

Error: (08/01/2013 00:40:43 PM) (Source: Application Error) (User: )

Description: Faulting application NMIndexStoreSvr.exe, version 3.3.8.0, time stamp 0x4860cce5, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x02020202,

process id 0xdc0, application start time 0xNMIndexStoreSvr.exe0.

Error: (07/31/2013 00:22:04 PM) (Source: Application Error) (User: )

Description: Faulting application NMIndexStoreSvr.exe, version 3.3.8.0, time stamp 0x4860cce5, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x07070707,

process id 0x9fc, application start time 0xNMIndexStoreSvr.exe0.

Error: (07/29/2013 10:29:39 PM) (Source: Application Error) (User: )

Description: Faulting application NMIndexStoreSvr.exe, version 3.3.8.0, time stamp 0x4860cce5, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x02020202,

process id 0xd20, application start time 0xNMIndexStoreSvr.exe0.

Error: (07/29/2013 00:32:28 PM) (Source: Application Error) (User: )

Description: Faulting application NMIndexStoreSvr.exe, version 3.3.8.0, time stamp 0x4860cce5, faulting module NMIndexStoreSvr.exe, version 3.3.8.0, time stamp 0x4860cce5, exception code 0xc0000409, fault offset 0x001100a2,

process id 0xe84, application start time 0xNMIndexStoreSvr.exe0.

Error: (07/27/2013 04:19:21 AM) (Source: Application Error) (User: )

Description: Faulting application NMIndexStoreSvr.exe, version 3.3.8.0, time stamp 0x4860cce5, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x07070707,

process id 0xd54, application start time 0xNMIndexStoreSvr.exe0.

Error: (07/25/2013 03:34:54 PM) (Source: Application Hang) (User: )

Description: The program Explorer.EXE version 6.0.6002.18005 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Problem Reports and Solutions control panel.

Process ID: 804

Start Time: 01ce882e5bd00c4f

Termination Time: 0

Error: (07/22/2013 09:23:58 AM) (Source: Application Error) (User: )

Description: Faulting application regsvr32.exe, version 6.0.6000.16386, time stamp 0x4549b3c7, faulting module ntdll.dll, version 6.0.6002.18541, time stamp 0x4ec3e3d5, exception code 0xc0000005, fault offset 0x00048762,

process id 0xc04, application start time 0xregsvr32.exe0.

Error: (07/19/2013 02:32:31 PM) (Source: Application Error) (User: )

Description: Faulting application NMIndexStoreSvr.exe, version 3.3.8.0, time stamp 0x4860cce5, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x02020202,

process id 0xedc, application start time 0xNMIndexStoreSvr.exe0.

Error: (07/19/2013 02:01:20 PM) (Source: MsiInstaller) (User: Foxy)

Description: Product: Ask Shopping Toolbar -- Error 25001. The following applications must be closed before continuing the uninstall:

Google Chrome

System errors:

=============

Error: (08/03/2013 00:04:39 PM) (Source: Service Control Manager) (User: )

Description: SABKUTIL

Error: (08/03/2013 00:04:39 PM) (Source: Service Control Manager) (User: )

Description: Parallel port driver%%1058

Error: (08/02/2013 10:54:14 PM) (Source: Service Control Manager) (User: )

Description: ScRegSetValueExWFailureActions%%5

Error: (08/01/2013 00:38:54 PM) (Source: Service Control Manager) (User: )

Description: SABKUTIL

Error: (08/01/2013 00:38:54 PM) (Source: Service Control Manager) (User: )

Description: Parallel port driver%%1058

Error: (07/31/2013 10:57:46 PM) (Source: Service Control Manager) (User: )

Description: ScRegSetValueExWFailureActions%%5

Error: (07/31/2013 00:23:08 PM) (Source: Service Control Manager) (User: )

Description: SABKUTIL

Error: (07/31/2013 00:23:08 PM) (Source: Service Control Manager) (User: )

Description: QuickPlay Task Scheduler (QTS)QuickPlay Background Capture Service (QBCS)%%1070

Error: (07/31/2013 00:23:08 PM) (Source: Service Control Manager) (User: )

Description: QuickPlay Background Capture Service (QBCS)

Error: (07/31/2013 00:20:53 PM) (Source: Service Control Manager) (User: )

Description: Parallel port driver%%1058

Microsoft Office Sessions:

=========================

Error: (11/23/2011 03:40:49 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 8, Application Name: Microsoft Office Publisher, Application Version: 12.0.6546.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 4226 seconds with 420 seconds of active time. This session ended with a crash.

Error: (01/11/2011 02:02:02 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6539.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 136 seconds with 60 seconds of active time. This session ended with a crash.

Error: (08/13/2010 10:46:53 AM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6535.5005, Microsoft Office Version: 12.0.6425.1000. This session lasted 282 seconds with 240 seconds of active time. This session ended with a crash.

Error: (07/30/2010 02:14:12 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6535.5005, Microsoft Office Version: 12.0.6425.1000. This session lasted 145 seconds with 120 seconds of active time. This session ended with a crash.

Error: (07/28/2010 00:44:35 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6535.5005, Microsoft Office Version: 12.0.6425.1000. This session lasted 533 seconds with 0 seconds of active time. This session ended with a crash.

Error: (07/19/2010 11:51:54 AM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6535.5005, Microsoft Office Version: 12.0.6425.1000. This session lasted 65 seconds with 60 seconds of active time. This session ended with a crash.

Error: (07/13/2010 10:19:34 AM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6500.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 37 seconds with 0 seconds of active time. This session ended with a crash.

Error: (04/03/2010 06:31:22 AM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 11 seconds with 0 seconds of active time. This session ended with a crash.

Error: (01/21/2010 04:34:54 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 277 seconds with 180 seconds of active time. This session ended with a crash.

Error: (01/15/2010 04:19:16 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6504.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 1629 seconds with 540 seconds of active time. This session ended with a crash.

CodeIntegrity Errors:

===================================

Date: 2013-08-03 12:29:58.939